Security Directory

G

Gemeinsame Glücksspielbehörde der Länder (AöR)

gluecksspiel-behoerde.de

58

The Gemeinsame Glücksspielbehörde der Länder (GGL) is the official German government authority responsible for regulating the cross-state online gambling market. Its core mission is to ensure player protection, prevent gambling addiction, and enforce compliance among licensed gambling providers. The agency also combats illegal gambling and promotes research in the gambling sector. The website reflects a well-structured, professional government portal with comprehensive information for gambling providers, players, and other stakeholders. It serves as a central coordination point for regulatory matters in Germany's gambling landscape. Technically, the website is built on Joomla CMS with modern frameworks such as UIkit and jQuery, hosted likely on rzone.de infrastructure. It demonstrates good mobile optimization, accessibility features, and a clean, professional design. Security measures include HTTPS enforcement, CSRF tokens, and frame busting scripts, although explicit security headers could be improved. No signs of tracking or advertising scripts were found, indicating a privacy-conscious approach. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and published incident response or vulnerability disclosure policies are areas for improvement. The WHOIS data aligns with the website's official nature, supporting its legitimacy. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy source for gambling regulation in Germany.

K

Karl-Heinz Blum GmbH & Co.KG

walhalla.shop

44

Walhalla Shop is a specialized e-commerce retailer based in Germany, offering a range of Nordic-themed alcoholic beverages and related fan merchandise. The company leverages a Joomla CMS platform enhanced with modern front-end technologies such as Bootstrap and Smart Slider 3 to deliver a visually appealing and user-friendly website. The site is well-structured with clear navigation and includes essential business contact information, privacy, cookie, and terms of service policies, reflecting a mature digital presence. Security-wise, the website enforces HTTPS and uses CAPTCHA on forms, but lacks some advanced security headers, indicating room for improvement in hardening its security posture. Overall, the website is accessible without WAF or blocking mechanisms, and the domain registration data aligns well with the business claims, supporting its legitimacy.

I

IKAR GmbH

ikar-gmbh.de

44

IKAR GmbH is a German manufacturer specializing in height safety and fall protection systems, primarily serving the wind power industry and other sectors requiring secure work at heights. The company offers a range of products including harness systems, connection means, height safety devices, and training services to ensure workplace safety. Their website is professionally designed using Joomla CMS and Bootstrap framework, providing clear navigation and relevant product information. Technically, the site is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled and CSRF protections, but lacks some security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears credible with consistent domain registration and clear contact details.

G

Great Place To Work® Institute

greatplacetowork.net

75

Great Place To Work® Institute operates a comprehensive platform focused on building high-trust workplace cultures through employee surveys, certification, and recognition programs. The company targets employers and HR professionals seeking to improve workplace culture and attract talent. The website demonstrates a mature digital presence with a Joomla CMS, modern front-end frameworks, and integration of multiple analytics and marketing tools. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data reduces domain trust slightly but the overall brand and content quality strongly support legitimacy.

G

Great Place To Work® Institute

greatplacetowork.pt

67

Great Place To Work® Portugal operates as a recognized global authority on workplace culture, providing certification services, employer branding solutions, and rankings of the best workplaces in Portugal and internationally. The company targets organizations seeking to improve and certify their workplace environment, leveraging data-driven insights from employee feedback. Their market position is strong as a leader in workplace culture certification, supported by a professional website with clear service offerings and client engagement portals. Technically, the website is built on Joomla CMS with modern front-end technologies including Bootstrap, jQuery, and Video.js. It integrates Google Tag Manager and Google Analytics for tracking and marketing automation via Marketo. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Contact information is available, though no direct security contact or vulnerability disclosure policy is present. Overall, the website presents a professional and trustworthy digital presence with a solid business model and good technical implementation. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and user trust further.

G

Great Place To Work® Institute

greatplacetowork.pl

66

Great Place To Work® Institute Poland operates as a global leader in workplace culture research, consulting, and certification. The website reflects a mature, professional business with a strong market position in Poland and internationally. Their key services include certification, employee surveys, and publishing best workplace lists. The technical infrastructure is based on Joomla CMS with modern libraries and frameworks, supporting a responsive and user-friendly experience. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness.

G

Great Place To Work

greatplacetowork.lu

68

Great Place To Work Luxembourg operates as a recognized global leader in employee experience valuation and workplace culture certification. The company offers internal satisfaction surveys, organizational diagnostics, and certification services to help organizations improve and showcase their workplace culture. Their market position is strong within Luxembourg and internationally, supported by a professional website and active social media presence. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and integrates analytics and marketing tools such as Google Tag Manager and Mailchimp. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS and basic security headers, though additional headers and incident response information could improve trust. Privacy and cookie policies are comprehensive and GDPR compliant. The absence of WHOIS data reduces domain registration trust but the professional content and business indicators mitigate this risk. Overall, the website is credible, professional, and safe for general audiences.

G

Great Place to Work® Institute

greatplacetowork.dk

71

Great Place to Work® Denmark operates as a recognized consulting and certification organization specializing in employee experience surveys and workplace certification services. The company targets employers and HR professionals in Denmark and Europe, offering services such as employee surveys, Great Place To Work certification, and publishing lists of best workplaces. Their market position is strong within the workplace certification niche, supported by professional branding and consistent digital presence. Technically, the website is built on Joomla CMS with modern libraries like Bootstrap, jQuery, and Font Awesome, integrated with HubSpot for lead capture and Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, although accessibility could be improved. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but additional HTTP security headers could enhance protection. The absence of WHOIS data limits domain trust analysis, but the overall professionalism and presence of trust indicators suggest legitimacy. No WAF or blocking mechanisms were detected, and the site content is safe and business-focused.

G

Great Place To Work® Institute

greatplacetowork.ca

72

Great Place To Work® Canada is a leading global authority specializing in workplace culture certification, employee surveys, and recognition programs. The company empowers organizations to build high-trust cultures that enhance performance, innovation, and growth. Their offerings include certification, culture consulting, employee engagement surveys, and various recognition awards, targeting organizations seeking to improve workplace culture and employer branding. The website demonstrates a strong market position with a professional and consistent brand presence, supported by comprehensive content and multimedia resources. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and uses various JavaScript libraries including jQuery, Video.js, and Select2. It integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized with responsive design and good SEO practices, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and incident response disclosures. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy policies and GDPR compliance indicators are present, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with privacy standards, making it a trustworthy platform for its target audience. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

G

Great Place to Work® Institute Inc.

greatplacetowork.be

69

Great Place To Work® Institute Inc. operates a professional website focused on workplace culture improvement, certification, and employee surveys. The company is positioned as a market leader in Belgium and internationally, offering services that help organizations build high-trust workplace cultures. The website is well-designed, content-rich, and targets organizations seeking to improve employee engagement and workplace environment. Technically, the site uses Joomla CMS with modern libraries and integrates Google Tag Manager and Analytics for tracking. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit incident response policies. WHOIS data is restricted, limiting transparency but the site content and branding indicate legitimacy. Overall, the site is professional, GDPR compliant, and trustworthy with room for security improvements.

W

Wine Scholar Guild

winescholarguild.com

62

Wine Scholar Guild is a specialized education provider offering a range of wine certifications, immersive study abroad programs, and expert-led wine courses. The organization targets wine professionals and enthusiasts seeking in-depth knowledge and credentials in wine regions such as France, Italy, Spain, and Germany. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content focused on wine education and certification. Technically, the site is built on Joomla CMS with modern frameworks and integrates multiple marketing and analytics tools, indicating a well-developed digital infrastructure. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit privacy and cookie policies are not clearly presented, which is a compliance gap. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the website content and branding appear legitimate and professional. Overall, the site is a credible resource for wine education but should improve privacy disclosures and domain registration transparency to enhance trust.

W

Wine Scholar Guild

winescholarguild.org

62

Wine Scholar Guild is a specialized education provider offering immersive wine certification programs, study abroad tours, and membership services targeting wine professionals and enthusiasts globally. The website demonstrates a mature digital presence built on Joomla CMS with modern frameworks and multiple third-party analytics and marketing integrations. Security posture is generally good with HTTPS and CSRF protections, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, but the professional content and branding suggest a legitimate business. Strategic improvements in privacy compliance and security header implementation are recommended to enhance trust and compliance.

U

Universitatea Transilvania din Brașov

unitbv.ro

62

Universitatea Transilvania din Brașov is a well-established public university in Romania with a strong academic and research presence. The website reflects a mature digital infrastructure built on Joomla CMS, integrating modern JavaScript libraries and Google services for enhanced user experience and security. The institution provides comprehensive academic programs, research opportunities, and cultural activities, targeting students, researchers, and academic partners. The website is professionally designed, mobile-optimized, and regularly updated with news and events, supporting its market position as a leading educational institution in the Central Region of Romania. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended.

S

SIA Aprūpes Grupa

aprupe.group

50

SIA Aprūpes Grupa operates as a family-style senior care provider in Riga, Latvia, offering 24-hour care, social rehabilitation, and medical support primarily for elderly clients including those with dementia. The company runs two facilities and emphasizes a home-like environment with comprehensive services. The website is built on Joomla CMS with Yootheme and UIkit, featuring a responsive design and integrated social media presence. Security posture is moderate with HTTPS and CAPTCHA protection on forms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is good with GDPR-aligned policies and cookie consent mechanisms. Overall, the business presents a trustworthy and professional online presence suitable for its local healthcare service market.

A

ars vivendi

av-licht.de

51

ars vivendi is a small German retailer specializing in high-quality lighting products and services, including branded indoor and outdoor lighting, technical lighting, and related services such as planning, delivery, installation, and repair. The company partners with multiple well-known lighting brands, positioning itself as a niche retailer in the lighting market. The website is built on Joomla CMS with Bootstrap and several third-party plugins, offering a basic but functional online presence. However, some maintenance issues such as broken image sliders are present. Security posture is limited with no visible security headers or cookie consent mechanisms, and privacy compliance is minimal despite GDPR relevance. Contact information is clearly provided, enhancing business credibility. Overall, the website is accessible and moderately professional but requires improvements in security and privacy compliance.

D

DJ-Extensions

dj-extensions.com

69

DJ-Extensions is a small technology company specializing in developing and selling plugins for WordPress and components for Joomla, along with offering programming services. Established in 2009, the company targets developers, website owners, and agencies that use Joomla and WordPress platforms. Their market position is niche-focused, providing specialized extensions, templates, and themes for these CMS platforms. The website is professionally designed with consistent branding and good content quality, supporting their business model of software sales and services.

E

European University Association

eua.eu

69

The European University Association (EUA) is a prominent non-profit organization representing over 900 universities across Europe. It serves as a collective voice advocating for higher education and research institutions, providing services such as advocacy, projects, events, and institutional evaluation. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content relevant to its audience of universities, researchers, and policymakers. Technically, the site is built on Joomla CMS with modern front-end frameworks and includes accessibility features and GDPR-compliant cookie management. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns well with the organization's identity.

L

Letras de Autor

letrasdeautor.com

64

Letras de Autor is a specialized editorial service based in Madrid, Spain, focusing on book editing, publishing, and distribution services for authors. The website presents a professional and well-structured digital presence built on Joomla CMS, integrating modern web technologies and third-party services such as Google Analytics and Facebook Pixel for analytics and marketing. The company emphasizes personalized service and quality, supported by testimonials from authors. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration transparency. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies. Overall, the website is functional and trustworthy from a user perspective but requires improvements in compliance and domain registration transparency.

P

ProPager

propager.com

57

ProPager is a well-established European citizen communication agency specializing in event management, communication campaigns, and travel services primarily for European institutions and government-related projects. Founded in 1994, it operates through multiple subsidiaries across Europe, demonstrating a solid market presence and expertise in organizing a wide range of events from small seminars to large conferences and exhibitions. The website reflects a professional and consistent brand image with detailed service offerings and clear contact information. Technically, the site is built on Joomla CMS with modern UIkit and jQuery libraries, hosted by OVH, and shows moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is safe, trustworthy, and suitable for its target audience.

WA-Anzeigenblaetter.de is a regional media website operated by the WA-Mediengruppe, focusing on distributing printed advertising leaflets and providing regional news and offers in parts of Germany including Hamm/Bönen, Märkischer Kreis, Kreis Soest, and Sauerland. The site leverages Joomla CMS and common web technologies such as jQuery and Bootstrap to deliver a moderately performant and mobile-optimized user experience. The website includes a cookie consent mechanism and links to privacy and imprint pages, demonstrating basic compliance with GDPR requirements. However, explicit contact information and detailed security policies are not present on the homepage, which limits transparency and user trust. The domain appears legitimate with structured WHOIS data and consistent name servers, though registrant details are minimal.

E

EUROPEAN AWARENESS

awareu.eu

51

The website awareu.eu represents the European Awareness (AwarEU) project, an educational initiative funded by the Erasmus+ program aimed at promoting social inclusion and European Union awareness through free online courses and cultural events. The project collaborates with multiple European partners and targets citizens interested in EU education and policy. The site is built on Joomla CMS and uses standard web technologies including MooTools and jQuery, but suffers from some technical issues such as a disabled multilingual driver and lack of advanced SEO or accessibility features. Security posture is basic with no visible security headers or privacy policies, and no contact information is provided, which limits transparency and compliance. The domain WHOIS data is privacy protected, which is common for .eu domains, and no suspicious patterns were detected. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and technical robustness.

C

Consiglio Italiano Movimento Europeo

movimentoeuropeo.it

42

The Consiglio Italiano Movimento Europeo is a well-established Italian non-profit organization dedicated to promoting European unity and democratic integration since 1948. The website serves as an information hub, providing news, event calendars, thematic documents, and advocacy resources targeted at Italian citizens and organizations interested in European affairs. The organization maintains an active presence on major social media platforms and offers newsletters and petitions to engage its audience. Technically, the website is built on Joomla CMS using the Helix3 template framework, incorporating modern web technologies such as jQuery, Font Awesome, and Google Fonts. It is secured with HTTPS and DNSSEC, and includes cookie consent mechanisms aligned with GDPR requirements. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site employs standard best practices like HTTPS and DNSSEC but lacks advanced headers such as Content Security Policy and a security.txt file for vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website presents a professional and trustworthy digital presence for a non-profit advocacy group, with room for improvement in security policies and accessibility to enhance user trust and compliance.

E

Europa in Movimento

europainmovimento.eu

46

Europa in Movimento is a small non-profit organization dedicated to promoting a federal, united, and peaceful Europe. The website serves as a platform for news, editorials, educational projects, and campaigns related to European integration and peace activism. It targets European citizens, activists, and educators interested in federalism and civic education. The site leverages Joomla CMS with Bootstrap and integrates social media extensively to engage its audience. Technical infrastructure is moderately modern with standard web technologies and Google Analytics for user tracking. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though security headers and explicit security policies are lacking. The website is accessible without any WAF or blocking mechanisms, and content is safe for general audiences. Overall, the site demonstrates a good balance of content quality, technical implementation, and business credibility for a non-profit advocacy platform.

J

JoomShaper

joomshaper.com

61

JoomShaper is a well-established provider of premium Joomla templates and extensions, offering a comprehensive suite of products including the SP Page Builder, layout bundles, and various Joomla add-ons. The company targets Joomla developers and businesses seeking professional, responsive website solutions. Their market position is strong within the Joomla ecosystem, supported by a professional website, active support forums, and live chat. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and uses advanced front-end technologies including Lottie animations and Font Awesome icons. The site is mobile-optimized, fast, and SEO-friendly. Security-wise, the site enforces HTTPS, uses standard security headers, and implements CSRF tokens in forms, but lacks publicly available security policies or incident response details. The absence of WHOIS data reduces trust slightly, but the overall digital maturity and business credibility remain high. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and providing direct security contact information.

C

Centro Studi sull'Unione Europea (CesUE)

cesue.eu

57

Centro Studi sull'Unione Europea (CesUE) is a small Italian non-profit organization focused on education, advocacy, and communication regarding the European Union, promoting federalism and European unity. The website serves as an information hub for European citizens interested in EU affairs, offering news, projects, and calls for common European defense. The organization partners with Euractiv Italia, enhancing its credibility and reach. Technically, the website is built on Joomla CMS with modern frameworks like Helix and Bootstrap, ensuring good mobile responsiveness and a moderate performance profile. The site uses HTTPS and implements a cookie consent mechanism, reflecting a basic but adequate privacy compliance posture. However, no advanced security headers or analytics tools were detected in the provided HTML, indicating room for improvement in security and data analytics. From a security perspective, the site is accessible without WAF or blocking mechanisms, uses HTTPS, and has no visible vulnerabilities or exposed sensitive data. The lack of public WHOIS data is due to EURid privacy policies, which is common and justified for this type of organization. Overall, the security posture is moderate with recommendations to enhance HTTP security headers and incident response transparency. The overall risk assessment is low, with the site appearing legitimate and professionally maintained. Strategic recommendations include improving security headers, publishing security policies, and enhancing contact transparency to strengthen trust and compliance.

F

Finews AG

finewsticino.ch

61

Finews AG operates finewsticino.ch, a regional financial news website focused on the Ticino region of Switzerland. The site provides news articles, sponsored content, and newsletters targeting Italian-speaking financial professionals and the general public interested in regional financial news. The business model relies on advertising revenue and sponsored advertorials, positioning itself as a reputable media outlet within the Swiss financial news market. Technically, the website is built on Joomla CMS, leveraging modern JavaScript libraries and integrating Google Tag Manager, Google Ad Manager, Matomo Analytics, and a GDPR-compliant consent management platform. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search visibility. Security-wise, the site enforces HTTPS, uses sandboxed iframes for ads, and manages user consent effectively, though it lacks explicit security policy and vulnerability disclosure pages. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for financial news in its target region.

W

Water Group d.o.o.

watergroup.me

46

Water Group d.o.o. is a Montenegrin company specializing in the distribution and sale of beverages and Horeka-related products, including mineral and spring water, espresso coffee, and hot and cold drinks for hotels. Established in 2006, the company operates multiple distribution centers across Montenegro and serves the Horeka market segment with a broad product portfolio including brands like RADA, Suza, MOAK, and Tchibo. The website reflects a professional business presence with consistent branding and relevant content tailored to its target audience. Technically, the website is built on Joomla CMS with the Gridbox framework and uses common libraries such as jQuery and Bootstrap. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting and DNS infrastructure align with the business location, and the domain is privacy protected but registered through a reputable registrar. Performance is moderate with no blocking or WAF detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure mechanisms are present. Social media integration is evident, enhancing trust and engagement. Overall, the security posture is adequate but could be improved with standard best practices and compliance documentation. The overall risk assessment indicates a moderate risk profile primarily due to compliance gaps and missing security headers. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enabling DNSSEC, and establishing vulnerability disclosure processes to enhance trust and security maturity.

F

Finews AG

finews.ch

61

finews.ch is a leading Swiss financial news portal operated by Finews AG, providing continuously updated news and insights for professionals in the finance industry. The website targets finance professionals, investors, and industry stakeholders with high-quality journalism, sponsored content, and multimedia offerings such as podcasts and videos. The site demonstrates a mature digital presence with a modern Joomla CMS infrastructure, integration of advanced analytics (Matomo and Google Analytics), and a consent management platform ensuring GDPR compliance. Security posture is strong with HTTPS enforcement and privacy-conscious tracking, though there is room for improvement in explicit security policies and vulnerability disclosure. Overall, finews.ch presents a professional, trustworthy, and well-branded platform with extensive social media engagement and advertising partnerships.

P

Pragmatis GmbH

pragmatis.de

56

Pragmatis GmbH is a specialized technology company focused on providing laboratory and technical data management software solutions, including LIMS, LES, LIS, CAQ, AQS, MES, and ELN systems. With over 30 years of experience, the company offers both on-premises and cloud-based solutions tailored to laboratory and technical environments. Their market position is that of a niche expert with long-standing customer relationships and a modernized product portfolio. The website reflects a professional and consistent brand image targeting laboratory and technical professionals seeking reliable data management systems. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, integrating Google Analytics and Google Tag Manager for analytics and marketing. The site is mobile-optimized and performs moderately well, with a cookie consent mechanism compliant with GDPR. Hosting appears to be via rzone.de nameservers, indicating a German hosting provider. The technical infrastructure is modern but could benefit from enhanced security headers and accessibility improvements. From a security perspective, the site enforces HTTPS and employs email cloaking and cookie consent for privacy. However, no explicit security policies or incident response contacts are published, and security headers are not detected. There are no visible vulnerabilities or exposed sensitive data. The overall security posture is moderate, with room for improvement in formalizing security policies and enhancing technical defenses. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It serves its target audience effectively but could enhance its security transparency and technical hardening to further strengthen its risk profile.

P

Prevo-System AG

prevo.ch

58

Prevo-System AG is a Swiss-based software company specializing in providing the PAKT management system tailored for collective life insurance providers. The company is a joint venture involving msg systems ag, Baloise, and Helvetia Versicherungen, positioning it strongly within the Swiss insurance software market. Their product PAKT supports the entire lifecycle of collective life insurance administration, including BVG and over-obligatory occupational benefits, offering a comprehensive and integrated solution for insurers. The website reflects a professional and consistent brand image with clear business focus and customer testimonials from reputable insurance companies, indicating a solid market position. Technically, the website is built on Joomla CMS with modern frameworks such as Bootstrap and jQuery, enhanced by custom MSG group scripts and third-party integrations like hCaptcha for bot protection. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security measures include HTTPS enforcement and CSRF tokens, though some security headers are missing. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. The security posture is generally strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. The domain registration aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, Prevo-System AG presents a credible, professional, and secure online presence suitable for its target audience in the Swiss insurance sector. Strategic enhancements in security transparency and incident response communication would further strengthen trust and compliance.

M

msg industry advisors ag

msg-advisors.com

63

msg industry advisors ag is a consulting firm specializing in the life sciences and chemicals industries, providing expert services in organizational change, manufacturing excellence, compliance, digital health, data management, SAP transformation, and project management. The company positions itself as a trusted partner for complex and highly regulated markets, leveraging deep industry knowledge and digital expertise. The website reflects a professional and comprehensive digital presence, with clear navigation, rich content, and multi-language support. Technically, the site is built on Joomla CMS with modern libraries and includes consent management and analytics tools, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS and consent mechanisms, though some security headers are not evident, and no explicit incident response or vulnerability disclosure information is provided. The absence of WHOIS data for the domain is a notable anomaly that warrants further verification. Overall, the website and business appear credible and well-managed, serving a medium-sized enterprise audience primarily in Germany.

D

Dream Technologies Group doo

crnobelo.rs

58

CRNOBELO.rs is a Serbian lifestyle and entertainment portal operated by Dream Technologies Group doo, established in 2016. The website offers diverse content including horoscopes, lifestyle articles, entertainment news, and interactive quizzes, targeting a general audience interested in lifestyle and leisure topics. The business model relies primarily on advertising revenue, with Google Adsense and Facebook Ads integrated. The site maintains a consistent brand presence with active social media channels and a clear content focus.

C

CRNOBELO.com

crnobelo.mk

50

CRNOBELO.com is a Macedonian lifestyle and news portal established in 2008, offering a wide range of content including news, horoscopes, recipes, interviews, and quizzes. The site targets a general Macedonian-speaking audience and maintains a consistent brand presence with active social media channels. Technically, the website is built on Joomla CMS with common web technologies such as jQuery, Bootstrap, and integrates advertising and analytics SDKs. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and standard security headers present, though lacks explicit security policies and vulnerability disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, serving as a regional media outlet with advertising revenue as the primary business model.

J

Jutarnji list

jutarnji.hr

55

Jutarnji list is a leading Croatian daily news portal operated by Hanza Media, providing comprehensive news coverage in politics, sports, culture, and economy. The website targets a general audience with a business model based on advertising and premium content subscriptions. It holds a strong market position as a primary news source in Croatia. Technically, the site is built on Joomla CMS with Bootstrap framework, leveraging modern advertising and analytics technologies such as Google Tag Manager, Prebid.js, and Microsoft Clarity. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security posture is strong with HTTPS, reCAPTCHA, and consent management via Didomi, though explicit privacy and terms policies are not found in the provided content. Overall, the site demonstrates a mature digital infrastructure and trustworthy business presence, with room for improvement in privacy transparency and incident response disclosures.

P

pma - Projekt Management Austria

pma.at

62

Projekt Management Austria (pma) is a well-established non-profit organization based in Austria, specializing in project management certifications, networking, and education. The organization offers internationally recognized certifications aligned with IPMA standards, targeting project management professionals and young professionals under 30. Their services include certification programs, events, workshops, and membership benefits, positioning them as a key player in the Austrian and international project management community. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery. It is mobile-optimized and includes standard analytics via Google Analytics with IP anonymization. The site demonstrates moderate performance and good SEO practices but lacks some advanced accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, it lacks visible security headers and a published security policy or incident response contacts. The absence of WHOIS data limits domain trust verification, but the professional content and partner affiliations support legitimacy. Overall, the website is professional and trustworthy with minor gaps in privacy policy visibility and security best practices. Strategic improvements in these areas would enhance compliance and security posture.

C

CRNOBELO.com

crnobelo.com

49

CRNOBELO.com is a Macedonian lifestyle and news portal offering a wide range of content including news, horoscopes, entertainment, recipes, and interviews. The site targets Macedonian-speaking audiences interested in lifestyle and cultural topics. It operates on a Joomla CMS platform with modern web technologies and integrates multiple advertising networks for monetization. The website is professionally designed with good navigation and mobile optimization. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks explicit security policies and cookie consent mechanisms. WHOIS data is unavailable, which raises concerns about domain legitimacy, although the website content and branding appear consistent and trustworthy. Overall, the site is a functional and relevant media portal with room for improvement in privacy compliance and security transparency.

I

International Arctic Science Committee

iasc.info

56

The International Arctic Science Committee (IASC) is a non-governmental organization dedicated to fostering international cooperation in Arctic research. The website serves as a hub for Arctic scientists, policymakers, and stakeholders, providing information on working groups, capacity building programs, events, and news related to Arctic science. The organization positions itself as a key facilitator in Arctic research collaboration, with a focus on scientific advancement and community engagement. Technically, the website is built on Joomla CMS with modern front-end technologies including Bootstrap and jQuery. It employs HTTPS with good SSL configuration and uses Google Analytics for visitor tracking. The site is mobile-optimized and features a professional design with clear navigation, although accessibility features could be improved. The presence of CSRF tokens in forms indicates attention to security in user input handling. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide publicly accessible security policies or incident response information. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which is a notable gap given GDPR requirements. The WHOIS data is privacy protected, which is typical for NGOs, and does not raise immediate concerns. Overall, the website is trustworthy and professional, serving its niche audience effectively. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and regulatory adherence.

A

AQ Viande Suisse / Agriquali

aq-viandesuisse.ch

47

AQ Viande Suisse operates a Swiss quality assurance program focused on meat producers, ensuring adherence to strict agricultural standards and providing certification to member farms. The website serves as an information hub for producers and buyers, offering program details, directives, and ordering options for certification materials. Technically, the site is built on Joomla CMS with Bootstrap and modern web technologies, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and explicit privacy compliance mechanisms. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity.

Q

QM Schweizerfleisch

qm-schweizerfleisch.ch

46

QM Schweizerfleisch operates a quality management program focused on Swiss meat producers, ensuring adherence to good agricultural practices and strict quality standards. The website serves as an information and resource hub for producers and consumers, providing documentation, ordering options for certification vignettes, and updates on regulatory changes. The business is positioned as a niche quality assurance entity within the Swiss agricultural sector, supported by certifications such as ISO 9001 and IQNet, and operated under Agriquali. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, offering a modern and responsive design. It integrates Google Analytics for visitor tracking but lacks visible privacy and cookie policies, which is a compliance shortfall. The site is accessible without WAF or blocking mechanisms, indicating good availability. From a security perspective, HTTPS is enforced, and CSRF tokens are used in forms, but the absence of security headers and incident response contacts suggests room for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy but should enhance privacy compliance and security headers to improve its security posture and regulatory adherence.

D

dwif-Consulting GmbH

dwif.de

67

dwif-Consulting GmbH is a well-established German tourism consultancy with a 75-year history, specializing in tourism research, market data, and strategic consulting for destinations and hospitality sectors. The website is professionally designed using Joomla CMS and modern frameworks, providing a rich user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS, GDPR-compliant cookie consent, and CSRF protections, though some security headers could be improved. The site uses Google Analytics and Tag Manager for user tracking with moderate privacy compliance. Overall, the website reflects a credible and trustworthy business with strong market positioning in the tourism consulting industry.

S

SkyAlps

skyalps.com

68

SkyAlps is a regional airline company focused on providing air transportation services primarily in the Alpine region. The company offers flight booking services through its website, which is professionally designed and built on a modern technology stack including Joomla CMS and popular JavaScript libraries. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism to comply with privacy regulations. However, the absence of a visible privacy policy and terms of service pages is a gap in compliance. The WHOIS data for the domain is missing, which raises questions about domain registration legitimacy and requires further verification. Overall, the website presents a trustworthy and professional front for the airline business.

C

Cleaning Service SA

cleaning-service.ch

46

Cleaning Service SA is a professional cleaning and facility services company operating primarily in the Suisse Romande region of Switzerland, with agency locations in Geneva, Nyon, Lausanne, and Fribourg. The company offers a broad range of services including general cleaning, concierge services, special cleaning tasks, medical and pharmaceutical disinfection, waste collection, handyman services, and a flexible 'One Stop Shopping' concept. The website reflects a well-established regional business with multiple certifications such as ISO 9001, 14001, 45001, and various local labels indicating quality and corporate responsibility. The target audience includes businesses and organizations seeking reliable cleaning and facility management services.

V

Verein Jobdach

jobdach.ch

50

Verein Jobdach is a Swiss non-profit organization established in 1996, providing survival aid and harm reduction services in the canton of Luzern. Their key offerings include emergency shelter (Notschlafstelle), long-term housing for individuals with addiction and mental health challenges (Obdach), and day structure programs (Wärchstatt). The website is built on Joomla CMS and incorporates modern web technologies such as Bootstrap and jQuery, with Google Analytics for visitor tracking. The site is well-structured, mobile-optimized, and presents a professional image consistent with its social mission. However, it lacks visible contact information on the homepage and does not implement cookie consent mechanisms, which may affect privacy compliance.

O

Open Source Matters, Inc.

joomla.org

72

Joomla.org represents the official website for Joomla!, a widely recognized open source content management system (CMS) established in 2005 and maintained by Open Source Matters, Inc. The platform empowers website creators with a flexible, mobile-friendly, and extensible CMS solution supported by a large global community. Joomla offers downloads, free hosted sites, training, certification, and a rich ecosystem of extensions and templates. The website reflects a mature and professional presence with consistent branding and comprehensive content aimed at developers, site administrators, and community members. Technically, the site leverages modern web technologies including Joomla CMS, Bootstrap 5, FontAwesome, Google Fonts, and various JavaScript libraries. It is hosted by Rochen and integrates analytics tools such as Google Analytics and Pingdom RUM for performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly, providing a fast and user-friendly experience. From a security perspective, Joomla.org enforces HTTPS and employs CSRF tokens in forms, with regular security announcements published. However, explicit HTTP security headers and a dedicated security policy or incident response contact are not evident, representing areas for improvement. The WHOIS data is unavailable or malformed, limiting domain registration trust verification, but the website's content and ecosystem strongly support its legitimacy. Overall, Joomla.org demonstrates a strong digital maturity and business credibility with minor gaps in security transparency and WHOIS data availability. Strategic enhancements in security policy publication and domain registration transparency would further strengthen trust and compliance.

A

African Network Information Centre

afrinic.net

76

AFRINIC is the Regional Internet Registry (RIR) for Africa, responsible for the allocation and management of Internet number resources including IPv4, IPv6, and ASNs. Established in 1999, AFRINIC serves a critical role in supporting the African internet community, including ISPs, network operators, governments, and other stakeholders. The organization offers a range of services such as resource management, DNS support, routing security, training, and policy development, positioning itself as a key infrastructure entity in the African internet ecosystem. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and Helix3, incorporating various third-party libraries such as jQuery and Font Awesome. It integrates analytics tools including Google Analytics and Matomo, and employs a comprehensive cookie consent mechanism via OneTrust, demonstrating a mature digital presence. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. From a security perspective, AFRINIC enforces HTTPS and demonstrates good security practices including the use of DNSSEC and RPKI programs. However, explicit security headers are not fully confirmed, and no dedicated security policy or incident response contacts are published, indicating areas for improvement. The WHOIS data is consistent with the organization's identity and history, reinforcing trustworthiness. Overall, AFRINIC's website reflects a professional, credible, and secure platform aligned with its mission. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and incident response contacts, and improving accessibility features to further strengthen compliance and user experience.

G

Great Place To Work® Institute

greatplacetowork.com

75

Great Place To Work® Institute operates a comprehensive platform focused on building high-trust workplace cultures through employee surveys, certification, and employer recognition lists. The company targets employers and HR professionals seeking to improve workplace culture and employee engagement. The website demonstrates a mature digital presence with a Joomla CMS, modern JavaScript libraries, and integrated marketing and analytics tools such as Google Tag Manager and Marketo. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. The WHOIS data is unavailable, which slightly reduces trust but the website's professional content and branding strongly support legitimacy. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations.

G

Gymnase de Renens

gyre.ch

54

Gymnase de Renens is a Swiss educational institution providing secondary education including commerce, general culture, and bilingual maturity programs. The website serves as an official portal offering resources and information for students, staff, and administration. The site is well-structured with clear navigation and professional design, targeting primarily French-speaking users in Switzerland. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, providing a responsive and moderately performant experience. Security posture is adequate with HTTPS enabled, but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No forms or analytics scripts are detected, indicating minimal data collection. Overall, the domain registration aligns well with the institution's identity, supporting legitimacy and trustworthiness.

D

DUKOMETAL S.A.

dukometal.ch

38

DUKOMETAL S.A. is a Swiss-based specialist in industrial sheet metal work and thermopowder coating, offering a comprehensive range of manufacturing services including laser cutting, locksmithing, bending, and tank fabrication. The company targets industrial clients requiring high-quality sheet metal solutions and operates from modern facilities equipped with advanced machinery. The website is professionally designed using Joomla CMS and Bootstrap, providing a good user experience with clear navigation and relevant content. However, the site lacks visible privacy and cookie policies, which impacts compliance with GDPR and related regulations. Security posture is moderate with HTTPS usage but missing security headers and no visible incident response information. Overall, the website presents a credible and trustworthy business presence but would benefit from enhanced privacy and security practices.

C

CENTR VZW/ASBL

centr.org

57

CENTR is a well-established association founded in 1998 that represents European country code top-level domain (ccTLD) registries. It serves as a forum for information exchange, policy advocacy, and industry data analytics, positioning itself as a key voice in the European DNS community. The website reflects a professional and consistent brand image, targeting members and stakeholders in the domain registry sector. Technically, the site is built on Joomla CMS with modern libraries such as jQuery and Bootstrap, and it integrates Matomo for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS and domain transfer protections, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially addressed with clear privacy and cookie policies, but lacks explicit consent mechanisms. Overall, the domain registration data aligns well with the website content, supporting high legitimacy and trustworthiness.

C

CookieScript

cookie-script.com

65

CookieScript is a specialized SaaS provider offering comprehensive cookie compliance solutions tailored to meet GDPR, CCPA, and other global privacy regulations. The company positions itself as a Google CMP Gold Partner with strong market presence and high customer satisfaction ratings. Their key services include cookie banners, scanners, privacy policy generation, consent management, and advanced reporting, targeting website owners, agencies, and businesses requiring privacy compliance. Technically, the website is built on Joomla CMS, hosted on DigitalOcean with EU-based servers, and integrates modern web technologies and tracking tools such as Google Tag Manager and PageSense. Security posture is solid with HTTPS, CSRF protections, and EU data residency compliance, though improvements like DNSSEC and security headers are recommended. Overall, the website is professional, well-structured, and trustworthy, with no signs of malicious activity or content blocking.