Security Directory

ERA Architects Inc. is a Canadian award-winning architecture and planning firm specializing in heritage conservation, adaptive reuse, and urban design. The firm focuses on renewing and improving the built environment through conservation and reactivation strategies. Their market position is strong within the Canadian architecture sector, supported by a portfolio of significant projects and a professional leadership team. Technically, the website is built on WordPress with modern SEO and analytics tools, demonstrating a mature digital presence with good mobile optimization and user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and explicit privacy policies. Overall, the firm presents a credible and professional online presence with room for enhanced privacy compliance and security transparency.

B

British Pacific Properties Limited

britishproperties.com

57

British Pacific Properties Limited is a well-established real estate developer focused on creating exceptional residential communities in West Vancouver, Canada. With a legacy dating back to 1931, the company emphasizes quality, nature, and lifestyle in its developments. The website serves as a professional platform to showcase their communities, history, and upcoming projects, targeting prospective home buyers and residents interested in upscale neighborhoods. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and GSAP for interactive elements. Hosting is provided by GreenGeeks, and the site includes Google Tag Manager and Usercentrics for analytics and consent management, indicating a moderate level of digital maturity. The site is mobile optimized and has good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no published security policy or incident response contact, which could be improved. Privacy and cookie policies are present and include consent mechanisms, supporting GDPR compliance. Overall, the website is professional, trustworthy, and secure for its business purpose. Recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and enhancing accessibility to further strengthen the security posture and compliance.

A

Andersen Construction

andersen-const.com

55

Andersen Construction is a well-established general contractor and construction management firm operating primarily in the Pacific Northwest of the United States, with offices in Portland, Seattle, Boise, and Eugene. Founded in 1950, the company emphasizes collaborative delivery methods such as Design-Build, Integrated Project Delivery (IPD), and Construction Management/General Contracting (CM/GC). Their business model focuses on serving commercial, industrial, healthcare, education, and multifamily housing sectors with a strong reputation for integrity, safety, and client-first service. The website reflects a medium-sized, employee-owned company with a consistent brand and a professional online presence. Technically, the website uses a moderate technology stack including jQuery, Google Analytics, and Elfsight widgets for enhanced user experience and social proof. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and privacy compliance. The absence of explicit privacy and cookie policies and lack of security incident contacts indicate gaps in compliance and security transparency. Security posture is adequate but could be improved by implementing standard security headers and providing clear data protection and incident response information. The WHOIS data is unavailable, which raises concerns about domain legitimacy despite the professional content and strong business signals. Overall, the website is trustworthy and professional but would benefit from enhanced security and compliance disclosures. Strategic recommendations include improving privacy and cookie policies, adding security headers, establishing incident response contacts, and clarifying domain registration details to enhance trust and compliance.

R

RUBY PRESS GmbH

ruby-press.com

62

Ruby Press GmbH operates a specialized e-commerce platform focused on publishing and selling books related to architecture, art, and cultural spatial practices. Established in 2008 and based in Berlin, Germany, the company targets academics, architects, and cultural practitioners with a curated selection of niche publications. The website demonstrates a professional and consistent brand presence with clear product listings and company information. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies such as jQuery and Google Fonts, and hosted likely via IONOS SE. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a cookie consent banner and privacy policy present, though GDPR compliance is not explicitly stated. Overall, the website is trustworthy and professionally maintained, with room for security and privacy enhancements.

Stiftung Buchkunst is a well-established non-profit organization based in Germany that promotes exemplary book design through prestigious competitions such as 'Die Schönsten Deutschen Bücher', 'Förderpreis für junge Buchgestaltung', and 'Best Book Design from all over the World'. The organization targets the book industry, designers, publishers, and the general public interested in book arts. Their business model centers on cultural promotion and recognition of design excellence rather than commercial sales. The website reflects a mature digital presence with clear navigation, multilingual support, and a focus on content quality. Technically, the site uses standard web technologies with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. Overall, the site is trustworthy and professional, with transparent contact information and GDPR compliance.

Affichage Public is a small Swiss cultural association founded in 2015 dedicated to promoting Swiss graphic design as a cultural heritage through exhibitions and events primarily in the French-speaking region of Switzerland. The website serves as an informational platform highlighting upcoming exhibitions, partner organizations, and the association's mission. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with jQuery, without advanced CMS or analytics integrations. Mobile optimization and accessibility are basic but functional. Security posture is minimal with no visible security headers or policies, and no HTTPS verification data available. Privacy and cookie policies are absent, which impacts compliance and user trust. The WHOIS data is consistent with the association's profile, showing no privacy protection and appropriate domain age. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

A

Arno Mathies

arnomathies.com

43

Arno Mathies operates a website showcasing artistic and design projects primarily focused on furniture, tableware, and accessories crafted from diverse materials such as aluminum, porcelain, cardboard, and HDPE. The site functions as a portfolio and an online shop targeting art and design enthusiasts interested in unique, handcrafted pieces. The business model appears to be direct sales combined with portfolio presentation, positioning itself in a niche artistic design market. The domain has been registered since 2011, indicating a mature presence in its field. Technically, the website uses Bootstrap 4 and common JavaScript libraries served via CDN, indicating a standard modern front-end stack. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Hosting is managed through kreativmedia.ch based on DNS information. No CMS or advanced platform detected, suggesting a custom or static site. From a security perspective, the site lacks critical security headers and does not enable DNSSEC, which are areas for improvement. There is no visible privacy or cookie policy, and no forms or data collection mechanisms are present, reducing exposure but also indicating limited user interaction. The domain registration is consistent and legitimate, with no suspicious patterns detected. Overall, the website is functional and safe but could benefit from enhanced security practices, privacy compliance, and richer business information to improve trust and professionalism.

P

Paperform

paperform.co

64

Paperform is a technology company offering an AI-powered form builder platform designed to simplify the creation of customizable online forms. The website positions itself as a flexible and smart solution for businesses and individuals seeking to streamline workflows and data collection. The company appears to have a medium-sized presence in the SaaS market with a focus on user-friendly design and AI integration. Technically, the website is built using modern frameworks such as React and Gatsby, ensuring fast performance, good SEO, and excellent mobile optimization. However, the site lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security posture is generally good with HTTPS enabled, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, but enhancing privacy compliance and security transparency would strengthen its risk profile.

Z

ZeroEnergy Design, P.C.

zeroenergy.com

58

ZeroEnergy Design, P.C. is a small professional services firm specializing in sustainable architecture, design, and engineering. Their focus is on creating beautiful, healthy buildings that improve the living environment, with expertise in net-zero, passive house, multifamily, and institutional projects. The company targets clients seeking environmentally responsible building solutions and operates primarily in the United States. The website is professionally designed using the Squarespace platform, featuring good content quality, clear navigation, and mobile optimization. Technical infrastructure includes modern web technologies such as Google Tag Manager and reCAPTCHA, ensuring a moderate level of digital maturity. Security posture is strong with HTTPS and HSTS enabled, though some security headers and policies could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency but does not currently detract from the website's legitimacy based on content and business presence. Overall, the website presents a trustworthy and professional image with room for improvement in privacy and security disclosures.

N

Netflix

netflix.com

75

Netflix is a leading global streaming entertainment service offering unlimited films, series, and more via subscription. The website targets a general audience in Finland with localized language options and provides a seamless user experience for streaming content across multiple devices. The business model is subscription-based, positioning Netflix as a dominant player in the media industry with a strong brand presence and consistent global branding. Technically, the site employs modern web technologies including JavaScript and React, with cookie consent managed by OneTrust, ensuring compliance with privacy regulations such as GDPR. The site is well-optimized for mobile and desktop platforms, delivering fast performance and good accessibility. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers and incident response information are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance, though WHOIS data is unavailable likely due to registry restrictions. Strategic recommendations include enhancing transparency around security policies and vulnerability disclosures to further strengthen trust.

G

GitHub

github.blog

71

GitHub Blog is a professionally maintained content platform operated by GitHub, Inc., a leading technology company specializing in software development and collaboration tools. The blog serves as a key communication channel to deliver updates, insights, and educational content to developers worldwide, reinforcing GitHub's market position as a premier developer platform. The site targets software developers, engineers, and technology professionals, offering resources on AI, security, enterprise software, and developer skills. Technically, the website is built on WordPress with modern SEO and accessibility optimizations, ensuring fast performance and a responsive user experience across devices. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and vulnerability disclosure mechanisms are not prominently published on the blog. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website demonstrates high business credibility, technical maturity, and content quality, supporting GitHub's brand and community engagement objectives.

G

GitHub

githubuniverse.com

60

GitHub Universe 2025 is a flagship global developer event hosted by GitHub, a leading technology company and subsidiary of Microsoft. The event focuses on innovation, collaboration, and AI-powered software development, targeting developers, engineers, and technology professionals worldwide. The website provides comprehensive event details including dates, location, agenda, speakers, ticketing options, and highlights from previous years. The business model centers on ticket sales for in-person attendance and free virtual participation, positioning GitHub Universe as a premier industry event with strong brand recognition and market presence. Technically, the website is built using modern web technologies such as React and Next.js, ensuring fast performance, mobile optimization, and good accessibility. The site is hosted with reputable DNS and registrar services, and employs HTTPS with strong domain registration security flags. However, there is room for improvement in DNS security (DNSSEC not enabled) and in publishing comprehensive privacy and security policies. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and domain locking. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of explicit privacy, cookie, and security policies, as well as contact information for incident response, represents a compliance gap that should be addressed to enhance trust and regulatory adherence. Overall, GitHub Universe 2025's website is professional, trustworthy, and technically sound, supporting its role as a major industry event. Strategic improvements in privacy compliance and security transparency will further strengthen its security posture and user confidence.

E

Eventible

eventible.com

77

Eventible is a specialized online platform founded in 2020 that provides business professionals with trusted reviews and discovery tools for business events and conferences. The platform targets professionals seeking to maximize their event ROI by offering curated event information sorted by industry, priority, and event type. With over 60,000 monthly users, Eventible positions itself as a reliable source for event insights. Technically, the website leverages modern web technologies including Next.js, React, and integrates multiple analytics and marketing tools such as HubSpot, Microsoft Clarity, and AdRoll, ensuring a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and uses security headers, but lacks publicly available incident response or vulnerability disclosure policies. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, though the professional presentation and structured data with founder information provide trust signals. Overall, Eventible presents a solid business and technical profile with room for improvement in transparency and security policy publication.

C

COREhub, S.R.L.

sessionize.com

66

Sessionize.com is a professional SaaS platform specializing in Call for Papers, Schedule, and Speaker Management software for conferences and events. Founded in 2016 and registered under COREhub, S.R.L., the platform serves a global audience including over 246,000 speakers and 9,700 events. The website presents a clear, well-structured, and visually appealing interface that targets event organizers and speakers, offering a comprehensive suite of event management tools. The business model is subscription-based with tiered pricing for community, professional, and bulk event usage. Technically, the website leverages modern cloud infrastructure hosted on Microsoft Azure, uses popular libraries such as FontAwesome and Google Fonts, and integrates telemetry and analytics tools like Microsoft Application Insights, Google Analytics, and Microsoft Clarity. The site is mobile optimized and accessible, with good SEO practices and fast performance. However, no CMS or major frameworks were explicitly detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. There is no visible security policy, incident response information, or vulnerability disclosure mechanism published. Privacy and cookie policies are not found on the landing page, indicating gaps in privacy compliance. The WHOIS data is transparent and consistent with the business profile, enhancing trustworthiness. Overall, Sessionize.com is a credible and professional platform with strong business credibility and technical implementation. The main areas for improvement include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear security and incident response policies to strengthen compliance and user trust.

P

Programming Language Group at Delft University of Technology

webdsl.org

57

WebDSL is an academic project developed by the Programming Language Group at Delft University of Technology, providing a domain-specific language for modeling web applications with a rich data model. The website serves as a documentation hub with tutorials, references, and source code links, targeting developers and researchers interested in domain-specific languages and web application modeling. The project is positioned as a niche academic tool with a small but focused audience. Technically, the site is built using MkDocs with the Material theme, hosted likely on GitHub Pages, and employs modern web standards including HTTPS and responsive design. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks DNSSEC and security headers which could enhance protection. Privacy compliance is minimal with no visible privacy or cookie policies and no contact information for incident response or data protection officers. Overall, the site is trustworthy and professional for its academic purpose but could improve compliance and security transparency.

R

Remo

remo.co

62

Remo is a technology company specializing in virtual event management platforms that enable immersive online events with real connections and engagement. Their platform supports virtual conferences, webinars, networking, and hybrid events, positioning them as a leading SaaS provider in the virtual events space. The company targets event organizers, enterprises, educational institutions, and associations, offering a comprehensive suite of interactive tools to enhance attendee experience. Technically, Remo's website is built on modern web technologies including Webflow CMS, Google Fonts, Microsoft Clarity for analytics, Visual Website Optimizer for A/B testing, and Usercentrics for cookie consent management. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements security headers. It uses Google reCAPTCHA Enterprise to protect forms and has a cookie consent mechanism aligned with GDPR. However, explicit security policies and incident response information are not publicly available, indicating room for improvement in transparency. Overall, Remo presents a professional, trustworthy, and compliant online presence with a strong market position. The risk profile is low, with no detected vulnerabilities or suspicious activity. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officer contacts and certifications.

G

GitNation

gitnation.com

64

GitNation is a technology-focused content platform specializing in React and JavaScript development. It offers talks, workshops, and articles primarily targeting developers and engineers interested in these technologies. The website demonstrates a mature and professional presence with a domain registered since 2015 and a consistent brand identity. Technically, the site leverages modern frameworks such as React and Next.js, uses Cloudflare for DNS and likely hosting, and integrates error monitoring and analytics tools like Sentry and Gauges. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and well-positioned in its niche but could improve compliance and security transparency.

T

Team Tito

tito.io

61

Tito is a small technology company offering a simple and powerful event registration software platform. Their website presents a professional and modern design focused on event organizers seeking fast and flexible ticketing solutions. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js and BootstrapVue, with deferred script loading and privacy-conscious analytics integration. Security posture is adequate with HTTPS enforced and minimal tracking, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the website is functional and trustworthy but would benefit from enhanced transparency and security documentation.

R

RiversideFM Inc

riverside.com

72

RiversideFM Inc operates a sophisticated SaaS platform focused on high-quality remote podcast and video recording, editing, and live streaming. The company targets podcasters, video interviewers, marketers, and businesses seeking professional-grade media production tools powered by AI. Their market position is strong with a comprehensive suite of services including 4K local recording, AI-driven editing, transcription, captions, and live streaming capabilities. The platform is supported by a modern technical infrastructure leveraging Webflow CMS, Cloudflare DNS, Google Tag Manager, Segment Analytics, and feature flag management via LaunchDarkly. Security posture is solid with HTTPS enforcement, clientTransferProhibited domain status, and secure authentication via Google One Tap, though improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Overall, the website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence with high trustworthiness and user engagement.

L

LaunchDarkly

launchdarkly.com

77

LaunchDarkly is a leading feature management platform founded in 2014, providing developers and enterprises with tools to safely deliver software through feature flags, experimentation, and AI-driven configurations. The company positions itself as a critical enabler for modern software delivery, emphasizing reliability, automation, and data-driven decision making. Their platform integrates deeply into developer workflows and supports a wide range of SDKs and integrations, targeting developers, DevOps, SREs, and product managers. Technically, the website leverages modern frameworks such as Gatsby and React, hosted on Netlify with AWS DNS, and employs comprehensive analytics and marketing tools including Segment, Google Analytics, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and reputable third-party services, though explicit security headers could be more visible. The WHOIS data confirms domain legitimacy with consistent registration details and a long-term expiry. Overall, the site demonstrates high professionalism, technical maturity, and compliance readiness.

S

Spark Hire | Recruit

comeet.co

68

Spark Hire | Recruit operates a professional Applicant Tracking System (ATS) platform branded as Spark Hire Recruit, targeting globally distributed teams and hiring managers seeking to streamline recruitment processes. The website presents a modern, user-friendly interface emphasizing collaboration, automation, and scheduling features to accelerate hiring. The company positions itself as a technology provider in the recruitment SaaS market with a medium-sized business profile. Technically, the website is built on WordPress CMS with Bootstrap and jQuery frameworks, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar. The site demonstrates good SEO practices and mobile optimization but lacks explicit privacy and terms of service pages. Security posture is strong with HTTPS enforcement and security headers, though no vulnerability disclosure or incident response contacts are visible. WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the site is professional and trustworthy in content but requires improved transparency on privacy, contact, and domain registration details.

G

Groux.ch

groux.ch

49

Groux.ch is a small Swiss-based business specializing in energy healing, personalized therapy, workshops, and spiritual services. The website offers a range of services including geobiology, corporate analysis, and an online boutique with therapeutic objects and courses. The business targets individuals interested in personal transformation and spiritual development, positioning itself as a niche provider in the energy sector within the French-speaking region of Switzerland. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, integrating modern payment solutions like Stripe and social media platforms such as Facebook, Instagram, and YouTube. The site demonstrates good design quality, mobile responsiveness, and SEO optimization with structured data and Open Graph tags. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks explicit security headers and privacy compliance policies, which are areas for improvement. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

P

Polygravia Innovation Visuelle SA / Polygravia Arts Graphiques SA

polygravia.ch

57

Polygravia is a Swiss-based company specializing in advanced printing, packaging, environmental design, and advertising realizations. It holds a strong market position as a pioneer in Digital Foil technology in Europe and operates multiple subsidiaries focused on different aspects of visual communication and prototyping. The website reflects a professional and consistent brand image targeting business clients seeking high-quality printing and design services. Technically, the site is built on WordPress with modern tools such as Gravity Forms, Google Analytics, and CookieYes for consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and an ongoing ISO 27001 certification process, although some compliance documentation like privacy policy and terms of service are missing. Overall, the site is trustworthy, well-structured, and compliant with basic privacy and security standards, with room for improvement in transparency and accessibility.

Duo d’Art is a Swiss screen printing company established in 1932, recognized as the oldest in its sector in Switzerland. It specializes in screen printing and digital printing services for advertising, art prints, and large visual communication surfaces, including advertising on public transport. Since 2016, it operates as part of the Remarq SA group, enhancing its technical and human resources. The website presents clear contact information and certifications but lacks privacy and cookie policies, which are important for compliance. Technically, the site is basic with no detected CMS or advanced frameworks, and minimal mobile optimization. Security posture is weak due to missing security headers and unclear SSL status. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the website is functional but could improve in security, privacy compliance, and technical modernization.

T

TBS, La Buona Stampa sa

labuonastampa.ch

51

LaBuonaStampa is a specialized printing house based in Lugano, Switzerland, with a century-long tradition in high-quality art book printing and packaging. The company supports clients through all phases of the printing process, emphasizing craftsmanship and client involvement. The website showcases notable art projects and highlights the company's expertise in producing artistic publications. Technically, the site is built on WordPress with modern plugins like WPBakery and Slider Revolution, and it uses Google Analytics and Google Maps APIs. The site is mobile-optimized and has good SEO practices but lacks privacy and cookie policies, which impacts compliance. Security posture is decent with HTTPS enabled but missing security headers and formal security policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

The website younesklouche.com serves as a personal portfolio for photographer Younès Klouche, showcasing photographic projects under categories such as 'Personnal' and 'Comissions'. The site targets a general audience interested in photography and artistic commissions. The business model is primarily personal branding and portfolio display, with no direct e-commerce or transactional features evident. The domain is registered since 2017 with OVH sas, a reputable hosting and registrar provider, indicating a stable and legitimate online presence. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for UI elements. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism or privacy policies are present, which is a compliance gap. The site is hosted on OVH infrastructure with basic SSL configuration and no DNSSEC enabled. Performance and mobile optimization are basic but functional. From a security perspective, the site uses HTTPS but lacks security headers such as Content-Security-Policy or X-Frame-Options, which could improve protection against common web attacks. No vulnerability disclosures or incident response contacts are provided. The absence of privacy and cookie policies and lack of GDPR compliance indicators reduce trust and compliance posture. No suspicious or malicious content was detected. Overall, the website is a straightforward personal portfolio with moderate technical implementation and basic security posture. Strategic improvements include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and enhancing GDPR compliance. These steps will improve trustworthiness, security, and legal compliance, benefiting both the site owner and visitors.

Uldry AG is a well-established Swiss printing and visual communication company with over 56 years of experience. They offer a broad portfolio of printing services including digital print, fine art prints, and advertising technology products, emphasizing ecological and sustainable production methods. Their market position is strong locally with a medium-sized business model targeting both B2B and B2C customers. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript libraries and tracking tools with good mobile optimization and SEO practices. Security posture is solid with HTTPS, secure forms, and cookie consent management, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR-aligned consent mechanisms. Overall, the site is trustworthy and professionally maintained with transparent business and contact information.

O

Omnitype

omnitype.ch

52

Omnitype is a small Swiss online type foundry based in Lausanne, specializing in the design, production, and distribution of typefaces. The company is run by Leonardo Azzolini and Simon Mager and offers trial versions and custom font projects. The website presents a professional and consistent brand image targeting designers and clients interested in typography. Technically, the site uses standard HTML5 and CSS3 with moderate performance and good mobile optimization but lacks advanced frameworks or CMS. Security posture is basic with no detected security headers or policies, and no HTTPS status was explicitly provided. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is safe with no adult or questionable content and minimal user tracking.

O

Oneleet Inc.

oneleet.com

68

Oneleet Inc. is a small technology company founded in 2022, specializing in full-stack cybersecurity and compliance automation solutions. Their platform offers services such as SOC 2 compliance, ISO 27001 certification support, penetration testing, and assistance with HIPAA, PCI, and GDPR compliance. The company positions itself as a security-first compliance provider targeting businesses seeking to streamline their security and compliance processes. Technically, the website is built using Framer CMS and integrates multiple analytics and marketing tools including Google Analytics, Segment, Posthog, and HubSpot, indicating a mature digital marketing infrastructure. Security-wise, the site uses HTTPS with good SSL configuration but lacks some security headers and formal privacy and cookie policies, which are critical for compliance and user trust. The absence of WHOIS registration data is a concern, though the professional website and clear business focus mitigate some risk. Overall, Oneleet presents as a legitimate cybersecurity service provider with room for improvement in privacy compliance and security best practices.

S

SavvyCal, Inc.

savvycal.com

68

SavvyCal, Inc. operates a professional SaaS scheduling platform designed to simplify meeting bookings for individuals and teams. The company positions itself as a niche player with innovative features such as calendar overlays, team scheduling modes, and round robin scheduling. Their market focus is on professionals and teams seeking efficient and user-friendly scheduling solutions. The website reflects a mature digital presence with modern technologies including Inertia.js, Cloudflare CDN, Stripe for payments, and privacy-conscious analytics via Fathom. Security is well-implemented with HTTPS, security headers, and CSRF protections, although DNSSEC is not enabled. Privacy policies and terms of service are comprehensive and GDPR compliant, supporting trust and compliance. Overall, the site is professional, fast, and user-friendly, with strong branding and clear business information.

D

Diplom-Designer Jonas List

jonaslist.de

48

Jonas List operates as a freelance communication designer and full stack web developer based in Germany, specializing in creative coding and advanced web technologies such as WebGL and Web 3D. The business targets clients seeking innovative and boundary-pushing web design solutions. The website serves as a professional portfolio showcasing selected projects and providing clear contact information. Technically, the site is built using modern frameworks like Next.js and React, hosted behind Cloudflare DNS services, and includes minimal but effective analytics via plausible.io. The design is responsive and user-friendly, with good content relevance and navigation clarity. Security posture is moderate, with HTTPS implied but no explicit security headers detected, and no privacy or cookie policies present, indicating compliance gaps. Overall, the site is legitimate and professional but would benefit from enhanced security and privacy measures.

H

Handshake®

handshake.fun

51

Handshake® is a small creative media and publishing studio based in Spain, specializing in artistic publications and studio projects. The website showcases their key publication 'The Chromatics of Flowers' by Paula Codoner and offers e-commerce capabilities for book sales. The business targets art enthusiasts and creative professionals, positioning itself as a niche player in the media industry. Technically, the website is built on the Cargo Collective platform, utilizing modern web technologies including JavaScript frameworks and analytics tools. The site is mobile-optimized and presents a professional design with good user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security hardening are recommended.

Emeis Deubel is a specialized visual communications and management agency based in Berlin, Germany, focusing on representing talents in the creative industry, particularly in photography, film, and hybrid reality. The company positions itself as a niche player offering artist management and creative representation services, targeting clients and professionals within the creative sector. The website reflects a professional and well-structured digital presence with a clear portfolio showcasing various artists and projects. Technically, the site employs modern web technologies including AngularJS, Vimeo video integration, and Google Analytics for tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS but lacks important security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS registration data raises some concerns about domain legitimacy, although the website content and contact information suggest a legitimate business. Overall, the site demonstrates a solid business and technical foundation but would benefit from enhanced security and privacy compliance measures.

M

Marc Morro

marcmorro.com

61

Marc Morro is a professional furniture designer based in Barcelona, specializing in creative and commissioned/custom furniture design. The website serves as a portfolio showcasing various furniture projects and collections, targeting individuals and galleries interested in unique designer furniture. The site is built using modern web technologies such as SvelteKit, ensuring a fast, mobile-optimized, and accessible user experience. However, the absence of WHOIS data raises concerns about the domain's registration legitimacy, which impacts overall trust. Security posture is moderate with HTTPS implied but lacking security headers and formal privacy or cookie policies. Contact information is clearly provided, enhancing business credibility.

R

Ruhr-Universität Bochum

rub.de

69

Ruhr-Universität Bochum is a large, well-established German university with a strong focus on education, research, and societal impact. The website reflects a mature digital presence with comprehensive content targeting students, researchers, alumni, and partners. The technical infrastructure is modern, leveraging Drupal 10 CMS and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and privacy best practices, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

F

Fontlab Ltd, Inc.

fontlab.com

45

FontLab Ltd, Inc. is a specialized software company focused on providing professional font editing and conversion tools for Mac and Windows platforms. Their product suite includes FontLab 8, Fontographer, TypeTool, TransType, and FontLab Pad, catering to a wide range of users from beginners to advanced type designers. The company maintains a strong market position as an established provider in the typography and design software industry, offering educational discounts and comprehensive support channels. The website reflects a professional and consistent brand image with clear product information and pricing.

Tiro Typeworks is a specialized digital type foundry founded by John Hudson and Ross Mills, focusing on creating custom fonts for multilingual publishing and computing. The company operates a professional and well-structured website showcasing a broad catalog of fonts, articles, and licensing information. Their market position is that of a niche player with international reach, serving publishers, typographers, and scholars. The business model revolves around font licensing and custom font creation, targeting a specialized audience in the technology and publishing sectors. Technically, the website is built on Craft CMS and employs modern web technologies including JavaScript, CSS, and HTML5. It uses Cloudflare Turnstile captcha for form security and Fathom Analytics for privacy-conscious visitor tracking. The site is mobile-optimized, SEO-friendly, and performs well with fast loading times and good accessibility features. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy, though no cookie consent mechanism was found. Contact information is limited to a subscription form, with no direct emails or phone numbers publicly listed. Overall, the website is trustworthy and professional, though the absence of WHOIS data for the domain reduces domain registration transparency and slightly impacts trust. Strategic improvements include adding security headers, publishing security and incident response policies, and implementing cookie consent to enhance privacy compliance.

J

Jeremy Tankard Typography

typography.net

65

Jeremy Tankard Typography is an independent digital type foundry specializing in unique font designs. Established in 1998, the company offers a curated selection of font families targeting design professionals and creative agencies. The website showcases their font collections with rich visual samples and provides navigation to explore, license, and support their products. Technically, the site uses a custom-built platform leveraging jQuery and modern font loading techniques, hosted behind Cloudflare DNS. Security posture is solid with HTTPS enabled and domain management best practices, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is addressed with a cookie consent banner and a basic cookie policy, but lacks a detailed privacy policy or terms of service. Overall, the site is professional, trustworthy, and safe for general audiences.

exljbris.com is the official website of exljbris Font Foundry, owned by Jos Buivenga, specializing in font design and distribution. The site offers a portfolio of proprietary fonts including free and commercial options, targeting graphic designers and typographers. The business operates as a small niche foundry with a long-established domain since 2007, indicating stable market presence. Technically, the website uses legacy font replacement technologies such as Cufon and SIFR, alongside JavaScript libraries like Prototype.js and Scriptaculous. Hosting is provided via Argewebhosting, with moderate performance and basic mobile optimization. SEO and accessibility features are minimal, reflecting a dated technical infrastructure. Security posture is basic with no DNSSEC, no visible security headers, and mixed content loading (http and https). The domain is protected against unauthorized transfers but lacks modern security enhancements. Privacy compliance is weak, with no privacy or cookie policies and moderate user tracking via StatCounter and Google Analytics without clear disclosures. Overall, the website is functional and moderately trustworthy but requires modernization in security, privacy compliance, and technical implementation to improve user trust and regulatory adherence.

T

TypeTogether

type-together.com

68

TypeTogether is an independent type foundry specializing in high-quality retail fonts and custom type design services, primarily targeting editorial and corporate branding markets. The company offers a diverse font catalog and membership programs, positioning itself as a niche player with a strong international presence. The website demonstrates professional design, clear navigation, and comprehensive product information, supporting a positive user experience and business credibility. Technically, the site uses modern web technologies including jQuery and CookieYes for consent management, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response information. The absence of WHOIS data for the domain raises concerns about registration transparency, but the website content and business operations appear legitimate and professional overall.

H

HvD Fonts

hvdfonts.com

64

HvD Fonts is a specialized type foundry offering high-quality original retail fonts and custom font solutions. The company targets designers and businesses seeking professional typography products. Their website reflects a niche market position with a clear business model focused on font licensing and custom typeface design. The digital infrastructure employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for performance and marketing insights. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

V

Visualio s.r.o.

visualio.space

46

Visualio s.r.o. is a Czech-based creative studio specializing in brand design, web development, and advertising campaigns. Established in 2015, the company serves businesses seeking to build successful brands, demonstrated by a strong portfolio and client testimonials from reputable companies. The website is professionally designed, multilingual, and optimized for modern devices, reflecting a mature digital presence. Technically, the site employs modern JavaScript frameworks like Alpine.js, integrates Google Analytics, Tag Manager, reCAPTCHA, and Smartlook for analytics and security. Security posture is solid with HTTPS and bot protection, though lacks some advanced security headers and published policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies or consent mechanisms. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, Visualio presents a trustworthy and professional digital footprint with room for improvement in privacy and security transparency.

I

Institut plánování a rozvoje hl. města Prahy

geoportalpraha.cz

58

Geoportál Praha is the official geographic data and mapping portal for the city of Prague, operated by the Institut plánování a rozvoje hl. města Prahy. It provides a comprehensive suite of map applications, data services, and urban planning resources targeted at public sector users, urban planners, GIS professionals, and the general public. The portal serves as a central hub for accessing spatial data and related services for the city, reinforcing its position as a key government resource in the Czech Republic. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Microsoft Azure infrastructure, and optimized for performance and mobile use. Security posture is strong with HTTPS, appropriate security headers, and no detected vulnerabilities or exposed sensitive data. Privacy compliance is evident with a cookie consent mechanism and a privacy policy, though terms of service and explicit security policies are not published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

D

Datamart Inc.

komito.net

57

Komito Analytics is an open-source enhancement tool designed to augment popular web analytics software, providing advanced visitor behavior metrics and integration support. The company behind it, Datamart Inc., is a small technology firm based in the United States, founded in 2017. The website presents a professional and consistent brand image, emphasizing transparency and community engagement through open-source code availability and partner collaborations. Technically, the site leverages modern web standards, Cloudflare hosting, and offers multiple integration methods including Google Tag Manager, WordPress plugin, and NPM package. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Privacy compliance is basic, lacking explicit privacy and cookie policies, which should be addressed to enhance user trust and regulatory adherence. Overall, the website is trustworthy, well-structured, and serves a niche market of analytics professionals and digital marketers.

F

FOCUS

focus-agency.cz

48

FOCUS is a well-established marketing and social research agency operating primarily in the Czech Republic and Slovakia. The company offers a broad range of research services including market research, public opinion polling, internal organizational studies, media research, and sector-specific analyses. With over 20 years of experience and international partnerships such as with Gallup, FOCUS positions itself as a trusted provider of high-quality, customized research solutions. The website reflects a professional and business-focused approach, targeting clients from various sectors including government, media, and private enterprises. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and the Foundation CSS framework. It uses HTTPS for secure communications and integrates New Relic for performance monitoring. The site is moderately optimized for mobile devices and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. The absence of WHOIS data for the domain reduces transparency and trustworthiness, although the website content and business information appear legitimate. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, FOCUS presents a credible and professional online presence with solid business information and technical infrastructure. Enhancements in privacy compliance, security headers, and domain transparency would further strengthen its security posture and trustworthiness.

The website lltrck.com is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, services, or technical infrastructure. The domain is registered with GoDaddy.com, LLC since 2020 and uses Amazon AWS DNS servers, indicating a potentially legitimate hosting setup. However, the lack of accessible content and absence of security or privacy policies significantly limits trust and credibility assessment. No contact information or business details are available on the site, and no security headers or SSL configuration details were provided. Overall, the site appears to be either restricted or improperly configured, resulting in a very low AI score and high risk for users or partners.

T

typo.social

typo.social

59

typo.social is an independent Mastodon social networking instance targeting typo and type enthusiasts. It offers an open registration model and provides features typical of Mastodon servers such as trending posts, hashtag exploration, and user profiles. The platform is built on Mastodon version 4.4.5, leveraging modern web technologies including React and WebSockets for real-time streaming. The website demonstrates good content quality and user experience with a consistent brand identity. However, it lacks some advanced privacy and security features such as cookie consent mechanisms and explicit security headers. The WHOIS data is privacy protected, which is common for social networking services, and the domain appears actively maintained. Overall, typo.social presents a legitimate and functional social platform within the fediverse ecosystem.

C

CoinDesk

coindesk.com

69

CoinDesk is a leading digital media company specializing in cryptocurrency, blockchain, and digital finance news and data. It serves a broad audience including investors, financial professionals, and crypto enthusiasts, providing real-time price data, research, events, and sponsored content. The website demonstrates a mature technical infrastructure leveraging modern frameworks like Next.js, hosted on Vercel, and integrates advanced analytics and advertising technologies. Security posture is strong with HTTPS enforcement, comprehensive security headers, and bot protection mechanisms. Privacy compliance is well addressed with clear policies and consent mechanisms. However, WHOIS data is unavailable, likely due to privacy protection, which slightly impacts domain trust analysis. Overall, CoinDesk presents a professional, trustworthy, and technically advanced platform in the cryptocurrency media space.

W

Wine Industry Network

winesalessymposium.com

56

The Wine Sales Symposium website represents a well-established annual event focused on providing wineries with expert insights and strategies to increase sales and profitability. The event is produced by the Wine Industry Network, a recognized entity in the wine industry, and targets professionals such as winery owners, marketing executives, and sales professionals. The site offers comprehensive event details, sponsor information, and registration options, positioning itself as a premier industry gathering. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted with Cloudflare DNS and GoDaddy registrar. While the site uses HTTPS and standard security practices, it lacks visible security headers and a cookie consent mechanism, which are areas for improvement. Overall, the website is professional, content-rich, and trustworthy, with moderate tracking and marketing integrations.

W

Wine Industry Network

wineindustryexpo.com

64

Wine Industry Network operates the Wine Industry Expo (WIN Expo), a major annual trade show and conference focused on the North Coast wine industry regions of California. Established in 2012, the event attracts over 3,000 wine professionals and nearly 300 exhibitors, positioning itself as the second largest wine industry show in North America. The business model centers on event organization, industry networking, education, and providing marketing and sponsorship opportunities to wine industry suppliers and professionals. The website reflects a mature digital presence with comprehensive event information, registration, and educational content targeting industry stakeholders. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI plugins, hosted behind Cloudflare DNS and CDN services. The site is mobile optimized with good SEO practices and uses tracking tools such as Google Tag Manager and Facebook Pixel for analytics and marketing. Performance is moderate with good design quality and user experience. From a security perspective, the site enforces HTTPS and domain registration includes multiple client-side prohibitions enhancing domain security. However, DNSSEC is not enabled, and there is no visible cookie consent mechanism or published security/incident response policies, indicating gaps in privacy compliance and security transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in privacy compliance, DNS security, and security policy publication would enhance its security posture and regulatory adherence.