Security Directory

The University of New Brunswick (UNB) is a well-established Canadian educational institution with a rich history dating back to 1785. The website serves as a comprehensive portal for prospective and current students, faculty, staff, alumni, and partners, offering detailed information on academic programs, admissions, student life, research, and athletics. UNB positions itself as a leading university on Canada's East Coast with a broad range of study options and strong community engagement. The site reflects a mature business model focused on education, research, and community partnerships.

S

Site 20/20

site2020.com

54

Site 20/20 is a Canadian-based technology company specializing in smart traffic control and management solutions designed to enhance safety and efficiency in work zones across North America. The company offers innovative hardware products such as the Guardian SmartFlagger and Guardian Cone Pro, alongside a comprehensive operations management platform called Onyx. Positioned as an industry innovator, Site 20/20 targets construction, utilities, telecom, and electrical sectors with a technology-driven business model focused on safety and operational excellence. The website reflects a mature, professional digital presence with strong branding and clear market positioning. Technically, the website is built on WordPress with Elementor and integrates multiple modern marketing and analytics tools including Google Analytics, HubSpot, Hotjar, and Facebook Pixel. The site is well-optimized for performance, mobile responsiveness, and SEO, demonstrating a high level of digital maturity. Hosting and domain registration are consistent with the business profile, using GoDaddy as registrar and DNS provider. From a security perspective, the site employs HTTPS and standard security practices but lacks advanced headers like Content-Security-Policy and DNSSEC, which are recommended for enhanced protection. No explicit security or incident response policies are published, which could be improved to bolster trust and compliance. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, Site 20/20 presents a trustworthy, professional online presence with strong business credibility and technical implementation. Strategic improvements in security headers and transparency around security policies would further enhance their security posture and stakeholder confidence.

G

Genesis

genesiscentre.ca

55

Genesis is a well-established startup incubator and accelerator based in Newfoundland & Labrador, Canada, supporting early-stage tech founders through mentorship, workshops, funding connections, and community programs. The website reflects a mature digital presence with a modern tech stack primarily built on Webflow, enhanced by analytics and marketing tools such as Google Tag Manager and LinkedIn Insight. The site is well-designed, mobile-optimized, and provides clear navigation and rich content tailored to its target audience of startup founders and entrepreneurs. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the professional quality of the website content and branding supports the business credibility. Overall, Genesis presents a trustworthy and professional front for its startup support services, though enhancing privacy compliance and security transparency would strengthen its risk profile.

I

InnovateNB

innovatenbcelebration.com

60

InnovateNB is a specialized event platform focused on celebrating innovation within New Brunswick, Canada. The website promotes the InnovateNB Celebration & Awards 2025, highlighting local innovators and technology entrepreneurs through a formal awards event. The business model centers on event organization, sponsorship, and community engagement within the regional technology sector. The site is professionally designed using Squarespace, with integrations for marketing and analytics tools such as HubSpot, Google Tag Manager, and Datadog. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is strong with HTTPS and HSTS enabled, but lacks visible privacy and cookie policies, which impacts compliance. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and partner associations suggest legitimacy. Overall, the site is a credible regional event platform with room for improvement in privacy compliance and domain registration transparency.

W

West of England Protection & Indemnity (P&I) Club

westpandi.com

69

West of England Protection & Indemnity (P&I) Club is a prominent insurance provider specializing in marine insurance products for the global maritime industry. The Club offers a range of covers including Mutual P&I, Defence, Charterers, Fixed Premium, Offshore, and Extended covers. As a member of the International Group of P&I Clubs, it holds a strong market position with unmatched liability coverage limits outside the group. The website is professionally designed, mobile-optimized, and provides comprehensive information and resources for its target audience of shipowners, charterers, and maritime insurers worldwide. Technically, the site employs modern analytics and tracking tools such as Microsoft Clarity, Google Analytics via Google Tag Manager, and HubSpot Analytics, alongside security measures like HTTPS and reCAPTCHA on forms. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding strongly suggest a legitimate and established business. Privacy compliance is well addressed with a clear cookie policy and consent mechanism. Overall, the site demonstrates a mature digital presence with room for improvement in explicit security policy disclosures and domain registration transparency.

U

UK P&I Club

ukpandi.com

78

UK P&I Club is a well-established mutual marine insurance organization providing protection and indemnity insurance to shipowners, charterers, and offshore operators. The website reflects a mature business with a strong market position, offering a broad range of insurance products and risk management services. The company emphasizes safety, compliance, and sustainability, supported by a global network and a AAA S&P rating. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections in place. The site demonstrates good privacy compliance with clear cookie consent mechanisms and GDPR adherence. WHOIS data is unavailable, which is a minor concern, but the overall trustworthiness and professionalism of the site mitigate this. Strategic recommendations include publishing explicit security policies and vulnerability disclosure information to enhance transparency and trust.

T

TT Club

ttclub.com

71

TT Club operates as a leading provider of insurance and risk management services tailored to the international transport and logistics industry. The website presents a professional and enterprise-grade digital presence, leveraging TYPO3 CMS and integrating modern consent management tools such as Cookiebot and Cloudflare Turnstile for bot detection. The site is optimized for mobile and includes comprehensive cookie consent categories, reflecting a commitment to privacy compliance. However, the absence of explicit privacy policy and terms of service pages, as well as missing contact information, limits transparency. The WHOIS data is notably absent or inaccessible, raising concerns about domain registration legitimacy despite the professional front-end presentation. Security posture is strong with HTTPS and consent mechanisms, but could be improved with additional security headers and published security policies.

U

UK P&I Club

thomasmillerspecialty.com

71

UK P&I Club is a well-established mutual marine insurance provider specializing in Protection & Indemnity (P&I) insurance, with a dedicated Fixed Premium division for smaller ships. The website reflects a professional maritime insurance business with clear service offerings, including claims management handled by Thomas Miller Claims Management. The site is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and Google reCAPTCHA for form security. The security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers and published security policies are absent. WHOIS data is unavailable, which slightly impacts trust but the overall legitimacy is supported by consistent branding and professional content. The site is accessible with no WAF or blocking detected, and content is safe for general audiences.

S

Steamship Mutual Underwriting Association (Bermuda) Limited

steamshipmutual.com

67

Steamship Mutual Underwriting Association (Bermuda) Limited operates as a mutual insurance association specializing in protection and indemnity insurance for the maritime industry. The company provides a range of insurance products including freight demurrage and defence, war risk, and loss prevention services, targeting shipowners and maritime professionals globally. The website reflects a mature business with a strong market position in the shipping insurance sector. Technically, the website is built on Drupal CMS and employs modern web technologies such as Google Tag Manager and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with a professional design and clear navigation enhancing user experience. From a security perspective, the site enforces HTTPS, implements key security headers, and uses cookie consent mechanisms aligned with GDPR compliance. However, the absence of a publicly available security policy and incident response contact details represents an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for Steamship Mutual, though the lack of WHOIS domain registration data introduces some uncertainty. Strategic recommendations include publishing a security policy, providing incident response contacts, and verifying domain registration details to enhance trust and compliance.

N

NorthStandard

standard-club.com

71

NorthStandard is a marine insurance provider specializing in Protection & Indemnity (P&I) insurance, positioning itself as one of the largest P&I clubs within the International Group. The company targets maritime industry professionals, ship owners, and operators, offering marine insurance services and partnership support. Founded in 2022, the business operates with a modern digital presence, leveraging professional design elements and standard web technologies. The website demonstrates moderate digital maturity with the use of Google Tag Manager, Cookiebot for consent management, and Hotjar for user behavior analytics. However, explicit privacy policies and terms of service are not present in the analyzed content, which may impact compliance and user trust.

The Shipowners' Club website presents a professional maritime insurance business offering cover and insurance services to vessel owners, operators, and charterers worldwide. The site is well-structured with clear descriptions of its core business focus in the transportation sector. The technical infrastructure leverages Concrete CMS, Bootstrap, jQuery, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and lack of visible privacy policy or terms of service pages highlight areas for improvement. The missing WHOIS data for the domain raises concerns about domain registration transparency, which impacts overall trustworthiness. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to improve compliance and user trust.

N

NorthStandard

nepia.com

58

NorthStandard is a marine insurance provider specializing in Protection & Indemnity (P&I) coverage, positioning itself as one of the largest P&I clubs within the International Group. The company targets marine industry professionals, ship owners, and operators, offering specialized insurance services tailored to the maritime sector. The website reflects a professional and consistent brand image with a focus on marine insurance solutions. Technically, the site employs modern web technologies including Google Tag Manager, Hotjar, Cookiebot for consent management, Adobe Typekit, and Google Fonts, indicating a moderate level of digital maturity. The hosting registrar is IONOS SE, a reputable provider, and the domain is relatively new, created in 2022, which aligns with a new business entity.

N

NNPC Marine Insurance

nnpc.nl

68

NNPC Marine Insurance is a specialized marine insurance provider operating as the only Dutch P&I club, offering global marine insurance and risk solutions with a personal touch. Their services include P&I Mutual, Fixed Premium, FD&D, Crew insurance, Charterers Liability, and Inland Shipping insurance. The website targets marine industry professionals such as ship owners and charterers, positioning itself as a trusted and expert provider in the marine insurance sector. Technically, the website is built on WordPress with a modern tech stack including WPBakery Page Builder, multilingual support via WPML, and analytics tools like Google Tag Manager and Matomo. The site is hosted by Hosting Concepts B.V. and uses HTTPS with a good SSL configuration. Mobile optimization and SEO are well implemented, though accessibility is basic. From a security perspective, the site employs HTTPS and cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and DNSSEC. The WHOIS data shows inconsistencies, notably a domain creation date in the future, which warrants further verification. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Overall, the website presents a professional and trustworthy front for NNPC Marine Insurance, but improvements in transparency around security policies, incident response, and domain registration details are recommended to enhance trust and compliance.

I

ITIC

itic-insure.com

73

ITIC is a well-established mutual insurer specializing in professional indemnity insurance for transport professionals, including marine, aviation, and offshore energy sectors. The company positions itself as the world’s leading insurer in this niche, serving over 3650 members across 110 countries. The website reflects a mature business with comprehensive resources such as claims examples, knowledge bases, and publications, supporting its market leadership and customer engagement. The business model is mutual, emphasizing cost-effective insurance without external shareholders, which enhances trust and appeal to its target audience. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Google Analytics, Google Tag Manager, and YouTube integrations. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and clear navigation. Cookie consent mechanisms and privacy policies are implemented, indicating attention to privacy compliance. However, no explicit security policy or incident response information is published. Security posture is strong with HTTPS enforced and use of reCAPTCHA on forms, but could be improved by adding explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces some trust, but the overall site professionalism and business consistency mitigate concerns. Overall, ITIC’s website demonstrates a high level of professionalism, technical maturity, and security awareness appropriate for its industry. Strategic improvements in security transparency and WHOIS data availability would further enhance trust and compliance.

G

Gard AS

gard.no

69

Gard AS is a well-established Norwegian company specializing in marine and energy insurance, positioning itself as a global leader in these sectors. The website reflects a professional and modern digital presence built on Next.js and React frameworks, with a focus on delivering expert insights and insurance coverage for the maritime industry. The technical infrastructure is modern and optimized for mobile devices, with good SEO practices and structured data implementation. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. The security posture is moderate due to these missing elements, but the domain's long history and consistent WHOIS data support the company's legitimacy. Overall, the website is trustworthy and professional but could enhance user trust and compliance by adding clear privacy, security, and contact information.

A

American Steamship Owners Mutual Protection and Indemnity Association, Inc.

american-club.com

64

The American Club is a well-established mutual Protection and Indemnity insurance association domiciled in the United States, serving the maritime industry since 1917. The website reflects a professional organization offering a comprehensive suite of insurance products and services tailored to shipowners and related stakeholders. The company maintains an international presence with multiple regional offices and provides extensive resources such as circulars, member alerts, and loss prevention guidance. Technically, the website employs common JavaScript libraries and Google Tag Manager for analytics, with a moderate level of mobile optimization and accessibility. Security posture is adequate but could be improved by implementing security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly diminishes trustworthiness. Overall, the site is functional, informative, and trustworthy from a business perspective but would benefit from enhanced security and privacy compliance features.

P

Publicis Groupe

publicisgroupe.media

58

Publicis Groupe's Slovak media site presents itself as an integrated communication group specializing in media, data, and technology services. The company emphasizes a unified team approach under the 'Power of One' philosophy, aiming to build strong brands and succeed in platform-driven markets. The website content is professional, targeting business clients and showcasing certifications that reinforce its market credibility. Technically, the site is built on WordPress with modern marketing and analytics tools such as Google Tag Manager and Facebook SDK, ensuring a solid digital infrastructure. Security posture is good with HTTPS enabled and GDPR cookie compliance implemented, though some security headers and explicit privacy policies are missing. Overall, the site is trustworthy and well-positioned in its industry segment.

G

Gransy, s.r.o.

gameconfguide.com

46

Game Conference Guide is a specialized online platform providing a comprehensive calendar and listing of games industry events, summits, festivals, and conferences for the years 2024 through 2026. The website targets professionals and enthusiasts in the gaming industry, offering filtering options by location, country, and region to facilitate event discovery. The business operates as a niche information service, leveraging WordPress CMS with popular plugins such as Yoast SEO and Elementor to deliver a user-friendly and SEO-optimized experience. Hosting is provided by Websupport.sk, consistent with the domain's Slovakian registration. Technically, the site demonstrates moderate performance with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though improvements could be made by enabling DNSSEC and enhancing security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate, with a basic privacy and cookie policy present, reflecting GDPR considerations. Business credibility is moderate, supported by transparent WHOIS data and consistent domain registration details. Overall, the website is professional, secure, and reliable for its intended audience.

U

Unity Technologies

tapjoy.com

71

Unity Technologies operates a leading real-time 3D development platform with integrated monetization and user acquisition services, including the Tapjoy Offerwall. The company targets game developers, advertisers, and publishers, providing a comprehensive suite of tools to build, monetize, and grow games and interactive experiences. Their market position is strong as an enterprise-level technology provider with a global footprint and a mature digital presence. The website demonstrates a modern technical infrastructure leveraging React and Next.js frameworks, hosted on Akamai CDN, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting Unity's enterprise credibility and commitment to privacy and security.

R

Rifles Bergara International

bergara.online

67

Bergara.online is the official website for Rifles Bergara International, a company specializing in the manufacture and sale of rifles and related accessories. The site serves as an e-commerce platform and information hub, offering product catalogs, blogs, events, and an international network of authorized dealers. The business targets shooting sports enthusiasts and hunters, positioning itself as a reputable international brand in the firearms retail sector. The website is built on WordPress with a modern tech stack including popular plugins and analytics tools, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and age verification in place, but lacks comprehensive privacy policies and explicit security headers. The site uses extensive third-party marketing and analytics services, indicating a focus on customer engagement and data-driven marketing. Overall, the website is professional and trustworthy, though improvements in privacy compliance and security transparency are recommended.

Christensen Arms operates as a specialized manufacturer and retailer of hunting and long-range precision rifles, targeting firearm enthusiasts and hunters. The company has a well-established online presence with a professional e-commerce website built on WordPress and WooCommerce, supported by SEO and marketing tools such as Yoast SEO and Google Tag Manager. The domain is long-standing, registered since 1998, which aligns with the company's founding year, indicating a stable business history. Technically, the website employs modern web technologies and is hosted on Bluehost, with moderate performance and good mobile optimization. Security practices include HTTPS enforcement and bot protection via reCAPTCHA, but lack advanced security headers and DNSSEC, which could be improved. Privacy compliance is weak, with no visible privacy or cookie policies, and no GDPR indicators, which poses a compliance risk. The security posture is moderate, with no critical vulnerabilities detected but room for improvement in security headers and disclosure policies. The absence of contact information and incident response details limits transparency. Overall, the website is trustworthy and professional but should enhance privacy and security compliance to reduce risk and improve user trust.

D

Development KSK s. r. o.

bikey.sk

51

Bikey.sk is a regional e-bike rental platform serving the Košice region in Slovakia, operated by Development KSK s. r. o. The website presents a unified brand for multiple e-bike rental locations, aiming to boost tourism and provide accessible cycling equipment. The business model is focused on regional tourism and transportation services, targeting visitors and tourists interested in e-bike rentals. The website is built on WordPress with a modern tech stack including Google Analytics and Tag Manager for tracking, and uses cookie consent mechanisms to comply with GDPR. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, well-branded, and trustworthy, with good SEO and mobile optimization.

K

Košický samosprávny kraj

taboryksk.sk

46

Košický samosprávny kraj operates a dedicated website providing information and registration for summer camps targeted at children and youth within the Košice self-governing region of Slovakia. The site offers a broad range of educational, cultural, and recreational camps organized by regional institutions, emphasizing community engagement and youth development. The website is professionally designed, well-structured, and uses modern web technologies including WordPress, Gravity Forms, and Google Analytics for tracking and user interaction. Security measures such as HTTPS and Google reCAPTCHA are implemented to protect user data and prevent abuse. Privacy and cookie policies are present with a consent mechanism, reflecting compliance with GDPR requirements. However, the site lacks explicit terms of service and a formal security policy or incident response contact information. Overall, the website demonstrates a solid security posture and trustworthy business credibility consistent with a government-backed service.

M

Multiverse Computing

multiversecomputing.com

66

Multiverse Computing is a European leader in Quantum AI software, founded in 2019, providing advanced AI and optimization solutions through its proprietary platform Singularity and AI model compression tool CompactifAI. The company targets enterprise clients across multiple sectors including finance, energy, manufacturing, and defense. The website demonstrates a modern technical infrastructure using Next.js, React, and Sanity CMS, with multimedia content and integration of marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Security posture is good with HTTPS and domain protections, but lacks DNSSEC and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and well-branded, but could improve transparency on privacy and security practices.

F

FORPSI

forpsi.sk

67

FORPSI is a Slovak-based technology company specializing in domain registration, web hosting, and server services. The company positions itself as a reliable partner with its own data center, targeting individuals and businesses seeking affordable and quality hosting solutions. The website reflects a professional and consistent brand image with clear service offerings and a focus on customer convenience through online domain registration and hosting management.

O

Oil Price Information Service, LLC

petrochemwire.com

67

PetroChem Wire, operated by Oil Price Information Service, LLC and a Dow Jones company, is a leading provider of transparent pricing and market analysis for the petrochemicals, plastics, and PVC industries. The company offers a suite of daily, weekly, and monthly reports, maps, and training services targeted at refiners, petrochemical producers, and manufacturers. Their market position is strong, serving as the primary data provider for CME and ICE futures benchmarks in petrochemicals. The website is professionally designed, well-branded, and optimized for industry professionals seeking reliable market data. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Smart Slider 3, and integrates Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is solid with HTTPS enabled, though some security headers and explicit incident response policies are absent. Privacy compliance is partially addressed through linked privacy and cookie policies hosted on the parent OPIS and Dow Jones domains. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS registration data is a concern but is mitigated by the strong brand association and professional content. The site does not employ a cookie consent mechanism, which could be improved for GDPR compliance. No adult or unsafe content is present, making the site safe for general audiences. Strategically, PetroChem Wire should enhance its security transparency by publishing dedicated security and incident response policies, implement a cookie consent banner, and verify domain registration details to improve trust and compliance. These steps will strengthen its market credibility and reduce potential compliance risks.

O

Oil Price Information Service, LLC

axxispetro.com

65

Axxis is a specialized provider of fuel management automation software and services targeting fuel retailers, wholesalers, and jobbers. The company offers a modular suite of integrated solutions designed to automate fuel sourcing, pricing, inventory management, dispatching, billing, and analytics. The website reflects a professional and consistent brand identity aligned with its parent company, Oil Price Information Service (OPIS), a Dow Jones company. The digital infrastructure is built on WordPress with modern plugins and tracking tools, supporting a good user experience and SEO. Security posture is solid with HTTPS and reCAPTCHA implemented, though explicit security headers and incident response information are absent. The WHOIS data for the domain is missing or unregistered, which raises concerns about domain legitimacy despite the professional presentation and valid contact information. Overall, the site is a credible business platform with room for improvement in transparency and security disclosures.

S

SECCIÓN SINDICAL UGT BBVA

fesmcugt.online

49

SECCIÓN SINDICAL UGT BBVA is a union section representing employees of BBVA under the umbrella of the Unión General de Trabajadores (UGT) in Spain. The website serves as an information portal providing updates on labor rights, collective bargaining, union activities, and member services. It targets BBVA employees and union members, offering resources such as circulars, negotiation updates, and affiliation information. The business model is focused on union representation and member engagement within the finance sector. The website is medium-sized, founded in 2018, and maintains consistent branding aligned with UGT standards. Technically, the website is built on WordPress using the GeneratePress theme and several plugins including GDPR Cookie Compliance, Contact Form 7, and The Events Calendar. It employs modern web technologies such as jQuery and Google Tag Manager for analytics. Hosting is provided by Dinahosting SL, a Spanish registrar and hosting provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain status protections to prevent unauthorized transfers or deletions. However, it lacks advanced security headers and DNSSEC is not enabled. The site includes a GDPR-compliant cookie consent mechanism and privacy policy but does not publish a dedicated security policy or incident response contacts. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its niche audience with relevant content and functional features. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and compliance.

C

Canto

canto.com

74

Canto is a leading enterprise provider of digital asset management (DAM) solutions, offering a comprehensive AI-powered platform designed to streamline the content lifecycle for organizations worldwide. Positioned as a market leader, Canto delivers a suite of services including centralized content hubs, AI-powered search, product information management, and collaborative tools that enhance brand management and marketing efficiency. The company emphasizes innovation with its latest platform generation, Canto XI, integrating AI to accelerate content workflows. Technically, the website is built on a modern Vue.js framework hosted on Netlify, leveraging multiple marketing and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Security practices include HTTPS enforcement and published security policies, although some advanced security headers and a security.txt file are absent. From a security perspective, Canto maintains a strong posture with ISO certifications and a vulnerability disclosure policy, indicating a commitment to compliance and incident response readiness. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, Canto presents a trustworthy, professional, and secure online presence suitable for enterprise clients. The lack of WHOIS data is a notable anomaly but does not detract significantly from the site's credibility given the comprehensive business and security information available. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen trust and compliance.

E

Edgar Allan

slater.app

55

Slater.app is a technology-focused SaaS platform offering an AI-powered custom code tool designed specifically for Webflow projects. The company, Edgar Allan, positions itself as a productivity enhancer for Webflow developers and designers by providing seamless AI integration to generate and manage custom code without character limits. The platform supports collaboration and aims to reduce development time with AI assistance. Technically, the website is built on Webflow CMS and hosting, utilizing modern web technologies including Google Tag Manager for analytics and Stripe for payment processing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and CSRF tokens present, though it lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. Privacy and terms of service pages are available, but GDPR compliance could be enhanced with better cookie management. Overall, the domain registration is consistent with the business claims, and the site shows no signs of malicious or suspicious activity.

T

TTRacing Australia

ttracing.com.au

66

TTRacing Australia operates an e-commerce platform specializing in gaming chairs, ergonomic office chairs, and smart standing desks, targeting gamers and professionals seeking ergonomic comfort. The company leverages licensed entertainment brands such as Marvel and Star Wars to enhance product appeal. Technically, the website is built on Shopify, utilizing modern JavaScript libraries and third-party marketing and analytics tools, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and secure checkout, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site presents a professional and trustworthy e-commerce presence with room for enhanced compliance and security.

J

JBL Professional

jblpro.com

68

JBL Professional is a well-established enterprise-level brand specializing in professional loudspeakers and audio equipment, operating under the parent company Harman International. The website targets professional audio customers, installers, and distributors globally, offering a comprehensive product catalog, support resources, and training. The digital infrastructure leverages modern JavaScript libraries, tracking tools, and is hosted on Amazon AWS, reflecting a mature technical environment with good mobile optimization and user experience. Security posture is strong with HTTPS enforcement and domain transfer protections, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is adequate with visible privacy and cookie policies linked via the parent company, but explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and aligned with industry standards.

J

JBL

jbl.pr

62

JBL Puerto Rico operates as the official regional e-commerce platform for JBL, a globally recognized audio brand under Harman International. The website offers a comprehensive catalog of premium audio products including speakers, headphones, gaming audio, and automotive/marine sound systems tailored for the Puerto Rican market. The site is professionally designed with consistent branding and provides a Spanish-language user experience with English options, targeting consumers seeking high-quality audio equipment. Technically, the site leverages Salesforce Commerce Cloud as its e-commerce platform, integrating advanced marketing and analytics tools such as Google Tag Manager, Bazaarvoice, Optimizely, and Riskified for fraud prevention. The website demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are not fully documented. The WHOIS data is malformed and lacks registrant details, which slightly impacts trust but is mitigated by the official brand presence and valid domain expiry. Overall, the site is a credible, secure, and user-friendly platform for JBL's Puerto Rican customers.

B

Braun

braunhousehold.com

71

Braun Household Appliances presents itself as a premium German brand specializing in electrical household devices, emphasizing design, innovation, and customer satisfaction. The website is professionally designed with good content quality and consistent branding, targeting a general consumer audience interested in high-quality household appliances. The technical infrastructure leverages modern web technologies including Google Tag Manager for analytics, Gigya for identity management, and TrustArc for cookie consent, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS registration data is a notable anomaly that may indicate privacy protection or data unavailability, requiring further verification to confirm domain legitimacy. Overall, the website is functional and trustworthy from a user perspective but could enhance transparency and security documentation.

H

Harman International Industries, Incorporated

harmanaudio.com

61

Harman Audio operates a localized German e-commerce website offering a wide range of audio products under well-known brands such as JBL, Harman Kardon, AKG, and InfinityLab. The site targets consumers and professionals in the European market, providing product sales, customer support, and personalization services. The website is built on Salesforce Commerce Cloud with integrations for analytics, marketing, and payment processing, reflecting a mature digital infrastructure. Security measures include HTTPS, bot protection, and fraud prevention services, although explicit security headers could be further verified. Privacy compliance is robust with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the site presents a professional, trustworthy, and user-friendly experience consistent with a large enterprise retail operation.

J

JAM Audio

jamaudio.com

49

JAM Audio operates as an established e-commerce retailer specializing in consumer audio products such as Bluetooth speakers, wireless headphones, earbuds, and turntables. The company targets general consumers seeking affordable and quality audio devices. The website serves as the official brand store, reflecting a consistent and professional brand presence with clear product offerings and social media integration. The domain age and WHOIS data support the legitimacy and long-standing market presence of the brand. Technically, the website leverages modern web technologies including Bootstrap 5, Jekyll CMS, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and AdRoll. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate rather than fast. Hosting is inferred to be via GoDaddy, consistent with the registrar information. From a security perspective, the site uses HTTPS with proper domain status locks but lacks DNSSEC and explicit security headers. No security policy or incident response contacts are published, which limits transparency in security governance. Tracking and advertising scripts are present, with moderate user tracking levels and basic privacy compliance. No critical vulnerabilities or suspicious content were detected. Overall, JAM Audio's website is a credible, professionally maintained retail platform with good business credibility and technical implementation. Security posture is adequate but could be improved by enabling DNSSEC, publishing security policies, and enhancing security headers. Privacy compliance is basic but present. The site is safe for general audiences with no adult or questionable content.

H

Homedics

ellia.com

66

Homedics operates a professionally designed e-commerce website specializing in health, wellness, and relaxation products. The company positions itself as a leading global manufacturer in this sector, targeting a broad consumer audience interested in massage, air quality, spa, and sleep-related products. The website is built on the Shopify platform, leveraging modern technologies and integrations such as Klaviyo, Dynamic Yield, and Microsoft Clarity to enhance marketing, analytics, and user experience. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit privacy and terms policies are not detected in the provided content. The absence of WHOIS data limits domain registration trust analysis but the active and consistent branding, along with Shopify hosting, supports legitimacy. Overall, the site demonstrates good technical maturity and business credibility with room for improvement in privacy compliance and explicit contact information.

H

Homedics

obusforme.com

64

Homedics operates a professional e-commerce website focused on health, wellness, and relaxation products. The company presents itself as a leading global manufacturer and retailer in this sector, targeting consumers seeking home comfort and wellness solutions. The website is built on the Shopify platform, leveraging modern technologies and integrations to provide a smooth user experience. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR and related regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presence and branding indicate legitimacy. Overall, the site demonstrates a mature digital infrastructure suitable for a large retail business.

R

Revamp

revamphair.com

67

RevampHair.com is an established e-commerce website specializing in professional hair care and styling products, including hair dryers, straighteners, and stylers. The company positions itself as a premium brand with award-winning products trusted by hair experts. The website is built on the BigCommerce platform, leveraging modern e-commerce technologies and integrating multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, Trustpilot, and Bazaarvoice. The technical infrastructure is solid, with Cloudflare DNS and HTTPS enforced, ensuring secure and reliable access for users. However, some security enhancements like DNSSEC and explicit security policies are absent. Privacy compliance is partially addressed with a cookie consent mechanism via Cookiebot, but explicit privacy and terms of service pages are not found in the provided content. Overall, the website demonstrates good professionalism, content quality, and business credibility, with room for improvement in privacy and security transparency.

D

DataGrail, Inc.

datagrail.io

72

DataGrail, Inc. operates a sophisticated AI-powered data privacy management platform designed to help businesses comply with GDPR, CCPA, and other data privacy regulations. Positioned as an enterprise-grade SaaS provider, DataGrail offers key services including live data mapping, consent management, request handling, privacy assessments, and risk management. The platform integrates with a broad ecosystem of partners such as Salesforce, Okta, Shopify, Zendesk, and Webflow, enhancing its market reach and functionality. Technically, the website is built on WordPress with modern technologies including jQuery, Google Tag Manager, Matomo analytics, and HubSpot forms. It demonstrates excellent performance, mobile optimization, and SEO practices. Security measures include HTTPS enforcement and reCAPTCHA on forms, though explicit security headers and policies could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the site lacks explicit incident response and vulnerability disclosure information, which could be enhanced to build further trust. Overall, the website and business present a high level of professionalism and trustworthiness. The lack of WHOIS data is consistent with privacy protection practices common in this industry. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen security and compliance posture.

O

Oil Price Information Service, LLC.

opisnet.com

62

OPIS, a Dow Jones company, is a leading provider of energy and chemical commodity pricing, news, and analytics. The company offers benchmark pricing data, market insights, and software solutions to a broad audience including refiners, wholesalers, retailers, traders, and financial institutions. Their market position is strong, serving as a definitive price benchmark in the energy sector since 1980. The website reflects a mature digital presence with professional design, comprehensive content, and extensive use of marketing and analytics tools. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is generally good with HTTPS and best practices in place, but could benefit from enhanced security headers and explicit incident response information. Overall, the website is trustworthy and professional but should address compliance and domain legitimacy concerns to strengthen its security and privacy posture.

B

Bruno Simon

bruno-simon.com

56

Bruno Simon's website is a personal portfolio showcasing his work as a creative developer based in Paris. The site highlights his freelance services and educational offerings related to web development, particularly using three.js technology. The business model centers on personal branding and teaching, targeting developers and learners interested in creative coding. The domain is well-established since 2009, indicating a stable online presence. Technically, the website employs modern web technologies including three.js for interactive 3D content, Google Fonts for typography, and Google Analytics and Tag Manager for user tracking. The site is hosted by IONOS SE and uses HTTPS, ensuring basic transport security. Performance and mobile optimization appear good, though accessibility features are basic. SEO is supported by proper meta tags and Open Graph data. From a security perspective, the site lacks advanced security headers and DNSSEC is not enabled, which could be improved. No privacy or cookie policies are present, and no consent mechanisms for tracking are implemented, indicating gaps in privacy compliance. No contact or incident response information is provided, limiting transparency and user trust. The WHOIS data is consistent and legitimate, with no suspicious patterns. Overall, the website is professional and functional with good technical implementation but requires enhancements in privacy compliance, security best practices, and contact transparency to improve trust and regulatory adherence.

T

Three.js Journey — Learn WebGL with Three.js

threejs-journey.com

50

Three.js Journey is a specialized online educational platform offering comprehensive video courses on WebGL and Three.js, targeting developers from beginners to advanced levels. The platform positions itself as a leading resource in the niche of 3D web development education, with a strong user base of over 47,000 students and positive industry testimonials. The business model centers on lifetime access course sales, providing extensive content totaling 93 hours of video tutorials. Technically, the website employs modern web technologies including Three.js, Google Tag Manager, and Google Analytics, hosted via Scaleway SAS with domain registration consistent with the business age and activity. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is currently weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, excellent content quality, and trustworthy business credibility, but should enhance privacy and security transparency to align with best practices.

C

C4ISRNet

c4isrnet.com

63

C4ISRNet is a specialized media platform delivering news and insights focused on defense, government technology, and military innovations. It serves as a key content destination for professionals interested in intelligence-age military technology, including AI, cyber, unmanned systems, electronic warfare, and space. The website positions itself as a premier source for defense and government communities to stay informed about technology and network innovations that ensure information dominance. Technically, the site employs a modern technology stack including Google Analytics, Tag Manager, Prebid.js for advertising, and Akamai CDN for hosting, indicating a mature digital infrastructure. The site is mobile-optimized and uses structured data for SEO benefits. Security posture is strong with HTTPS enforced and security headers likely in place, though explicit privacy and cookie policies are not detected in the provided content, which is a compliance gap. No WHOIS registrant data is available, which slightly impacts trust but the professional content and consistent branding mitigate concerns. Overall, the site is a credible and professional media outlet with moderate risk due to missing privacy disclosures.

M

Medical Properties Trust, Inc.

medicalpropertiestrust.com

63

Medical Properties Trust, Inc. (MPT) is a large, US-based real estate investment trust specializing in hospital real estate financing. The company operates globally with a portfolio of 392 properties across 9 countries, focusing on sale/leaseback transactions and investments in hospital operators. Their website reflects a mature business with strong investor relations, corporate responsibility, and a clear focus on healthcare real estate capital solutions. The target audience includes hospital operators, investors, and healthcare industry stakeholders. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, reCAPTCHA, and Chart.js. The site is mobile-optimized, accessible, and SEO-friendly, with good performance. However, some security best practices like security headers and cookie consent mechanisms are missing or not detected. From a security perspective, the site uses HTTPS and includes anti-bot measures via reCAPTCHA. There are no visible vulnerabilities or exposed sensitive data. The absence of security headers and incident response information suggests room for improvement. The WHOIS data is unavailable, which slightly reduces trustworthiness but is mitigated by the professional content and stock market presence. Overall, the website presents a professional and trustworthy image with a strong business model and technical foundation. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and compliance.

C

Coinmate s.r.o

opavia.cz

65

Coinmate s.r.o operates a leading European cryptocurrency exchange platform primarily serving Czech and European customers. Established in 2013, the company offers a range of services including quick cryptocurrency purchases, recurring buys using dollar-cost averaging, and a professional trading platform integrated with TradingView. The business emphasizes security, compliance, and customer trust, holding ISO/IEC 27001:2022 certification and partnering with reputable Czech financial institutions. Their platform supports trading in EUR and CZK, uniquely positioning them in the market. Technically, the website is built on Angular with modern analytics and marketing tools, hosted behind Cloudflare for performance and security. The security posture is strong with HTTPS, 2FA, and advanced custody solutions, though some security headers could be more explicitly declared. Privacy compliance is well managed with clear policies and consent mechanisms. Overall, Coinmate presents a professional, trustworthy, and technically mature digital presence.

R

Realitní kancelář Pubec

pubec.cz

44

Realitní kancelář Pubec is a Czech real estate agency specializing in property sales and rentals primarily in Plzeň and its surrounding region. Established since 1990, the company offers a comprehensive portfolio including residential and commercial properties, legal services, market valuations, auctions, and mortgage assistance. The website reflects a professional and customer-focused business with strong trust indicators such as high ratings on Google and Firmy.cz, and numerous positive client testimonials. Technically, the website employs modern web technologies and integrates popular analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel. However, the absence of WHOIS registration data and explicit privacy and cookie policies indicates areas for improvement in transparency and compliance. Security posture is moderate with HTTPS usage and reCAPTCHA integration but lacks visible security headers and detailed security policies. Overall, the website presents a credible and professional real estate business with room to enhance privacy compliance and security best practices.

C

CREDITAS Real Estate

vinvest.cz

57

CREDITAS Real Estate is a Czech real estate development company specializing in new apartments and houses primarily in Prague and surrounding areas. The company is part of the larger Czech investment group CREDITAS and focuses on providing accessible housing projects with over 1,000 units available or in preparation. The website reflects a professional real estate business with clear branding and relevant content targeting individuals and investors interested in the Czech real estate market. Technically, the website uses a modern CMS platform (Solidpixels), integrates Google Tag Manager and analytics, and implements cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent present, but lacks visible security headers and explicit privacy policies, which are areas for improvement. Overall, the website is accessible and functional, but the absence of WHOIS data and explicit contact information slightly reduces trustworthiness. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and providing clear contact details to improve compliance and user trust.

T

The Pitch

thepitch.no

57

The Pitch is a small, established marketing and printing agency based in Fredrikstad, Norway, founded in 2015. The company offers a range of services including printing, advertising, design, and website development, targeting local businesses and individuals seeking comprehensive marketing solutions. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though additional security headers and policies could enhance protection. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service pages. Overall, the domain age and WHOIS data support the legitimacy of the business, with no suspicious patterns detected.

D

Dyrket.no

dyrket.no

72

Dyrket.no is an online marketplace focused on delivering local food products from Norwegian farmers and producers directly to consumers. The website positions itself as a niche e-commerce platform catering to customers interested in high-quality, locally sourced food in Norway. The business model revolves around facilitating online orders and home delivery, targeting a general consumer audience within Norway. The website demonstrates a modern technical infrastructure, leveraging Next.js for server-side rendering and React for frontend interactivity, along with integration of Google Fonts, Google Maps API, and Cookiebot for cookie consent management. Analytics are implemented via Google Tag Manager, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of security headers and lack of published privacy and terms of service policies represent areas for improvement. The missing WHOIS data reduces transparency and trustworthiness, though the website content and technology usage suggest a legitimate business. Overall, the site is professionally designed with good user experience and moderate SEO optimization, but could benefit from enhanced privacy compliance and clearer contact information.