Security Directory

B

BLOX Digital

townnews.com

50

BLOX Digital is a technology company specializing in providing advanced content management systems (CMS), digital publishing, advertising, audience engagement, and video management solutions tailored for media organizations of all sizes. Positioned as a leading digital platform in the media industry, BLOX Digital focuses on maximizing revenue and streamlining multimedia content production. The website reflects a mature digital infrastructure with a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA Enterprise, hosted likely by TownNews. Security posture is strong with HTTPS enforced and consent management implemented, though explicit privacy and terms policies are not found. The absence of WHOIS data is notable but does not detract significantly from the professional presentation and trustworthiness of the site.

Kende Gastro is a Hungarian company specializing in hospitality and catering equipment, providing products, planning, servicing, and related services primarily targeting hospitality businesses and retail customers. The website is professionally designed using Joomla! CMS and integrates modern web technologies such as Bootstrap, jQuery, and Revolution Slider. It maintains an active social media presence and complies with GDPR through a cookie consent mechanism. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and incident response documentation are recommended. Overall, the website is trustworthy, business-focused, and safe for general audiences.

M

MagyarCasinos

magyarcasinos.com

60

MagyarCasinos.net is a Hungarian-language online casino review and affiliate platform specializing in providing detailed expert analyses, bonus offers, and payment method guides for Hungarian players. The site targets adult Hungarian users interested in online gambling and positions itself as a trusted source for casino recommendations. Technically, the website is built on WordPress CMS, leveraging popular plugins such as Yoast SEO and WP Rocket for SEO and performance optimization. The site uses Cloudflare DNS but lacks DNSSEC, and HTTPS is properly configured. Security posture is moderate with room for improvement in security headers and explicit privacy policies. The site integrates Google Tag Manager for analytics and tracking, with moderate user tracking levels. Business credibility is supported by transparent domain registration and detailed casino partner listings with contact emails. However, the absence of privacy and cookie policies reduces compliance confidence. Overall, the site is professionally designed, mobile-optimized, and provides relevant content for its niche audience.

P

PEKASAT SE

pekasat.com

60

PEKASAT SE is a Czech Republic-based company specializing in satellite ground station infrastructure and services, including antenna leasing, telemetry, and regulatory support. The company operates niche satellite communication services with a focus on UHF, X-Band, and S-Band antennas and collaborates internationally, notably with Azercosmos and European Space Agency projects. Their market position is that of a specialized regional player serving satellite operators and related industries. Technically, the website is built on the Bludit CMS platform using Bootstrap and jQuery, hosted likely by a Czech provider (Forpsi). The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the domain uses transfer and update prohibitions but lacks DNSSEC and visible security headers. No privacy or cookie policies are present, and no incident response or vulnerability disclosure information is published. The site uses HTTPS (implied by canonical URLs) but no detailed SSL configuration data is available. Overall security posture is moderate but could be improved. The website content is professional, business-oriented, and safe for general audiences. No adult or questionable content is present. The domain registration data aligns well with the business claims, supporting legitimacy. However, privacy and security policy gaps reduce compliance and trust scores.

B

BizGarden

bizgarden.cz

41

BizGarden is a Czech-based innovation and business consulting firm specializing in leveraging space technologies and satellite signals for industry and marketing applications. Established in 2015, the company targets SMEs, cultural and creative industries, and sustainable tourism sectors, providing professional services to foster innovation and business growth. Their market position is supported by partnerships with European organizations such as ESA and involvement in EU-funded projects. Technically, the website is built on WordPress with a modern theme and standard libraries, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies, indicating room for improvement in compliance and incident response readiness. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy and security disclosures to align with GDPR and best practices.

I

Inpraise systems

inpraisesystems.cz

61

Inpraise Systems is a specialized technology company focused on high-performance rotating machines, including turbomachines, electric motor drives, and control electronics. Their market position is that of a niche innovator collaborating with high-profile partners such as the European Space Agency and other technology firms. The company targets researchers, developers, and businesses in space, transportation, energy, and chemical sectors, offering customized engineering solutions, prototyping, testing, and small-series production. The website reflects a professional and consistent brand image with comprehensive product and application information. Technically, the website is built on modern frameworks including Bootstrap 5 and October CMS, with integrations of Google Tag Manager and reCAPTCHA for security and analytics. The site is mobile-optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and reCAPTCHA protecting forms, though explicit security headers and published security policies are absent. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the security posture is solid but could be improved by adding explicit security headers, incident response information, and vulnerability disclosure mechanisms. The WHOIS data is unavailable, likely due to privacy protection, but the website content and partnerships support legitimacy. The risk level is low, with recommendations focusing on enhancing transparency and security best practices.

C

CrystalSpace

crystalspace.eu

51

CrystalSpace is a specialized technology company focused on designing and manufacturing advanced camera systems for space and defense applications. Their product portfolio includes flight-qualified cameras for satellites, landers, rovers, and embedded edge AI vision systems for autonomous defense platforms. The company targets aerospace and defense sectors, providing high-performance imaging solutions with a strong emphasis on reliability and operational heritage. Their market position is supported by over a decade of experience and trusted partnerships, with active participation in major industry events.

B

Budapesti Műszaki és Gazdaságtudományi Egyetem (BME)

bme.hu

55

Budapesti Műszaki és Gazdaságtudományi Egyetem (BME) operates a comprehensive and professionally designed website serving students, faculty, researchers, and partners. The site provides extensive information on academic programs, research initiatives, international collaborations, and campus life. The university holds a strong market position as a leading technical institution in Hungary with a history dating back to 1782. Technically, the website is built on Drupal 10 with Bootstrap and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a mature digital presence aligned with the university's stature.

M

Moravský letecký klastr, z.s.

czech-aerospace.cz

53

Moravský letecký klastr, z.s. is a well-established Czech aerospace cluster association focused on fostering collaboration, innovation, and business development among aerospace companies and educational institutions primarily in the southeast Moravia region. The website reflects a professional and consistent brand presence, offering detailed information about services such as innovation support, marketing, and education programs. The cluster serves a large audience with over 6000 employees and significant production output, positioning itself as a key player in the Czech aerospace manufacturing sector. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and Owl Carousel, ensuring a responsive and user-friendly experience across devices. The site includes a comprehensive cookie consent mechanism aligned with GDPR requirements, demonstrating digital maturity in privacy compliance. However, some security best practices such as HTTP security headers are not evident, and no explicit security or incident response policies are published. From a security perspective, the site uses HTTPS (implied by domain and modern standards), has no visible vulnerabilities or exposed sensitive data, and implements cookie consent with detailed user controls. The WHOIS data is consistent with the business profile, enhancing trustworthiness. No signs of WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance the security posture and user trust.

G.L.Electronic is a Czech aerospace technology company specializing in high-reliability electronic components and cable harnesses for space missions. The company is actively involved in major European space programs such as the Copernicus Sentinel missions, reusable rocket development under ESA's FLPP program, and the ARIEL exoplanet telescope project. Their business model focuses on B2B contracts with space agencies and aerospace manufacturers, positioning them as a niche but important player in the European aerospace supply chain. The website reflects a professional and consistent brand with detailed project descriptions targeting aerospace industry stakeholders. Technically, the website is built on WordPress using common plugins like WPBakery Page Builder and jQuery. It employs HTTPS with good SSL configuration and moderate performance. Mobile optimization and accessibility are adequate but could be improved. SEO is basic with proper meta tags but lacks advanced structured data. Analytics usage includes Google Analytics with moderate user tracking. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide a security.txt or vulnerability disclosure policy. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Contact information is minimal, with no explicit emails or phone numbers for support or incident response. Overall, the website is trustworthy and professional but has compliance and security gaps that should be addressed to enhance user trust and regulatory adherence.

M

Maana Electric

maanaelectric.com

55

Maana Electric is a technology company specializing in sustainable solar energy solutions and space-grade technologies. Founded in 2017, the company focuses on innovating across the solar value chain, including silicon production, solar cells, and panels, with collaboration from the European Space Agency. Their business model centers on rapid prototyping and market-ready product development, targeting organizations interested in sustainable and space-related energy technologies. The website is built on WordPress using Elementor and Astra theme, hosted by TransIP, and employs Google Analytics for user tracking. While the site is professionally designed and mobile-optimized, it lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. WHOIS data indicates a legitimate domain registration consistent with the business age and profile.

L

Lightigo Space | Elevating the laser spectroscopy to the space research.

lightigo-space.com

42

Lightigo Space is a technology-focused entity specializing in laser spectroscopy for space research. The website presents basic content describing their focus on elevating laser spectroscopy technology in the context of space applications. The technical infrastructure is based on WordPress with the Divi theme, utilizing jQuery for scripting. The site is accessible, uses HTTPS, but lacks advanced security headers and privacy compliance documentation. No contact or business registration information is provided, and WHOIS data is unavailable, which raises concerns about domain legitimacy. Overall, the website is functional but basic in design and content, with limited trust indicators.

The BundesBürgerInitiative WaldSchutz (BBIWS) is a German non-profit grassroots organization founded in 2017, dedicated to forest protection and environmental activism. The website serves as an information hub for citizen initiatives and individuals engaged in forest conservation across Germany, providing newsletters, petitions, and advocacy resources. The organization operates on a volunteer basis without membership fees, emphasizing community-driven environmental protection efforts. Technically, the website is built on the Jimdo Creator CMS platform, hosted by Jimdo, and employs standard web technologies including JavaScript and jQuery. It is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Contact information is primarily via email, with no phone numbers or physical addresses disclosed. Overall, the website is functional and trustworthy for its non-profit purpose but could improve in security and compliance documentation.

Leise Worte Simone Kaste operates a niche service website focused on animal communication and related holistic services such as energy sessions, aromatherapy, and spiritual journeys. The website is built on the Jimdo Creator CMS platform and hosted by Jimdo GmbH, reflecting a small business digital presence. The content is primarily in German and targets animal owners interested in communicating with their pets. The site includes a cookie consent mechanism and basic privacy policy, indicating awareness of GDPR compliance. However, no explicit terms of service or security policies are present. Technically, the site uses standard Jimdo scripts and third-party widgets from POWr.io, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response information. Overall, the website is professional and trustworthy for its niche but could improve in security and compliance documentation.

H

Hundetraining Möhring

hundetraining-moehring.de

10

Hundetraining Möhring is a small local dog training service provider based in Germany, offering a range of services including individual training, group courses, and professional dog walking. The website is built on WordPress using the Divi theme and incorporates modern web technologies such as jQuery and Google Analytics for tracking. The site is well-designed with good navigation and mobile optimization, targeting dog owners in the Göttingen area. However, the website lacks essential compliance documents such as privacy and cookie policies, which is a significant gap in GDPR compliance. Security posture is moderate with HTTPS enabled but missing important security headers and incident response contact information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

V

VSquare

vsquare.org

64

VSquare is a small, non-profit investigative journalism outlet focused on Central Europe, delivering independent English-language news and analysis. The website is professionally designed with a clear editorial focus on politics, disinformation, environment, and regional conflicts. It operates on a WordPress platform with modern SEO and donation capabilities integrated via GiveWP and Stripe. The technical infrastructure is solid, leveraging Cloudflare DNS and standard web technologies, though some security enhancements like DNSSEC and explicit security headers could improve posture. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, suitable for its non-profit media mission.

Č

České centrum pro investigativní žurnalistiku o.p.s.

investigace.cz

68

Investigace.cz is a Czech investigative journalism platform operated by České centrum pro investigativní žurnalistiku o.p.s., focusing on organized crime, corruption, and money laundering impacting Czechia and Slovakia. The site offers investigative articles, podcasts, and newsletters, targeting a general audience interested in in-depth journalism. It maintains partnerships with reputable organizations such as OCCRP, Deník N, GIJN, and ICIJ, enhancing its credibility and reach. Technically, the website is built on WordPress with modern plugins like Yoast SEO and integrates multiple analytics and tracking tools including Google Tag Manager, Microsoft Clarity, and Piwik PRO, all managed with user consent mechanisms. The site is mobile-optimized and employs CDN services for content delivery. However, some security headers are missing, and no explicit incident response or security policy pages are found. Security posture is generally good with HTTPS enforced and privacy compliance evident through comprehensive cookie and privacy policies. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness from a domain registration perspective. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, Investigace.cz presents a professional and trustworthy investigative journalism platform with strong content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and domain registration verification are recommended to enhance trust and security posture.

C

Confederation of Laboratories for Artificial Intelligence Research in Europe AISBL

cairne.eu

59

CAIRNE (Confederation of Laboratories for Artificial Intelligence Research in Europe AISBL) is a European non-profit association dedicated to strengthening AI research and innovation across Europe with a human-centred focus. The organization fosters collaboration among research institutions, industry, and policymakers to build a trustworthy and responsible AI ecosystem aligned with European values. The website is professionally designed using WordPress with modern SEO and accessibility features, supporting multilingual content and rich media. Security posture is strong with HTTPS and standard security headers, though improvements can be made in privacy compliance by adding cookie consent and explicit security policies. Overall, CAIRNE presents a credible and authoritative presence in the European AI research community.

H

HubHub

hubhub.com

65

HubHub operates as a flexible workspace provider offering memberships, meeting rooms, and event spaces primarily in London. The company targets professionals, startups, and SMEs seeking coworking and event facilities. The website is built on WordPress and integrates multiple marketing and analytics tools such as Google Tag Manager, HubSpot, and Hotjar, reflecting a moderate level of digital maturity. Security measures include HTTPS enforcement and use of Google reCAPTCHA on forms, but lack explicit security headers and visible incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Overall, the website is professional and user-friendly but would benefit from enhanced security practices and clearer compliance documentation.

P

Prádelna Frýdek-Místek Online

pradelna-on-line-frydecko.cz

44

Prádelna Frýdek-Místek Online is a small local laundry service operating in the Frýdek-Místek district of the Czech Republic. The company offers professional laundry pick-up, washing, drying, and delivery services with an emphasis on hygiene, including the use of disinfected washing machines and optional disinfectant additives. The business targets residential customers seeking convenient laundry solutions with online ordering capabilities. The website is built on WordPress with WooCommerce and Elementor, providing a modern and user-friendly interface optimized for desktop and mobile users. SEO is enhanced by Yoast SEO plugin, and the site includes structured data for improved search engine visibility. Security posture is generally good with HTTPS enforced and updated plugins, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Contact information is clearly presented, including a responsible person and company registration details, enhancing business credibility. No signs of malicious content or adult material were found, and the domain registration data aligns well with the business profile, indicating legitimacy. Overall, the website is professional, functional, and trustworthy, though improvements in privacy compliance and security headers would strengthen its posture.

P

PM Laundry s.r.o.

pradelna-on-line-plzen.cz

42

Prádelna Plzeň Online, operated by PM Laundry s.r.o., is a small local laundry service based in the Czech Republic offering professional laundry pick-up, washing, ironing, and delivery services. The business targets residential customers in Plzeň and nearby areas, providing convenience through online ordering and home service. The website is well-structured and professionally designed using WordPress with WooCommerce and Elementor, supporting e-commerce functionality and a user-friendly interface. Contact details including a responsible person are clearly presented, enhancing trust and credibility. Technically, the site uses modern web technologies and is hosted likely by Wedos, a Czech provider, with HTTPS enabled ensuring secure communication. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. Overall, the website is safe, reliable, and suitable for general audiences with no adult or questionable content detected.

S

Samoobslužné prádelny s.r.o.

pradelna-on-line-ostrava.cz

42

Prádelna Ostrava Online is a small, local laundry service company based in Ostrava, Czechia, founded in 2020. The company offers a convenient pick-up and delivery laundry service, targeting residential customers within the Ostrava district. Their business model focuses on providing hygienic laundry washing with disinfection, drying, folding, and returning clean laundry directly to customers' doors. The website is professionally designed using WordPress with WooCommerce and Elementor, enabling online ordering and showcasing their services clearly. Contact information and responsible person details are prominently displayed, enhancing trust and credibility. Technically, the website employs a modern WordPress ecosystem with popular plugins such as WooCommerce for e-commerce functionality, Yoast SEO for search optimization, and Google Analytics for visitor tracking. The site is hosted likely by Wedos, a Czech hosting provider, and uses HTTPS with a valid SSL certificate, ensuring secure communication. Mobile optimization and SEO practices are good, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the website benefits from HTTPS and updated software versions but lacks certain security headers and a cookie consent mechanism, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Privacy policy is present and GDPR compliant, but terms of service and incident response policies are missing. The domain registration data aligns well with the website content and business information, indicating legitimacy and trustworthiness. Overall, the website presents a trustworthy and professional online presence for a local laundry service. Strategic improvements in privacy compliance, security headers, and incident response documentation would enhance their security posture and regulatory adherence.

P

PM Laundry s.r.o.

pradelna-on-line-praha.cz

42

Prádelna Praha Online is a small Czech laundry service company operating since 2020, offering professional laundry pick-up and delivery services primarily in the Prague area. Their business model focuses on convenience by allowing customers to order online, have laundry collected from their homes, professionally cleaned, and returned. The website is well-structured, localized in Czech, and provides clear contact information including a responsible person, enhancing trustworthiness. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and SEO tools, and is hosted by Wedos, a Czech provider. The site uses HTTPS and Google Analytics for tracking, but lacks some security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. The domain registration data is consistent with the business claims, supporting legitimacy. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to improve compliance and trust.

PEAR s.r.o. is a Czech software company specializing in reservation and economic systems for the travel industry, with over 25 years of experience. Their website presents a professional image targeting travel agencies, tour operators, and related sectors. The company offers a range of software products and services including reservation systems, economic systems, custom software development, training, and support. The website is built on TYPO3 CMS and uses common web technologies such as jQuery and Google Analytics. While the site is content-rich and well-structured, it lacks visible privacy and cookie policies, which is a compliance concern. The absence of WHOIS data limits domain trust verification, but the presence of ISO certifications and client references supports business credibility.

B

Berufsverband der Kinder- und Jugendärzt*innen e.V.

kinderaerzte-im-netz.de

57

Kinderaerzte-im-Netz.de is a comprehensive German healthcare information platform operated by the Berufsverband der Kinder- und Jugendärzt*innen e.V. (BVKJ), focusing on pediatric and adolescent health. The site offers extensive resources including disease information, vaccination schedules, developmental milestones, and preventive care tips, targeting parents, children, and healthcare professionals. It also provides a doctor search service and a dedicated mobile app for patient communication. The platform holds a strong market position as a trusted source in pediatric healthcare in Germany. Technically, the website is built on TYPO3 CMS and employs modern web technologies such as jQuery, FlexSlider, and FontAwesome. It uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile-optimized with good navigation and content structure, although some accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and does not publicly disclose a security policy or incident response contacts. No cookie consent mechanism is present, which is a minor compliance gap. No vulnerabilities or suspicious patterns were identified. Overall, the security posture is solid but could be improved with additional headers and transparency. The domain registration data aligns well with the website's purpose and business entity, indicating legitimacy. External links point to reputable partner and related domains. No adult or inappropriate content is present, making the site safe for general audiences. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing security headers to strengthen compliance and trust.

S

Sjøkadettforeningen av 1898 Valkyrien

valkyrien1898.no

54

Sjøkadettforeningen av 1898 Valkyrien is a historic Norwegian cadet association focused on fostering engagement and initiative among cadets at the Norwegian Naval Academy. The organization provides a variety of social, sporting, and cultural events to support cadet life and community building. The website serves as an information hub for members and interested parties, featuring news, event calendars, and membership benefits. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern web technologies and plugins to deliver a responsive and user-friendly experience. Security measures include HTTPS enforcement and cookie consent management, although some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy presence for a small non-profit educational organization.

K

Kadettsamfundet

kadettsamfundet.no

52

Kadettsamfundet is a non-profit community organization dedicated to fostering a positive environment among cadets at the Norwegian Military Academy (Krigsskolen). The organization achieves this by organizing social events, academic activities, excursions, sports, and publishing a school newspaper. The website is professionally designed using WordPress and related plugins, providing clear navigation and relevant content targeted at cadets. Technically, the site uses modern web technologies and is mobile-optimized, though some improvements in accessibility and SEO could be made. Security-wise, the site uses HTTPS but lacks important security headers and privacy compliance documentation, which are areas for improvement. Overall, the domain registration data is unavailable, likely due to privacy protection, but the website content and structure indicate a legitimate and trustworthy organization.

Wavell Room Ltd operates a UK-based digital media platform specializing in contemporary military thought, offering articles, podcasts, and book reviews targeted at military professionals, academics, and enthusiasts. Established in 2017, the company maintains a strong online presence with consistent branding and a focus on quality content. The website leverages WordPress CMS with modern plugins for SEO, GDPR compliance, and accessibility, hosted likely on Amazon infrastructure. Security posture is solid with HTTPS enforcement and domain protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the platform demonstrates a mature digital infrastructure and credible business operations within the media sector.

War on the Rocks is a well-established media platform founded in 2013, specializing in analysis, commentary, and multimedia content on foreign policy and national security through a realist perspective. It targets policymakers, military leaders, and strategic thinkers, offering both free and members-only content. The platform leverages a membership business model supplemented by advertising revenue. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Facebook Pixel, and Memberful for membership management. The site is well-optimized for SEO and mobile devices, providing an excellent user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and some best practices like rel attributes on external links but lacks DNSSEC, Content Security Policy headers, and published security policies or incident response contacts. Privacy compliance is basic with privacy and terms pages present but no explicit cookie consent mechanism. Overall, the website is trustworthy and professional but could improve security and privacy transparency.

Innlandstrafikk is a regional public transportation service provider for Innlandet county in Norway, offering bus schedules, travel planning, ticketing information, and customer support. The website serves residents and travelers in the region, providing essential transit information and services. The business is positioned as a key regional transport authority, supported by the Innlandet County Municipality. The site is professionally designed with consistent branding and clear navigation, targeting a general audience with a focus on public transport users. Technically, the website employs a mix of legacy and modern web technologies including jQuery, JavaScript ES6 modules, and third-party services such as Google Translate and Siteimprove analytics. It is built on the Acos CMS platform and demonstrates good mobile optimization and accessibility features. Performance is moderate with room for improvement, especially by updating outdated libraries. From a security perspective, the site uses HTTPS and anti-CSRF tokens, but lacks visible security headers and uses an outdated jQuery version that may expose it to vulnerabilities. There is no explicit security policy or vulnerability disclosure mechanism published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional but could benefit from technical and security enhancements to improve compliance and reduce risk. Strategic recommendations include updating JavaScript libraries, implementing security headers, and adding cookie consent mechanisms to align with GDPR requirements.

E

European Council for Steiner Waldorf Education

ecswe.eu

58

The European Council for Steiner Waldorf Education (ECSWE) is a non-profit advocacy organization representing 27 national member associations across 28 European countries. The website serves as a professional platform to promote Steiner Waldorf education, provide policy statements, and support member associations. The organization targets educators, families, and national associations interested in Steiner Waldorf pedagogy. The site is built on WordPress with common plugins such as LayerSlider and Yoast SEO, hosted by GoDaddy.com, LLC. The technical infrastructure is standard and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy and cookie policies, indicating room for compliance and security improvements. Contact is primarily via a web form, with social media presence on Facebook and X (Twitter). Overall, the website is professional, trustworthy, and safe for general audiences.

S

Steiner Waldorf World

steinerwaldorf.world

50

Steiner Waldorf World is a specialized global educational platform dedicated to promoting and connecting Steiner, Waldorf, and anthroposophical schools, kindergartens, teacher training centers, and federations worldwide. The platform serves as an informational and networking hub, offering institution listings, an interactive world map, media resources, and organizational information. It targets educators, institutions, and the broader community interested in Waldorf education. The website is professionally designed, consistent in branding, and provides clear contact information and privacy compliance mechanisms. Technically, the website is built on TYPO3 CMS and integrates Google Maps for geolocation services. It uses modern web technologies including FontAwesome and jQuery. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in accessibility and security headers. Performance is moderate, and no major technical issues were detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were found. The WHOIS data is unavailable due to privacy or query failure, but the website's professional presentation and association with reputable organizations support its legitimacy. Overall, Steiner Waldorf World presents a trustworthy and well-maintained platform for the Waldorf educational community. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen its security posture and compliance.

W

Waldorf-Stiftung im Bund der Freien Waldorfschulen e.V.

waldorf-stiftung.de

43

The Waldorf-Stiftung im Bund der Freien Waldorfschulen e.V. is a German non-profit foundation dedicated to supporting and funding initiatives related to Waldorf education and pedagogy founded by Rudolf Steiner. The foundation targets Waldorf schools, educators, and supporters of Waldorf pedagogy, providing financial resources and promoting educational projects. The website reflects a well-established position within the Waldorf education community in Germany, emphasizing transparency and community engagement through detailed project disclosures and news updates. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, Parsley.js, and Magnific Popup. The site is mobile-optimized with good SEO practices and moderate performance. Hosting appears to be managed via domaincontrol.com name servers, likely GoDaddy, though exact hosting details are not disclosed. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism with an opt-out for Google Analytics tracking. However, explicit security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data is minimal but consistent with the website's purpose and domain name. Overall, the website presents a professional, trustworthy, and compliant digital presence for the foundation. Strategic improvements could include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to strengthen the security posture further.

B

Bundesschülerrat im Bund der Freien Waldorfschulen e.V.

waldorfsv.de

49

WaldorfSV is a German non-profit organization representing students of Waldorf schools at the federal level. The website serves as an informational and organizational platform, providing details about their activities, events such as the Bundesschüler*innentagung, and sections dedicated to philosophical and educational policy matters. The organization targets students and stakeholders within the Waldorf education community in Germany. Technically, the website is built on WordPress with Elementor and uses common plugins like Events Manager and Slider Revolution. It is hosted on Goneo servers and employs HTTPS with a cookie consent mechanism compliant with GDPR. Security posture is adequate with no critical vulnerabilities detected, although formal security policies and incident response information are not published. Overall, the site is professional, trustworthy, and well-structured, supporting the organization's mission effectively.

S

Stem Technology

stem.it

54

Stem Technology is an Italian company specializing in the design, production, and sale of emergency and medical transport equipment, including stretcher supports and retractable steps for professional vehicles. The company holds a leading position in its sector and targets emergency services and healthcare transport professionals. The website is built on WordPress with a modern tech stack including Yoast SEO and Google tracking tools, offering multilingual support and a professional user experience. Security posture is good with HTTPS and reCAPTCHA implemented, though additional security headers and explicit privacy policies are recommended. Overall, the website reflects a credible and established business with consistent branding and trust indicators.

W

Wietmarscher Ambulanz- und Sonderfahrzeug GmbH

was-vehicles.com

52

Wietmarscher Ambulanz- und Sonderfahrzeug GmbH (WAS) is a German-based market leader specializing in the manufacturing and customization of ambulance and special purpose vehicles. Their website showcases a comprehensive portfolio of tailored vehicle solutions designed for emergency services including rescue, police, and disaster management. The company emphasizes innovation, safety, and quality, supported by certifications such as DIN EN ISO 14001. The site is professionally designed, mobile-optimized, and provides clear contact channels and social media presence, reflecting a mature digital footprint. Technically, the website is built on TYPO3 CMS with modern frameworks and includes consent management for privacy compliance. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security headers and incident response information are absent. WHOIS data is missing, which slightly impacts trust but the overall business credibility remains high due to detailed content and transparency. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency.

L

LaCont Umwelttechnik GmbH

lacont.de

56

LaCont Umwelttechnik GmbH is a German company specializing in hazardous materials expertise and environmental technology solutions. The company targets businesses and professionals requiring compliance and safety services related to hazardous substances. The website reflects a medium-sized enterprise with a consistent brand presence and a professional digital footprint. Technically, the site is built on WordPress using the Divi theme and several plugins, including a robust cookie consent mechanism, indicating a good level of digital maturity. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is strong, with comprehensive privacy and cookie policies in German, aligned with GDPR requirements. Overall, the website is trustworthy and professionally maintained, supporting the company's market position as an expert in environmental technology.

S

Skillqube GmbH

skillqube.com

52

Skillqube GmbH is a specialized provider of medical training, simulation products, and software solutions primarily serving the healthcare sector in the DACH region. The company operates the largest International Training Center of the American Heart Association in this region and offers a broad portfolio of simulation-based training and instructor courses for medical professionals. Their business model focuses on B2B engagements with hospitals, clinics, and emergency services, leveraging advanced simulation technology and software development. The website reflects a mature digital presence with professional design, clear navigation, and integration of marketing and analytics tools such as HubSpot and Google Analytics. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though explicit security headers could be improved. Privacy compliance is partial, with cookie consent implemented but no explicit privacy policy found in the scanned content. WHOIS data for the subdomain is unavailable, which is typical for subdomains but slightly reduces trust. Overall, the site is professional, trustworthy, and well-positioned in its niche.

The website bsblogin.com serves as a login portal primarily for BlueSkyPlan or related services, focusing on user authentication with support for external providers such as Google, Apple, and Microsoft. It highlights a new security feature enabling Passkey login via Windows Hello, aiming to enhance user convenience and account protection. The site is technically built using modern web technologies including Bootstrap, jQuery, and ASP.NET MVC frameworks, hosted likely via GoDaddy infrastructure. While the site demonstrates basic mobile optimization and user interface design, it lacks comprehensive privacy and cookie policies, security headers, and explicit contact information, which are critical for compliance and trust. The domain registration data is consistent and legitimate, with domain age appropriate for the business type. Overall, the site presents a moderate security posture with room for improvement in privacy compliance and security best practices.

2

2025 Steiner Festjahr

2025-steiner-stuttgart.de

49

2025 Steiner Festjahr is a non-profit cultural event organizer focused on celebrating the legacy of Rudolf Steiner and Anthroposophy through a three-day festival in Stuttgart. The website serves as an informational and promotional platform for the event, targeting individuals interested in sustainable agriculture, holistic education, and cultural heritage. Technically, the site is built on WordPress with modern plugins for SEO, privacy compliance, and analytics, hosted by a reputable provider. Security posture is solid with HTTPS and cookie consent, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with its mission.

S

Sparkassen-Finanzgruppe Hessen-Thüringen

sparkassen-finanzgruppe-ht.de

63

Sparkassen-Finanzgruppe Hessen-Thüringen operates as a large regional financial services group in Germany, providing banking, insurance, and financing products to customers across Hessen and Thüringen. The website presents a professional image with consistent branding and a clear focus on financial services including wealth building, insurance, and construction financing. The target audience includes individuals and businesses seeking financial products and local engagement. Technically, the site is built on Concrete CMS, uses modern JavaScript libraries such as jQuery and Swiper.js, and integrates Matomo analytics with a GDPR-compliant cookie consent mechanism. Accessibility is enhanced via the eyeAble plugin. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the website is well-structured, user-friendly, and trustworthy but lacks explicit privacy and terms of service documentation.

A

Agder XR

agderxr.no

48

Agder XR is a competence network focused on XR technology in the Agder region of Norway, aiming to increase regional and national market share in XR. The website presents a professional platform offering networking, events, research, and updates on XR technology. The technical infrastructure is based on WordPress with Elementor and several modern plugins, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and formal policies are missing. Overall, the site is safe, professional, and targeted at businesses and individuals interested in XR technology in Norway.

N

Netlab AS

netlab.no

55

Netlab AS is a Norwegian technology company specializing in web development and digital solutions, serving ambitious organizations primarily in Norway. Established in 2014, the company emphasizes sustainable and strategic digital products, leveraging a methodical approach and strong technological choices. Their market position is solidified by 20 years of industry experience and a portfolio of notable client references. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern web technologies including Bootstrap, GSAP, Swiper.js, and integrates Google Analytics and Tag Manager for analytics. The presence of a cookie consent mechanism indicates GDPR compliance efforts. The CMS appears custom or proprietary, likely ASP.NET based on hidden form fields. Performance and mobile optimization are good, though accessibility could be improved. Security posture is strong with HTTPS enforced and ISO 27001 and 9001 certifications prominently displayed. However, security headers are not explicitly detected and no vulnerability disclosure or incident response contacts are published. No WAF or blocking mechanisms are present, allowing full content access. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy business. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility compliance to further strengthen security and trust.

MTNC operates a corporate website hosted on WordPress using the Uncode theme, targeting a general audience primarily in Norway. The website is minimalistic with limited business description and no explicit contact or policy pages visible. The technical infrastructure includes modern web technologies such as Cookiebot for consent management and Google Tag Manager, although Google Analytics is not fully configured. The site is served over HTTPS, indicating a basic level of security, but lacks advanced security headers and explicit privacy or terms of service documentation. Overall, the website demonstrates moderate digital maturity but requires improvements in transparency and security practices to enhance trust and compliance.

V

ViroSafe Norge AS

virosafe.no

53

ViroSafe Norge AS is a leading Norwegian distributor specializing in IT security solutions, serving Managed Service Providers (MSPs) across Norway since 2001. The company offers a comprehensive portfolio of cybersecurity products and services including backup and restore, endpoint protection, email security, network and cloud security, security culture training, and SOC services. Their market position is strong within the Norwegian IT security sector, focusing on value-added partnerships and expert support for MSPs. Technically, the website is built on a custom ASP.NET platform with modern front-end technologies such as jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience and interactivity. The site is mobile-optimized and integrates marketing and analytics tools like HubSpot and Google Analytics, alongside Google reCAPTCHA for form security. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms. Cookie consent mechanisms and a comprehensive privacy policy demonstrate GDPR compliance. However, there is a lack of explicit security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional and trustworthy front for ViroSafe's business operations. The absence of WHOIS data from the Norid registry is a notable gap, limiting full domain legitimacy verification. Nonetheless, the business information, contact details, and content quality support a high trust level. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure protocols to further strengthen security posture and compliance.

A

Access To Land

accesstoland.eu

44

Access To Land is a European grassroots network founded in 2012 that promotes sustainable land use and agroecological transition by connecting about 18 organizations across Europe. The website serves as an informational and advocacy platform highlighting land access issues and solutions. Technically, the site is built on WordPress using Elementor and optimized with tools like Yoast SEO and Optimole for images. The site is accessible, mobile-optimized, and uses HTTPS, but lacks visible privacy and cookie policies, which impacts privacy compliance. Security posture is generally good with no obvious vulnerabilities or exposed sensitive data, but security headers are not detected and no incident response information is published. Overall, the domain WHOIS data is privacy protected as per EURid policies, which is typical for .eu domains and justified for this type of network. The website is professional and trustworthy but could improve privacy and security transparency.

B

BVKJ Shop

bvkj-shop.de

49

BVKJ Shop operates as an e-commerce platform specializing in medical and healthcare products targeted at doctors, clinics, and healthcare professionals primarily in Germany. The website offers a range of diagnostic devices, informational materials, point of care testing equipment, and medical test kits. The business model focuses on retail sales through a Magento-based online store, positioning itself as a niche supplier within the healthcare sector. The site is well-branded and consistent, with clear navigation and professional content tailored to its audience. Technically, the website leverages a modern Magento e-commerce infrastructure with RequireJS, jQuery, KnockoutJS, and Magento UI components, indicating a mature digital platform. Hosting is managed via ns35.de nameservers, and the site uses HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses CAPTCHA on login forms to mitigate automated abuse. A cookie consent mechanism is in place, supporting GDPR compliance. However, explicit security headers are not detected, and no dedicated security policy or vulnerability disclosure mechanisms are present. No critical vulnerabilities or exposed sensitive data were found in the analysis. Overall, BVKJ Shop presents a trustworthy and professional online presence with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security posture and user trust.

A

AMBOSS

amboss.com

69

AMBOSS is a leading digital medical knowledge platform primarily serving physicians, medical students, and nursing professionals in German-speaking countries. The company offers a comprehensive medical knowledge database, diagnostic recommendations, drug information, and continuing education formats accessible via web, mobile apps, and browser extensions. The platform integrates advanced AI technologies to enhance medical practice, learning, and teaching. Technically, the website is built on Webflow CMS and employs a modern tech stack including Google Tag Manager, Hotjar, HubSpot, and GrowthBook for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses security headers, and manages user consent for tracking, though it lacks a dedicated security policy or incident response contact information. The WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not detract from the professional presentation and trust signals on the site. Overall, AMBOSS demonstrates a strong market position in healthcare education with a robust technical and security posture, though improvements in transparency and incident response communication are recommended.

I

iSmile

blueskysmilesimulation.com

46

iSmile Simulation is a specialized digital healthcare service focused on providing 2D smile design and tele-dentistry solutions. The platform allows users to upload smile images for simulation and offers mobile applications for iOS and Android to extend its services. The business targets dentists and patients interested in dental aesthetics and remote dental consultations. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, and an image comparison slider, delivering a responsive and user-friendly experience. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust in healthcare services. The domain uses privacy protection in WHOIS, which is common and justified for healthcare-related businesses. Overall, the website is functional and professional but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

P

Procter & Gamble

crestoralbproshop.com

67

The website crestoralbproshop.com is a professional e-commerce platform operated under the Procter & Gamble umbrella, specializing in premium Crest and Oral-B dental products targeted at dental professionals and students. The site offers exclusive discounts, invoice payment options, and customer support via phone and text, positioning itself as a niche retailer in the dental healthcare retail sector. The business is well-established with a domain age consistent with its founding year of 2019 and strong brand affiliation with Procter & Gamble. Technically, the website is built on the Magento Commerce platform, leveraging modern JavaScript libraries and frameworks such as RequireJS, jQuery, and Adobe's Magento Storefront Events SDK. It is hosted on Microsoft Azure infrastructure, utilizing Azure DNS and CDN services. The site demonstrates good mobile optimization, SEO practices, and moderate performance, with a clean and professional design that supports a positive user experience. From a security perspective, the website enforces HTTPS, uses Google reCAPTCHA on login forms, and maintains domain transfer protection. However, it lacks DNSSEC and explicit security headers, and no public security policy or vulnerability disclosure is present. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website presents a low-risk profile with a solid security posture and good business credibility. Strategic improvements include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen defenses and transparency.