Security Directory

E

Easy HTML5 Video

easyhtml5video.com

45

Easy HTML5 Video is a specialized software provider focused on converting videos into HTML5-compatible formats for seamless playback across devices and browsers. The company offers both free and commercial editions, targeting web developers and content creators who require easy-to-use video conversion and embedding solutions. The website presents a professional and consistent brand image with detailed product features and version history, indicating a mature and stable business presence since 2011. Technically, the website employs standard web technologies including HTML5, JavaScript, and jQuery, with Google Analytics and Google Ads tracking integrated. Hosting and DNS services are managed via Cloudflare and GoDaddy, respectively. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility and SEO features. No CMS or major frameworks are detected. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC, security headers, cookie consent mechanisms, and published security or incident response policies. These gaps represent moderate risks in compliance and security posture, especially regarding privacy regulations like GDPR. Overall, the website is functional, trustworthy, and professionally maintained but would benefit from enhanced security controls and privacy compliance measures to improve user trust and regulatory adherence.

F

Formoid

formoid.com

54

Formoid is a specialized software company offering an easy-to-use drag-and-drop form builder for web developers and businesses. The product supports multiple platforms (Windows and Mac) and provides both desktop and hosted online form solutions with responsive, retina-ready designs. The company positions itself as a niche player focusing on design quality and ease of use in the form creation market. Technically, the website uses standard web technologies including HTML5, CSS3, jQuery, and PHP for backend form handling. DNS is managed via Cloudflare, but DNSSEC is not enabled. Security posture is moderate with HTTPS enabled and Google reCaptcha integration, but lacks advanced security headers and cookie consent mechanisms. The domain is well-established since 2013, consistent with the product maturity and business claims. Contact is primarily via email support, with no phone or social media presence detected. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.

8

8b Website Builder

8b.com

57

8b Website Builder is a free and simple online platform that enables users, especially those without programming knowledge, to create fast, mobile-optimized, and Google-friendly websites quickly. The service emphasizes ease of use, modern design templates, and integration with technologies like Google AMP and PWA to enhance performance and user experience. The platform supports custom domains, SSL certificates, and site export features, positioning itself as a competitive player in the website builder market. Technically, the website leverages AMP technology, Bootstrap, jQuery, and is hosted behind Cloudflare, ensuring fast loading times and mobile responsiveness. Analytics tools such as Google Analytics and Google Tag Manager are used for user tracking and marketing insights. Security posture is solid with HTTPS enforced and domain protection statuses, though some improvements like enabling DNSSEC and publishing security policies are recommended. Privacy compliance is partially addressed with a privacy policy and terms of service available, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned in its niche.

M

Mobirise Ltd

mobirise.com

59

Mobirise Ltd operates a mature and reputable website builder platform focused on enabling users to create websites easily without coding, leveraging AI technology and drag-and-drop interfaces. The company targets individuals and small businesses seeking simple yet powerful website creation tools. Their business model combines a free core product with premium themes and extensions, positioning them well in the no-code website builder market with over 2.5 million users. Technically, the website uses modern frameworks like Bootstrap 5 and integrates analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The domain is well-registered and protected, hosted behind Cloudflare DNS, and the website is mobile-optimized with excellent design and user experience. Security posture is good with HTTPS and domain locks, but could be improved by enabling DNSSEC and publishing explicit security policies. Privacy compliance is adequate with a clear privacy policy and terms of service, though cookie consent mechanisms are lacking. Overall, Mobirise presents a professional, trustworthy, and technically sound platform with room for incremental security and privacy enhancements.

The website amplittlegiant.com is a newly registered domain (April 2024) with minimal content consisting solely of an animated skeleton figure and no business or contact information. The site lacks any privacy, cookie, or terms of service policies, and no forms or data collection mechanisms are present. Technically, the site uses Cloudflare DNS but does not enable DNSSEC or security headers, indicating a basic security posture. There are no scripts or analytics tools detected, and the site is not blocked by any WAF or security challenge. Overall, the website appears to be a placeholder or artistic project rather than a fully developed business site. From a security perspective, the site has a basic SSL configuration but lacks important security headers and privacy compliance features. The absence of contact information and business details reduces trustworthiness and business credibility. The content is safe for general audiences with no adult or explicit material detected. The overall risk is low due to minimal content and no signs of malicious activity, but the lack of security best practices and compliance policies suggests the site is not yet production-ready for business use. Strategic recommendations include implementing security headers, enabling DNSSEC, adding privacy and cookie policies, and providing clear contact and business information to improve trust and compliance.

G

Geant du web inc.

geantduweb.ca

46

Geant du web inc. is a Canadian web agency specializing in custom web design and intranet solutions for organizations and businesses. Established since 2005, the company positions itself as an experienced provider with a portfolio of hundreds of projects, targeting primarily small to medium-sized enterprises and organizations in Canada. Their key services include fully customized intranet and website development, emphasizing performance and tailored solutions. The website reflects a professional and consistent brand image with clear contact channels and social media presence. Technically, the website is built on Joomla! CMS, leveraging modern web technologies such as Bootstrap 4.6, jQuery, Google reCAPTCHA, and Google Tag Manager. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with some deferred loading and lazy loading techniques employed. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact form, which are positive indicators. However, it lacks DNSSEC, security headers, and published privacy or cookie policies, which are areas for improvement. No incident response or vulnerability disclosure information is provided, limiting transparency in security practices. Overall, the website and business demonstrate a solid and trustworthy presence with room to enhance privacy compliance and security posture. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

A

Association de Sécurité Civile du Québec (ASCQ)

ascq.org

44

The Association de Sécurité Civile du Québec (ASCQ) is a prominent non-profit organization dedicated to civil security and emergency preparedness in Quebec. It serves a diverse audience including practitioners, managers, professionals, volunteers, and risk generators. The ASCQ provides certifications, organizes training, webinars, and events, and disseminates best practices and information to enhance resilience across the province. The website reflects a well-established entity with a clear mission and strong community engagement. Technically, the website is built on WordPress using modern plugins such as Smart Slider 3, Contact Form 7, and Complianz GDPR for cookie consent management. The site is mobile-optimized, uses HTTPS, and integrates Google Analytics for visitor insights. While performance is moderate, the site maintains good SEO and accessibility standards. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable or privacy protected, which is typical for non-profit organizations and does not raise immediate concerns. Overall, the ASCQ website presents a professional, trustworthy, and compliant digital presence suitable for its sector. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

G

Gouvernement du Québec

quebec.ca

59

The website www.quebec.ca serves as the official digital portal for the Gouvernement du Québec, providing comprehensive access to government information and services across multiple sectors such as agriculture, culture, education, health, justice, and more. It targets residents, businesses, and organizations within Québec, positioning itself as a trusted and authoritative source for provincial government resources. The site is well-branded, professionally designed, and offers clear navigation primarily in French with English language options. Technically, the site is built on TYPO3 CMS and leverages modern web technologies including Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA to enhance user experience and security. The infrastructure supports good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and cookie consent mechanisms could be made. From a security perspective, the site enforces HTTPS, uses CAPTCHA for form protection, and provides a clear channel for vulnerability reporting. No critical vulnerabilities or exposed sensitive data were detected. The lack of publicly available WHOIS data is consistent with Canadian government domain privacy norms and does not detract from the site's legitimacy. Overall, the website demonstrates a strong security posture, high content quality, and solid privacy compliance, making it a reliable and professional government resource. Strategic recommendations include enhancing security headers, implementing a visible security.txt file, and improving cookie consent transparency to further strengthen trust and compliance.

EarthLink is a well-established Internet Service Provider in the United States, offering a broad range of high-speed internet services including fiber, wireless, satellite, and rural internet. The company positions itself as a reliable and customer-focused ISP with extensive coverage and competitive pricing. Their website reflects a mature digital presence with modern technologies and comprehensive content tailored to residential and business customers. The site is well-optimized for SEO, mobile-friendly, and provides multiple customer engagement channels including phone, chat, and support portals. Security posture is solid with HTTPS and some security headers, though there is room for improvement in explicit security policies and vulnerability disclosure. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks visible cookie consent mechanisms. WHOIS data is unavailable or protected, which slightly reduces transparency but is common for large enterprises. Overall, EarthLink presents a trustworthy and professional online presence with minor areas for enhancement in security transparency and privacy compliance.

The website sirdata.eu is currently under construction, presenting only a placeholder image with no substantive content or metadata. The lack of business information, contact details, privacy policies, and security features indicates a very early stage of deployment or a dormant site. The domain is registered through OVH SAS, a reputable registrar, but no further registrant details or domain age data are available to assess business maturity. Technically, the site lacks any detectable CMS, frameworks, or scripts, and no HTTPS or security headers are evident from the provided data. This results in a poor security posture and minimal privacy compliance. Overall, the site does not provide any meaningful business or security information, limiting trust and usability.

C

Cloudflare

zaraz.com

79

Cloudflare is a leading global technology company specializing in cloud services, security, and performance optimization. Their product Zaraz focuses on managing third-party tools by loading them in the cloud rather than in browsers, enhancing website speed and security. The company holds a strong market position with enterprise-level scale and a comprehensive suite of services targeting businesses and developers seeking to optimize web performance and security. Technically, the website demonstrates a mature digital infrastructure using modern frameworks like React, integrated with Google Tag Manager and OneTrust for analytics and consent management. Hosting and delivery are managed via Cloudflare's own platform, ensuring fast performance and excellent mobile optimization. The site is well-structured with good SEO and accessibility features. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates consent mechanisms aligned with GDPR. No vulnerabilities or exposed sensitive data were detected. However, no explicit security policy or incident response contact information was found on the analyzed page, which could be improved for transparency. Overall, the website is professional, trustworthy, and secure, with strong privacy compliance and business credibility. The lack of WHOIS data is due to privacy protection, which is justified for a company of this size. The risk level is low, but recommendations include enhancing visible security policies and incident response information to further build trust.

S

State of Missouri

mo.gov

66

The website www.mo.gov serves as the official online portal for the State of Missouri, providing a comprehensive range of information and services to residents, businesses, government employees, and visitors. It functions as a centralized hub for accessing state agencies, online services such as tax filing and license renewals, public safety information, educational resources, and tourism guidance. The site is positioned as an authoritative government resource with a broad target audience encompassing various stakeholder groups within Missouri. Technically, the website is built on the WordPress CMS platform and utilizes common web technologies including jQuery, Google Fonts, RoyalSlider for interactive content, and Google Analytics for user tracking. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. The presence of HTTPS ensures secure communications, although the absence of certain security headers suggests room for improvement in hardening the site against common web threats. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and a formal vulnerability disclosure policy or security incident response contact information. Privacy compliance is partially addressed with visible privacy and data policies, but no active cookie consent mechanism is implemented. The WHOIS data is incomplete, lacking registrar and registrant details, which is unusual but mitigated by the .gov domain status and the official nature of the site. Overall, the website presents a trustworthy and professional government portal with good content quality and user experience. Strategic recommendations include enhancing security headers, implementing cookie consent for privacy compliance, publishing vulnerability disclosure information, and improving accessibility features to meet modern standards.

R

RegFox

regfox.com

69

RegFox is a US-based technology company founded in 2013 that provides a powerful and affordable SaaS event registration platform. It targets event organizers across various sectors including conferences, workshops, camps, and corporate events. The platform offers extensive features such as a drag-and-drop event page builder, branding control, conditional logic, CRM, check-in apps, and integrations with third-party tools. RegFox positions itself as a market leader in affordable event registration software with transparent pricing and strong customer support. Technically, the website is built on Webflow CMS and employs a modern tech stack including jQuery, Google Tag Manager, and multiple analytics and marketing tools. The site is well-optimized for mobile and SEO, with excellent design and user experience. Security posture is good with HTTPS and modern captcha, though explicit security headers and policies could be improved. The WHOIS data is not publicly available, which slightly reduces trust but the business presence and customer reviews support legitimacy. Overall, RegFox demonstrates a mature digital infrastructure and a strong market position in the event registration space.

The Department of Homeland Security (DHS) operates the dhs.gov domain, a government entity established in 2002. The domain age aligns with the founding year of the agency, indicating legitimacy. However, the website content is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) blocking access, presenting an 'Access Denied' error page. This prevents any direct analysis of the website's content, policies, or technical implementations. The domain uses Cloudflare DNS but lacks DNSSEC, which is a potential security enhancement area. No metadata, structured data, or contact information is available for review. Given the nature of the domain and its government affiliation, privacy protection on WHOIS is justified and typical. Overall, the website's security posture cannot be fully assessed due to the blocking mechanism, but the domain registration details suggest a legitimate and established entity.

S

Scoopz, LLC

zests.ai

57

Zests.ai is a social media and community platform operated by Scoopz, LLC, founded in 2024. The platform focuses on fostering real conversations and sharing experiences across diverse topics such as immigration, family, sports, science, and fashion. It offers users the ability to explore trending posts and engage with a vibrant community. The website is built on a modern technical stack including React and Next.js, hosted likely on AWS infrastructure, and is optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS enforced and privacy protection on domain registration, though improvements such as enabling DNSSEC and adding explicit security policies are recommended. Privacy compliance is basic, with privacy and terms of use policies present but lacking cookie consent mechanisms. Overall, the site is safe for general audiences and presents a professional and trustworthy user experience.

L

Lugrain Software GmbH

lugrain-software.com

52

Lugrain Software GmbH is a German software company specializing in digital solutions and software development services targeted primarily at business clients. The website is professionally designed using the TYPO3 CMS platform and integrates modern tools such as Google Tag Manager for analytics and Usercentrics for GDPR-compliant cookie consent management. The company appears to maintain a consistent brand presence with a focus on technology services. However, the absence of WHOIS registration data for the domain www.lugrain-software.com raises concerns about domain legitimacy or registration status, which impacts overall trustworthiness. The website lacks explicit privacy policies, terms of service, and contact information, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and consent management but lacks visible security headers and public security policies. Overall, the site is accessible, safe, and business-oriented but would benefit from improved transparency and security practices.

The website krause-systems.ch currently serves a 404 error page indicating that the site is not configured or accessible. No business content, contact information, or policies are present, which severely limits the ability to assess the company's operations or market position. The site is built on TYPO3 CMS as indicated by the error page branding, but no further technical details or integrations are visible. Security posture cannot be properly evaluated due to lack of accessible content and absence of security headers or SSL confirmation. Overall, the site is non-functional from a user perspective, presenting a high risk for trust and credibility. Strategic recommendations include establishing a fully functional website with proper business information, security configurations, and compliance policies.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.es

58

KRAUSE-Werk GmbH & Co. KG is a well-established German manufacturing company specializing in access technology and scaffolding solutions with over 125 years of tradition. The company operates internationally with multiple localized websites, including this Spanish version, targeting industrial and commercial customers requiring safe access systems. Their product portfolio includes standard and special aluminum solutions, safety services, and customer support. The website is professionally designed, content-rich, and consistent with the company's branding and market position. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap and jQuery. It integrates analytics and marketing tools including Matomo, Facebook Pixel, and Google Tag Manager, with a comprehensive cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and provides clear navigation and multilingual support, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is unavailable due to query restrictions, but the website's professional presentation and contact information strongly indicate legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.sk

57

KRAUSE-Werk GmbH & Co. KG is a well-established German manufacturer specializing in access technology and occupational safety products with over 125 years of tradition. The company operates internationally with a strong brand presence and offers a broad portfolio of products and services including scaffolding, ladders, special aluminum solutions, and industrial safety training. Their website reflects a professional and consistent brand image targeting industrial and commercial customers requiring safe and innovative access solutions. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates analytics tools such as Matomo and Facebook Pixel, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and a published security policy are absent. Overall, the website is trustworthy, compliant with GDPR, and provides comprehensive contact information and multilingual support.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.ro

55

KRAUSE-Werk GmbH & Co. KG is a well-established manufacturer specializing in access technology and occupational safety products with over 125 years of tradition. The company operates internationally with a strong presence in Romania, offering innovative and high-quality solutions focused on safety, functionality, and ease of use. Their product portfolio includes access systems, scaffolding, special aluminum constructions, and safety consulting services. The website reflects a professional and consistent brand image, targeting industrial and commercial customers seeking reliable safety and access solutions. Technically, the site is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates analytics tools such as Matomo and Facebook Pixel, demonstrating digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and explicit incident response policies are recommended. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting business credibility.

K

KRAUSE

krause-systems.pl

53

KRAUSE is a manufacturing company specializing in ladders, mobile scaffolding, platforms, and steps, targeting both individual users and professional customers. The company maintains a strong market position with multiple country-specific websites, indicating an international presence. Their website is built on TYPO3 CMS and incorporates modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Matomo for analytics. Privacy and compliance are well addressed with comprehensive privacy and cookie policies and GDPR-compliant consent mechanisms. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, though some security headers could be improved. The absence of WHOIS data for the .pl domain is a notable anomaly but does not detract significantly from the overall legitimacy given the professional website and business presence. Overall, the website is professional, user-friendly, and trustworthy.

K

KRAUSE

krause-systems.hu

53

KRAUSE-Systems Hungary operates as a specialist manufacturer and supplier of equipment for working at heights, including ladders, scaffolding, and related safety technologies. The company targets industrial and professional users requiring safe and innovative solutions. The website reflects a mature digital presence with multiple language versions, indicating an international market approach. The business model focuses on manufacturing, sales, and value-added services such as training and inspections. The site content is professionally presented, with clear navigation and comprehensive legal documentation, supporting a trustworthy brand image. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Slick Carousel. It integrates Google Analytics, Matomo, and Google Tag Manager for analytics and marketing purposes, with a robust cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility could be further enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent updates but lacks explicit security headers like X-Frame-Options and X-Content-Type-Options. No vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contacts and no security.txt file indicates room for improvement in transparency and readiness. Overall, the website scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores. There are no critical issues or blocking mechanisms detected, making it a reliable and professional online presence for KRAUSE-Systems Hungary.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.bg

53

KRAUSE-Werk GmbH & Co. KG is a well-established German manufacturer specializing in access systems and scaffolding with over 125 years of tradition. The company operates internationally with localized websites, including this Bulgarian version, targeting industrial and commercial customers requiring safe and innovative access solutions. The website reflects a professional and consistent brand image, offering detailed product and service information, supported by a modern TYPO3 CMS infrastructure. The technical stack includes standard web technologies and analytics tools such as Matomo and Facebook Pixel, with a GDPR-compliant cookie consent mechanism in place. Security posture is strong with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.rs

55

KRAUSE-Werk GmbH & Co. KG is a well-established German manufacturer specializing in access technology and occupational safety products, with over 125 years of tradition. The company operates internationally, providing climbing systems, scaffolding, and safety services primarily targeting industrial and commercial customers. Their website, localized in Serbian, reflects a professional and consistent brand image with clear contact information and a comprehensive cookie consent mechanism, demonstrating compliance with GDPR regulations. Technically, the site is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery, and integrates analytics tools such as Matomo and Facebook Pixel. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy.

K

KRAUSE Systems

krause-systems.co.uk

52

KRAUSE Systems is a well-established manufacturer specializing in access technology and occupational safety products. The company offers a broad range of ladders, steps, scaffolds, and customized solutions targeting craftsmen, industry professionals, and general consumers. Their international presence is supported by multiple localized websites and comprehensive product and service information. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and analytics tools such as Google Analytics and Matomo. The site demonstrates good digital maturity with responsive design, clear navigation, and privacy compliance mechanisms including cookie consent. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of HTTP security headers suggests room for improvement. The WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness from a domain legitimacy perspective. Overall, the website is professional, secure, and compliant, representing a credible business entity.

H

Howard Development & Consulting

howarddc.com

56

Howard Development & Consulting (HDC) is a specialized web development firm focused on serving high-end creative agencies and ambitious entrepreneurs. The company offers a comprehensive suite of services including web development, branding and design, open source theme frameworks, and AI consulting. With a strong market position supported by high-profile clients such as Harvard, MIT, Facebook, and Marriott, HDC emphasizes quality, security, and partnership in its business model. The website reflects a professional and trustworthy brand with excellent content quality and user experience. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager and Facebook Pixel, hosted behind Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is currently lacking as no privacy or cookie policies are published, representing a compliance risk. Overall, the site is safe, professional, and credible, with moderate user tracking and marketing tools in use.

P

PECELBET

friendili.com

60

PECELBET operates as an Indonesian gambling affiliate website specializing in slot games, particularly promoting the 'Pragmatic' provider. The site positions itself as a trusted and official link for slot gaming with a focus on easy deposits via QRIS. The business model appears to be affiliate/referral based, targeting mature audiences interested in online gambling. Technically, the website leverages common marketing and analytics tools such as Google Tag Manager, Datadog, and Rollbar, hosted on infrastructure involving GoDaddy and Cloudflare DNS. However, the site lacks critical privacy and cookie policies, and no security headers were detected, indicating gaps in compliance and security best practices. The domain is mature, registered since 2013, consistent with the business's claimed longevity. Overall, the site demonstrates basic content quality and moderate technical implementation but falls short in privacy compliance and security posture.

N

Naidex

naidex.co.uk

62

Naidex is a well-established UK event focused on accessibility, inclusion, and the disability community, with over 50 years of history. The website serves as a comprehensive portal for event information, including speakers, exhibitors, and visitor details. Technically, the site uses a modern event platform (SHOWOFF by ASP.events) with common web technologies such as jQuery, Google Analytics, and Facebook Pixel, and implements cookie consent via Cookiebot. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. The WHOIS data for the domain is unavailable due to domain naming rules violation, which raises concerns about domain registration legitimacy but does not detract from the professionalism of the website content. Overall, the site is credible and well-positioned in its niche but would benefit from improved transparency in privacy and security policies.

T

The Crown Estate

thecrownestate.co.uk

74

The Crown Estate is a UK government-established independent commercial business managing significant land and property assets across the UK, including marine, property, and land sectors. Founded in 1961, it operates with a focus on national interests and sustainability, serving public sector stakeholders, investors, and communities. The website reflects a mature, professional entity with comprehensive content and clear branding. Technically, the site uses modern frameworks such as Next.js and React, with integrations for analytics and cookie consent, ensuring good performance, SEO, and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the site is trustworthy, compliant with privacy regulations, and safe for general audiences.

R

Race Space Ltd

racespace.com

58

Race Space Ltd operates an online race event management platform targeting race directors and endurance athletes. The company offers a SaaS solution for race entry, event management, and registration technology, positioning itself as a niche technology provider in the endurance sports sector. The website branding is consistent and professional, with a clear focus on inspiring a new generation of athletes and supporting race organizers with growth tools like the Race Space Accelerator. Technically, the website employs modern JavaScript libraries including RequireJS, jQuery, and Bootstrap, alongside Facebook SDK and Google Tag Manager for marketing and analytics. The site is mobile-optimized with asynchronous script loading to enhance performance. However, some accessibility features could be improved, and explicit security headers are not detected in the HTML source. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No direct contact emails or phone numbers are published, relying instead on a contact form. The absence of WHOIS data for the domain is a concern, as it suggests either privacy protection or a registration anomaly, which impacts trustworthiness. Overall, the website is functional, professional, and safe for general audiences, but improvements in transparency, security headers, and privacy compliance would enhance trust and security posture.

L

LetsDoThis

letsdothis.com

69

LetsDoThis is a well-established online platform specializing in the discovery and booking of endurance and adventure races such as running, cycling, and triathlon events. The company targets active individuals and athletes primarily in the UK market, providing a seamless user experience for event registration and participant management. The website demonstrates a strong market position with comprehensive event listings and partnerships with key sponsors and service providers. Technically, the site leverages modern frameworks like React and Next.js, ensuring fast performance and excellent mobile optimization. The integration of analytics and marketing tools such as Google Analytics, Segment, and Lotame indicates a mature digital infrastructure focused on user engagement and data-driven marketing. Security-wise, the website employs HTTPS with strong security headers and content security policies, reflecting good security hygiene. However, the absence of publicly available WHOIS data and lack of explicit security and incident response policies slightly diminish the overall trustworthiness. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Overall, LetsDoThis presents a professional and trustworthy online presence with room for improvement in transparency around domain registration and security governance.

N

Nocodelytics

nocodelytics.com

62

Nocodelytics is a specialized SaaS company offering an easy-to-use analytics platform tailored for Webflow websites. It enables users to track user engagement metrics such as clicks, searches, and CMS item interactions without requiring coding skills. The company positions itself as a simpler and more focused alternative to general analytics platforms like Google Analytics, targeting Webflow site owners, marketers, and agencies. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about its services and pricing. Technically, the site leverages modern web technologies including Webflow CMS, Google Fonts, jQuery, and integrates with third-party tools like Jetboost and Memberstack. Hosting is provided by Webflow, ensuring fast performance and reliable uptime. The site uses HTTPS with good SSL configuration but lacks some recommended security headers. Privacy compliance is strong with a comprehensive privacy policy, GDPR adherence, and a Data Processing Agreement available. However, a cookie consent mechanism is missing, which could be a compliance gap. From a security perspective, the site shows good practices such as no exposed sensitive data and secure form handling. There is no evidence of a published vulnerability disclosure policy or incident response contact, which could be improved. The WHOIS data for the domain is unavailable, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy evident on the site. Overall, Nocodelytics presents a low-risk, professional SaaS offering with solid technical and privacy foundations. Strategic improvements in security headers, cookie consent, and transparency around vulnerability handling would further enhance trust and compliance.

I

intecsoft GmbH & Co. KG

intecsoft.de

58

intecsoft GmbH & Co. KG is a well-established IT consulting and software development company based in Germany, with a subsidiary in Switzerland. The company specializes in digital transformation services, offering a broad portfolio including business process optimization, business intelligence, cloud infrastructure, SAP development, and embedded systems. Their target audience includes businesses and public sector organizations primarily in German-speaking countries. The company demonstrates a strong market position supported by long-term experience, recognized certifications such as ISO/IEC 27001, and partnerships with major technology providers like Microsoft, SAP, and Oracle. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap and JavaScript ES modules. The infrastructure is hosted via domaincontrol.com nameservers, indicating professional hosting. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and ISO 27001 certification, but could be improved by adding explicit security headers and incident response contact details. No WAF or blocking mechanisms were detected, allowing full content access. Privacy compliance is mostly met with a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism. No vulnerability disclosure or security.txt files were found. Contact information is clearly presented, enhancing business credibility. Overall, intecsoft presents a professional, trustworthy, and secure digital presence aligned with its business objectives. Strategic improvements in cookie consent and security headers would further enhance compliance and security posture.

I

inovoo GmbH

inovoo.com

61

inovoo GmbH is a German-based technology company specializing in intelligent business process management and automation solutions. Their offerings include a low-code platform (NOVO CxP), AI-driven document processing (NOVO AI Studio), and process analytics tools (NOVO BI Board). The company targets businesses seeking to automate document and data workflows efficiently, leveraging AI and low-code technologies to reduce manual effort and improve accuracy. Recognized by industry analysts such as Gartner and infosource, inovoo maintains a solid market position with a medium-sized business profile and a professional digital presence. Technically, the website is built on Silverstripe CMS with UIkit framework, integrating modern tools like Google Tag Manager and Klaro for consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit HTTP security headers and published security policies are absent, representing areas for improvement. The WHOIS data for the domain is missing, which is unusual and slightly reduces transparency and trust. However, the website's professional content, certifications (ISO 27001), customer testimonials, and analyst recognitions support the company's legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, inovoo presents as a credible and professional B2B technology provider with strong digital maturity and a focus on privacy compliance. Enhancing security transparency and WHOIS data availability would further strengthen trust and compliance posture.

I

Interone

interone.de

59

Interone is a German digital agency affiliated with TEAMBBDO, offering end-to-end digital experiences combining technology, creativity, and strategic experience. The company operates multiple offices in Germany including Munich, Hamburg, Düsseldorf, and Berlin, serving a business clientele with a focus on human-centric digital solutions. Their key services include experience design, creative content, technology solutions, and AI/automation. The website is professionally designed using modern technologies such as React and Next.js, with good mobile optimization and accessibility. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security policies and incident response information are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in the digital agency market in Germany.

F

Frankenraster GmbH (now DI.UNIT GmbH Standort Süd)

frankenraster.de

56

Frankenraster GmbH, now operating as DI.UNIT GmbH Standort Süd, is a medium-sized, ISO-certified document scanning and archiving service provider based in Germany. The company specializes in digitization, physical and digital archiving, and logistics services for business clients in Germany and Austria. Their market position is strengthened by integration into the DI.UNIT group, providing a broader service portfolio and enhanced brand recognition. The website reflects a professional business model targeting organizations seeking efficient document management solutions. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries such as jQuery and Google Analytics with privacy-conscious configurations like IP anonymization and cookie consent management via Cookiebot. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS, uses cookie consent with blocking mode, and provides opt-out mechanisms for analytics tracking. However, it lacks explicit incident response contact information and a vulnerability disclosure policy, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional image with strong privacy compliance and business credibility. Strategic recommendations include implementing additional HTTP security headers, publishing incident response contacts, and enhancing accessibility features to further improve security and compliance.

F

Fabasoft AG

fabasoft.com

75

Fabasoft AG is a well-established European technology company specializing in digital business process design and cloud-native enterprise content, records, and business process management solutions. Their flagship platform, the Fabasphere, integrates AI capabilities with secure cloud services to support organizations in digital transformation. The company targets enterprise and government sectors, emphasizing European data sovereignty and compliance. Technically, the website is built on Drupal 10 with modern frameworks and demonstrates excellent performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit incident response and vulnerability disclosure policies are absent. The absence of WHOIS data for the domain is a notable anomaly that impacts trust assessment. Overall, Fabasoft presents a professional, secure, and compliant digital presence with room for improvement in transparency around security incident handling.

E

EITCO

eitco.de

58

EITCO is a German-based digitalization consultancy specializing in product-independent digital transformation, IT strategy, and process optimization services. The company targets businesses seeking to modernize and optimize their digital infrastructure. The website is built on WordPress with Elementor and uses modern web fonts and SEO plugins, indicating a moderate level of digital maturity. Hosting is via AWS DNS, suggesting reliable infrastructure. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a professional image but could improve transparency and security documentation.

C

cosinex GmbH

cosinex.de

54

cosinex GmbH is a well-established German company specializing in digital solutions for public procurement. Their offerings include a comprehensive suite of software products that enable fully digital procurement processes for government entities at federal, state, and municipal levels. The company positions itself as a pioneer in e-procurement with a strong focus on innovation and customer support. The website reflects a professional and modern digital presence, leveraging WordPress and WooCommerce platforms with various plugins to enhance functionality and user experience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, cosinex GmbH demonstrates a credible and trustworthy business with clear contact information, social media engagement, and compliance with GDPR requirements.

C

Computacenter

computacenter.com

81

Computacenter is a leading independent technology and services provider focused on delivering IT infrastructure, cloud, security, and managed services to large corporate and public sector clients. The company emphasizes sustainability, customer-centricity, and long-term value creation, supported by numerous industry awards and partnerships with major technology vendors. The website demonstrates a mature digital presence with modern technologies, responsive design, and rich content including customer stories and news updates. Security posture is strong with HTTPS and bot protection, though explicit security headers and policies are not evident in the provided data. Privacy compliance documentation such as privacy and cookie policies are not clearly found, which is a gap for regulatory adherence. WHOIS data is unavailable, possibly due to privacy or registry restrictions, but the website's professional presentation and trust signals support legitimacy. Overall, the site is well-structured and trustworthy, serving an enterprise audience effectively.

citeq is a municipal IT service provider for the city of Münster and surrounding public sector entities. The organization offers comprehensive IT services including consulting, system operation, application development, and network infrastructure support. Positioned as a key digitalization partner for local government and public institutions, citeq supports a broad range of clients including schools and neighboring municipalities. The website reflects a professional and consistent brand image aligned with public sector standards. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are not published. Overall, citeq demonstrates a mature digital presence suitable for a government IT provider.

CharismaTeam GmbH is a German software company specializing in the development of application assistants, workflow management systems, and custom software solutions primarily targeting public administration and business clients. The company has established a niche market position supported by recognized innovations such as the Innovationspreis-IT awards in 2016 and 2017 and strategic partnerships with notable firms like Wolters Kluwer. Their business model focuses on delivering turnkey software systems and consulting services to streamline digital application processes and workflow automation. Technically, the website is built on the webEdition CMS platform, utilizing Bootstrap and jQuery, though some technologies are dated. The site is moderately optimized for performance and mobile use, with good SEO practices but limited accessibility features. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected, and older JavaScript libraries are in use. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional and trustworthy, with no signs of malicious content or blocking mechanisms.

B

brain-SCC GmbH

brain-scc.de

56

brain-SCC GmbH is a German company specializing in digital administration and e-government solutions, targeting public sector entities and administrations. Their key offerings include the VOIS-Vorgangsraum software component and the EfA - Digitale Baugenehmigung service, which streamline administrative processes such as building permits. The company holds recognized certifications like ISO9001:2015 and TSA, indicating a commitment to quality and security. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence.

B

bol Behörden Online Systemhaus GmbH

bol-systemhaus.de

56

bol Behörden Online Systemhaus GmbH is a specialized software development and system house company focused on universal form management systems, serving public sector clients, industry, and finance sectors. Established in 1998, the company offers products, solutions, and consulting services to facilitate digital transformation and online form workflows. The website reflects a professional and consistent brand presence with clear business information and contact channels. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and AWS hosting infrastructure, indicating a mature digital presence. Security posture is adequate with HTTPS and anti-spam measures like hCaptcha, but lacks explicit security headers and published security policies, representing areas for improvement. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy, well-structured, and business-focused, with moderate technical and security maturity.

B

Bundesdruckerei GmbH

bundesdruckerei.de

69

Bundesdruckerei GmbH is a large, government-affiliated technology company specializing in secure digital identity solutions, cybersecurity, and digital transformation services primarily for public sector and critical industries in Germany. The company holds a strong market position as the largest cross-departmental federal enterprise in digitalization with approximately 1300 employees. Their offerings include identification systems, IT security, trusted services, and digital infrastructure solutions. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with their government ties. Technically, the site is built on Drupal CMS with Bootstrap 5, optimized for mobile, and integrates eTracker analytics with privacy-conscious cookie consent mechanisms. Security posture is strong with HTTPS enforced, nonce usage in scripts, and a dedicated vulnerability disclosure page, though explicit security headers could be more visible. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

B

Bank-Verlag GmbH

bank-verlag.de

58

Bank-Verlag GmbH is a specialized IT solutions provider focused on the financial sector, supporting credit institutions and public administration in digital transformation and product development. As a 100% subsidiary of the Bundesverband deutscher Banken (BdB), it holds a strong market position as a trusted technology driver and service provider. The company offers a broad portfolio including banking and payment solutions, card management, trusted digital solutions, business support, and educational services through its academy. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience of financial institutions and related sectors. Technically, the site leverages modern frameworks such as Next.js and Storyblok CMS, with Matomo analytics and a cookie consent manager ensuring privacy compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.

O

OneSciencePlace

onescienceplace.org

55

OneSciencePlace is a specialized technology platform designed to provide scalable, extensible, and composable solutions for research computing, data management, and scientific repositories. It targets a broad research ecosystem including principal investigators, educators, HPC administrators, and institutional stakeholders. The platform emphasizes ease of deployment, FAIR principles compliance, and seamless integration with diverse computational and storage backends. Technically, the website is built on Drupal 10 and hosted on AWS infrastructure, demonstrating a modern and flexible technology stack. The site is well-designed, mobile-optimized, and provides rich, relevant content tailored to its audience. Security posture is moderate with HTTPS implied, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are absent, representing compliance gaps. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

U

University of Illinois Urbana-Champaign

illinois.edu

63

The University of Illinois Urbana-Champaign website serves as the official digital presence of a flagship public university in the United States, providing comprehensive information and resources for students, alumni, faculty, staff, and the general public. The site highlights the university's leadership in research, teaching, and public engagement, with a broad target audience including prospective and current students, academic staff, and alumni. The business model is centered on education and research services, supported by public funding and community outreach. The website demonstrates consistent branding and professional content quality, reinforcing its market position as a leading educational institution.