Security Directory

A

APSIS

apsis.dk

40

APSIS is a Denmark-based technology company specializing in AI-driven email marketing and marketing automation solutions through its flagship platform, Apsis One. The platform offers a comprehensive suite of marketing tools including email marketing, AI assistant, SMS marketing, CRM, and integrations designed to empower marketers to create personalized and data-driven customer experiences. The company operates under the parent company Efficy and serves a medium-sized market segment with a strong focus on seamless user experience and advanced marketing capabilities. Technically, the website is built on Drupal 10 and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. However, the website currently suffers from a critical security issue due to an invalid or missing SSL certificate and lack of modern TLS protocol support, which significantly impacts its security posture. Despite this, the site maintains good privacy and cookie policies with consent mechanisms, and no exposed sensitive data was detected. Overall, APSIS presents a professional and trustworthy marketing technology provider with room for improvement in its security infrastructure.

A

APSIS

apsis.se

40

APSIS is a Swedish technology company specializing in marketing technology solutions, offering a comprehensive SaaS platform called Apsis One that integrates AI-driven email marketing, marketing automation, SMS marketing, event management, and CRM integrations. The company targets modern marketers and businesses seeking to optimize their digital marketing efforts with data-driven tools. The website is professionally designed, content-rich, and well-structured, providing clear navigation and multiple calls to action such as free trials and demos. Technically, the site uses Drupal 10 CMS and integrates popular marketing and tracking technologies including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. Security headers are present but the absence of TLS protocols and valid certificates significantly lowers the security posture. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms implemented. Contact information is primarily via contact forms; no explicit emails or phone numbers were found. WHOIS data is consistent with the business claims, showing no suspicious registration patterns. Overall, the site demonstrates good business credibility and privacy compliance but requires urgent improvements in SSL/TLS security to protect user data and improve trust.

A

APSIS

apsis.com

53

Apsis is a Swedish-based technology company providing a comprehensive AI-driven marketing platform called Apsis One. The platform offers tools for email marketing, marketing automation, SMS, surveys, forms, event management, and CRM integrations, targeting marketers and businesses seeking to optimize customer engagement and campaign effectiveness. The website is professionally designed with excellent content quality and clear navigation, supporting a strong market position in the marketing technology sector. Technically, the site uses Drupal 10 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS configuration, which significantly impacts the security posture. Privacy and cookie policies are present and appear GDPR compliant, but no explicit security policies or incident response information is found. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

B

Breinify Inc.

breinify.ai

59

Breinify Inc. operates a mature AI-powered personalization platform targeting D2C marketers in e-commerce, retail, grocery, and CPG sectors. The company offers omnichannel personalization solutions that automate consumer engagement across web, email, SMS, app, and APIs. The website is professionally designed, content-rich, and demonstrates strong branding consistency with trust signals such as customer testimonials and industry recognitions. Technically, the site is built on HubSpot CMS with modern marketing and analytics tools integrated, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy, although no terms of service or explicit security policies are found. The domain registration is consistent with the business information, indicating legitimacy. Overall, the site presents a credible business front but requires urgent security improvements to protect user data and enhance trust.

B

Breinify Inc.

breinify.com

57

Breinify Inc. operates a sophisticated AI-powered personalization platform targeting D2C marketers in e-commerce, retail, grocery, and CPG sectors. The company positions itself as a trusted partner enabling strategic omnichannel personalization to drive customer engagement and revenue growth. The website is professionally designed, content-rich, and well-branded, reflecting a medium-sized technology company with a strong market presence and reputable client base. Technically, the website is built on HubSpot CMS and leverages modern marketing and analytics tools including Google Analytics 4, Facebook Pixel, and LinkedIn Insight Tag. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts its security posture. Performance is also suboptimal with a high page load time. Security-wise, the lack of HTTPS and security headers exposes the site to risks and undermines user trust. Privacy compliance is addressed with a cookie consent banner and a comprehensive privacy policy, but no terms of service or explicit security policies are found. Contact information is limited to a contact form with no direct emails or phone numbers. Overall, while the business and content quality are strong, the security deficiencies and slow performance present significant risks. Strategic improvements in SSL deployment, security headers, and site optimization are recommended to enhance trust and compliance.

B

Black Student Fund

blackstudentfund.org

71

Black Student Fund is a mature, established non-profit organization focused on advancing STEM education, scholarships, and test preparation for students in the DMV area. The website reflects a strong community-oriented mission with clear educational programs and support services. The organization has a solid market position with a history dating back to 1963 and demonstrates trust through testimonials and social media presence. Technically, the site uses modern web technologies including Webflow CMS, jQuery, and Google Tag Manager, hosted behind Cloudflare CDN, providing moderate performance and good mobile optimization. Security posture is good with HTTPS enforced and key security headers present, though improvements such as HSTS preload and OCSP stapling are recommended. Privacy compliance is lacking due to absence of privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the site is professional, trustworthy, and functional with minor gaps in privacy and security best practices.

K

Kelly Services Inc.

kellyconnect.com

52

KellyConnect is a business-to-business service provider specializing in contact center workforce and outsourcing solutions. The company operates as a subsidiary of Kelly Services Inc., a well-established enterprise founded in 1946 in the United States. KellyConnect offers tailored contact center optimization, managed services, and outsourcing solutions to enhance customer experience and operational efficiency for its clients. The website is professionally designed, targeting businesses seeking contact center services, and demonstrates consistent branding and good content quality. Technically, the site is built on the HubSpot CMS platform and integrates various marketing and analytics tools such as Google Analytics, Cookiebot, and Cheq for bot protection. However, the website suffers from a critical security issue: it lacks a valid SSL certificate and does not serve content over HTTPS, which significantly undermines its security posture. Other security best practices such as HTTP security headers and modern TLS protocols are also absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR-compliant consent mechanisms. Contact information is primarily available through contact forms, with no explicit emails or phone numbers found in the HTML content. Overall, while the business and content aspects are strong, the lack of HTTPS is a major risk that should be urgently addressed to protect user data and maintain trust.

K

Kelly Education

kellyeducation.com

68

Kelly Education is a well-established education staffing and workforce solutions provider operating primarily in the United States. The company serves over 10,000 schools and 1,000+ districts, offering a broad range of staffing services including substitute teaching, special education, tutoring, and HR administration. The website reflects a mature and professional business with consistent branding and a strong market position as a leader in education staffing. Technically, the site is built on HubSpot CMS, uses modern web technologies, and is hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS, proper security headers, and SPF/DMARC email protections, though some improvements like HSTS preload and certificate transparency compliance are recommended. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, user-friendly, and aligned with the company's business objectives.

C

Catholic Charities of Des Moines

catholiccharitiesdm.org

51

Catholic Charities of Des Moines is a well-established non-profit organization dedicated to serving individuals and families in need across southwest Iowa. With a history dating back to 1924 and over one million people helped, the organization offers a range of services including community resource coordination, counseling, emergency shelter, and food pantry support. Their mission is inclusive, serving people regardless of religion or demographic, and they maintain partnerships with local civic and religious entities to enhance their impact. The website reflects a professional and consistent brand presence with good content quality and clear navigation, targeting donors, volunteers, and those seeking assistance. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Slick Carousel, and a CDN for content delivery. However, performance is currently slow with a high load time and large page size. Mobile optimization is good, and SEO practices are adequately implemented. Accessibility features are basic but present. From a security perspective, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical vulnerability. No modern TLS protocols or security headers are enabled, and there is no evidence of advanced security frameworks or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Business credibility is strong with clear contact information, social media presence, and trust signals such as COA accreditation. Overall, the site is functional and credible but requires urgent security improvements, especially regarding SSL/TLS implementation and security headers, to protect user data and enhance trust. Performance optimization and privacy compliance enhancements would further strengthen the website's digital maturity and user confidence.

G

Grupo Soma

somagrupo.com.br

58

Grupo Soma is a large Brazilian retail group operating a platform of multiple fashion brands including Animale, Farm, and Hering among others. The website serves as a corporate and investor relations portal, providing information about the company, its brands, sustainability efforts, and compliance policies. The target audience includes consumers and investors interested in the fashion retail sector in Brazil. Technically, the website is built on WordPress and uses modern JavaScript libraries and Google Analytics for tracking. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security concern. Security headers are partially implemented but critical TLS protocols and HSTS are missing, reducing the overall security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism via OneTrust. Business credibility is supported by clear brand listings and compliance pages but lacks explicit contact emails or phone numbers on the homepage. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

I

Iceberg Cultures of Inclusion

icebergci.com

23

Iceberg Cultures of Inclusion is a consulting firm specializing in strategic management of diversity, equity, and inclusion (DEI) across Latin America. The company positions itself as a leader in this niche market, offering services such as DEI strategy development, inclusive ecosystem design, training, and cultural intelligence development. Their client base includes major multinational corporations, indicating a strong market presence and trust. Technically, the website uses modern frontend technologies including Bootstrap, Alpine.js, and jQuery, hosted on Apache with October CMS as the content management system. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security posture. No privacy or cookie policies are found, and no incident response or security policies are published, indicating gaps in compliance and security transparency. Overall, the website is professionally designed with good content quality and user experience but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

H

HP Hood LLC

hphood.com

37

HP Hood LLC operates a well-established website promoting its dairy products brand, Hood®, with a history dating back to 1846. The website offers comprehensive product information, recipes, and store locator features targeting consumers in the United States. The site is professionally designed with consistent branding and good user experience, including mobile optimization and clear navigation. Technically, the site uses Microsoft IIS, Bootstrap, jQuery, and other modern frontend libraries, but lacks a valid SSL certificate and HTTPS support, which is a critical security gap. Cookie consent is implemented via OneTrust, and Google Tag Manager is used for analytics and tracking. Security posture is weak due to missing HTTPS and limited security headers, and no explicit security or incident response policies are found. Overall, the domain registration data aligns well with the business, indicating legitimacy. Strategic improvements in SSL/TLS deployment and security headers are recommended to enhance trust and compliance.

P

Proton AG

simplelogin.co

68

SimpleLogin is a privacy-focused technology company offering an open source email alias service that enables users to protect their inboxes from spam and phishing by using anonymous email aliases. The company operates under Proton AG, a reputable Swiss privacy-centric organization, and targets privacy-conscious users seeking enhanced email anonymity. The website demonstrates strong branding, excellent content quality, and a comprehensive feature set including browser extensions and mobile apps. Technically, the site uses modern web technologies and is hosted on privacy-respecting infrastructure. However, the scanned domain lacks a valid SSL certificate and HTTPS enforcement, which is a critical security gap. The security posture is otherwise solid with SPF and DMARC configured, but improvements are needed in SSL/TLS configuration and security headers. Privacy compliance is good with a clear privacy policy and GDPR alignment, though cookie consent mechanisms are absent. Overall, the business credibility is high with transparent WHOIS data and strong domain protection. Strategic recommendations include immediate SSL certificate deployment, enabling HSTS, and adding cookie consent to enhance security and compliance.

F

FINCOM TEH LTD

wmcentre.net

40

WMCentre.net is an established online marketplace specializing in digital goods such as software licenses, game keys, and subscription services, primarily targeting Russian-speaking customers. The business is operated by FINCOM TEH LTD, a Bulgarian-registered company founded in 2003, indicating a long-standing presence in the e-commerce digital goods sector. The website offers a broad catalog of products and integrates with partner platforms for payment and digital delivery. Technically, the site uses legacy JavaScript libraries and custom CMS, with moderate performance and basic mobile optimization. Security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which exposes users to risks. Privacy compliance is poor, with no visible privacy or cookie policies, and contact information is limited to a web form. Overall, the site demonstrates moderate business credibility but requires significant improvements in security and privacy to enhance trust and compliance.

E

Erasmus for Young Entrepreneurs Support Office

erasmus-entrepreneurs.eu

37

Erasmus for Young Entrepreneurs is a European Union-supported cross-border business exchange programme designed to facilitate knowledge transfer and networking between new and experienced entrepreneurs across 45 participating countries. The programme aims to support SME growth and internationalization by enabling new entrepreneurs to gain practical experience and host entrepreneurs to benefit from fresh perspectives. The website presents comprehensive business information, success stories, and multimedia content to engage its target audience effectively. Technically, the site uses established but somewhat dated technologies such as Bootstrap 3 and jQuery 1.11, with embedded social media and analytics integrations. However, the absence of a valid SSL certificate and HTTPS support represents a significant security risk, exposing users to potential data interception and undermining trust. Additionally, the lack of security headers and cookie consent mechanisms indicates gaps in security best practices and privacy compliance. Overall, while the business credibility and content quality are strong, the technical and security posture require urgent improvements to align with modern standards and ensure user safety.

E

Eurochambres

eurochambres.eu

40

Eurochambres is a well-established non-profit association representing European chambers of commerce and industry, serving as a key voice for the business community at the EU level since 1958. The organization focuses on advocacy, information dissemination, and supporting SMEs through various projects and services. Their website reflects a professional and consistent brand presence targeting European businesses and policymakers. Technically, the site is built on WordPress with the Divi theme and integrates several plugins and external services such as Cookiebot for cookie consent and Google Analytics for tracking. However, the website suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. While privacy compliance is well addressed through Cookiebot and a comprehensive privacy policy, the lack of security best practices and slow performance pose risks to user trust and data protection. Strategic improvements in SSL deployment, security headers, and performance optimization are recommended to enhance the overall security and user experience.

Ს

სს საკრედიტო საინფორმაციო ბიურო კრედიტინფო საქართველო

creditinfo.ge

47

Creditinfo Georgia is a mature credit information bureau operating since 2006, providing a range of credit-related services including credit reports, scoring, monitoring, and business risk databases. The company targets individuals and legal entities in Georgia, leveraging its affiliation with the international Creditinfo Group to maintain a strong market position. The website is built on WordPress and uses common plugins and scripts to deliver content and interactive forms. While the site is professionally designed with good content relevance and navigation, it lacks a valid SSL certificate, which severely impacts its security posture. Contact information is clearly presented, and privacy policy exists, but cookie policy and terms of service are missing. Overall, the site demonstrates moderate trustworthiness but requires urgent security improvements.

A

AS Creditinfo Eesti

creditinfo.ee

40

AS Creditinfo Eesti operates Estonia's largest and most trusted business information database, offering comprehensive credit information, payment default registers, credit ratings, and business lists. As part of the international Creditinfo Group, it serves a broad audience including businesses and individuals seeking to manage credit risks and make informed financial decisions. The company is well-established with a domain age of 9 years and recognized certifications such as ISO 27001, underscoring its commitment to information security. Technically, the website is built on WordPress with modern JavaScript libraries like jQuery and Slick Carousel, integrated with analytics and marketing tools including Google Tag Manager, Hotjar, and Facebook Pixel. The site demonstrates good SEO and mobile optimization, though performance is moderate and could benefit from further optimization. The hosting and DNS infrastructure is stable but lacks advanced security features like DNSSEC and domain protection locks. Security posture reveals critical issues, notably the absence of a valid SSL certificate, which severely impacts user trust and data protection. While DMARC policies and some best practices are in place, the lack of HTTPS and HSTS headers exposes the site to potential risks. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR adherence. Business credibility is high, supported by clear contact information, social media presence, and trust signals. Overall, the site is functional and professional but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic improvements in DNS security and domain management would further enhance its security posture.

C

Creditinfo Group

creditinfosolutions.com

50

Creditinfo Group operates as a global leader in credit information and risk management solutions, providing software and credit bureau services across mature and emerging markets worldwide. The company focuses on facilitating access to finance through innovative software solutions tailored for financial institutions and lenders. Their market position is strong, supported by over 19 years of domain maturity and a presence in multiple countries, including a headquarters in the Czech Republic. The website content reflects a professional and consistent brand with clear business messaging and case studies highlighting their global impact. Technically, the website is built on WordPress and leverages common web technologies such as jQuery and Google Analytics for tracking. Hosting and CDN services are provided by Cloudflare, enhancing performance and security at the network edge. However, a critical security gap exists as the site lacks a valid SSL/TLS certificate, serving content over unencrypted HTTP, which exposes users to potential interception risks. From a security perspective, while some security headers are present, the absence of HTTPS and modern TLS protocols significantly lowers the security posture. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Contact information is clearly provided, enhancing business credibility and user trust. Overall, the site is functional and professional but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include implementing HTTPS, enabling HSTS, and enhancing security headers to align with best practices.

I

ITTF Foundation

ittffoundation.org

40

The ITTF Foundation is a non-profit organization leveraging table tennis to promote social development, health, and peace globally. It operates multiple specialized programmes targeting disadvantaged groups, humanitarian aid, and health awareness. The foundation is linked to the ITTF Group and maintains an active online presence with social media and newsletter engagement. Technically, the website is built on the Contao CMS with modern JavaScript libraries and frameworks but suffers from slow performance and lacks a valid SSL certificate, which critically impacts security posture. The absence of HTTPS and security headers exposes the site to risks and undermines user trust. Privacy compliance is basic with a cookie consent banner and a privacy policy, but no explicit GDPR compliance or terms of service are found. WHOIS data indicates a mature domain with privacy protection typical for non-profits. Overall, the site is functional and professional but requires urgent security improvements to protect users and enhance credibility.

K

Közszolgálati Médiaakadémia Alapítvány

media-akademia.hu

40

The Média Akadémia website represents a Hungarian non-profit foundation dedicated to media education and talent development, primarily targeting future television and radio professionals. The site is well-structured with rich content including news articles, event information, and educational program details. It leverages WordPress CMS with a variety of plugins to deliver multimedia content and interactive features. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall that undermines user trust and data protection. The site implements a cookie consent mechanism but lacks comprehensive privacy and security policies. The domain registration is consistent and aligns with the organization's public media affiliations, indicating legitimacy. Strategic improvements in security posture and privacy compliance are necessary to enhance overall trustworthiness and compliance.

M

Médiaszolgáltatás-támogató és Vagyonkezelő Alap (MTVA)

mtva.hu

40

MTVA.hu is the official website of the Hungarian public media organization Médiaszolgáltatás-támogató és Vagyonkezelő Alap (MTVA), providing a wide range of media services including television, radio, and online content. The site is well-structured, content-rich, and targets the Hungarian public with news, press releases, and organizational information. The business model is public service media, supported by government funding, positioning MTVA as a leading media broadcaster in Hungary. Technically, the site is built on WordPress with modern JavaScript libraries and accessibility features, hosted on Telekom.hu infrastructure. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS, exposing users to potential risks. The site implements proper email security with SPF and DMARC records and includes a cookie consent mechanism compliant with GDPR. Overall, the website demonstrates good business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

A

ABC Shop

shopabctv.com

56

ABC Shop is the official e-commerce store for ABC TV show merchandise, offering a wide range of apparel, drinkware, and collectibles tied to popular shows such as Grey's Anatomy and The View. The website is built on the Shopify platform and integrates multiple marketing and analytics tools to enhance customer engagement and sales performance. The site demonstrates good branding consistency and professional design, targeting fans of ABC shows and merchandise collectors primarily in the United States. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocol support, which poses risks to user data protection and trust. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to privacy compliance. Overall, the site is functional and credible but requires urgent SSL/TLS remediation to improve security and user confidence.

D

DISNEY ADVERTISING SALES, LLC

disneycampaignmanager.com

53

Disney Campaign Manager is a self-service digital advertising platform focused on streaming TV ad buying across Disney's premium streaming properties such as Disney+, Hulu, and ESPN+. The platform targets advertisers and agencies seeking efficient campaign setup, audience targeting, and real-time optimization. The website is professionally designed using WordPress and integrates multiple modern JavaScript libraries and marketing tools including Pardot and Tealium. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which undermines user trust and data security. Privacy compliance is well addressed with OneTrust cookie consent and clear privacy and terms pages. Social media presence and testimonials add to business credibility.

O

Olaf Schmidt Coaching

olafschmidt.de

23

Olaf Schmidt Coaching is a small German-based business specializing in LinkedIn lead generation coaching, targeting self-employed professionals and companies, particularly in marketing and sales. The website presents a professional coaching service with clear offerings including personalized LinkedIn strategies, workshops, and weekly support. Technically, the site is built on WordPress with Elementor and uses common web technologies such as Apache and PHP. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security flaw. The presence of LinkedIn Insight tracking and Calendly integration indicates a moderate level of digital maturity but also raises privacy considerations. Security posture is weak due to missing HTTPS and security headers, and privacy compliance is basic with only a privacy policy found but no cookie consent mechanism. Overall, the site is functional and professionally presented but requires urgent security improvements to protect user data and improve trust.

I

Interperformances

interperformances.com

24

Interperformances.com is a mature and established sports agency specializing in basketball player management, contract negotiation, marketing, and post-career planning. The website targets professional basketball players, agents, coaches, and teams globally. The business model is focused on athlete representation and sports management services. The company has a consistent brand presence and active social media engagement, supporting its market position as a recognized agency in the basketball sports sector. Technically, the website employs a variety of modern front-end libraries such as jQuery, Bootstrap, and Slick Carousel, hosted behind Cloudflare DNS services. However, the site suffers from slow load times and lacks HTTPS support, which is a significant technical and security deficiency. Mobile optimization is good, but accessibility and SEO optimizations are basic. From a security perspective, the absence of a valid SSL certificate and HTTPS support is a critical vulnerability that exposes users to risks such as data interception. The lack of security headers, HSTS, and OCSP stapling further weakens the security posture. No privacy or cookie policies are present, indicating poor compliance with data protection regulations. Incident response and vulnerability disclosure mechanisms are also missing. Overall, the website presents moderate business credibility but requires urgent improvements in security and privacy compliance to protect users and enhance trust. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and establishing incident response contacts.

P

Professional Provident Society Insurance Company

pps.co.za

40

PPS (Professional Provident Society Insurance Company) is a mature South African financial services provider specializing in insurance, investment, and healthcare solutions tailored for graduate professionals. The company operates on a mutuality model, allowing members to share in profits, and maintains a strong market position supported by professional associations and comprehensive service offerings. The website is built on Drupal 10 with modern frontend libraries and hosted behind Cloudflare, demonstrating a moderate level of digital maturity. However, the absence of a valid SSL/TLS certificate and lack of HTTPS significantly undermine the security posture. While security headers are partially implemented, critical vulnerabilities exist due to missing encryption and lack of advanced security features. Privacy compliance is basic, with no explicit cookie consent mechanism and limited GDPR indicators. Overall, the site presents professional content and good business credibility but requires urgent security improvements to protect user data and enhance trust.

S

Scheid Family Wines

scheidfamilywines.com

56

Scheid Family Wines is a well-established family-owned winery based in California with over 50 years of history. The company operates a grapes-to-glass business model, offering a portfolio of global and private label wine brands. Their website is built on the Shopify platform, featuring a modern design and rich content that highlights their sustainability commitments and product offerings. However, the site lacks a valid SSL certificate, which is a critical security concern. The absence of HTTPS and security headers exposes visitors to potential risks and undermines trust. Additionally, no cookie consent mechanism is present despite the use of tracking technologies. Overall, the business appears legitimate and professional, but the technical and security posture requires significant improvements to meet modern standards and compliance requirements.

M

Momentin Group Oy

momentingroup.com

57

Momentin Group Oy is a Finnish holding company fully owned by the Lehdon family, operating primarily in the hospitality sector with a focus on beverage products and restaurant services. The group comprises approximately 150 experts and leverages over 30 years of industry experience. Their subsidiaries include Brew Seeker, Restaurants, Mallaskoski, eDrinks, Momentin Baltics, and various minority ownerships. The website presents a professional and consistent brand image with good content quality and clear navigation, targeting both B2B and B2C audiences within the hospitality industry in Finland. Technically, the website is built on WordPress with WooCommerce and uses modern frontend technologies such as Bootstrap and jQuery. Hosting is provided via WP Engine with Cloudflare as a CDN and security proxy. SEO is supported by structured data (JSON-LD) and Yoast SEO plugin. However, performance metrics are unavailable, and accessibility is basic. The site is mobile optimized and includes cookie consent mechanisms. From a security perspective, the website has critical deficiencies. There is no valid SSL certificate detected, and no TLS protocols are enabled, resulting in a lack of HTTPS protection. Security headers are partially implemented but could be improved. DNS security features such as DNSSEC and CAA records are missing, and no DMARC record is present for email protection. These issues expose the site to potential interception and phishing risks. Overall, the site scores moderately on content and business credibility but poorly on security posture. Strategic improvements in SSL/TLS deployment, DNS security, and privacy compliance are recommended to enhance trust and protect user data.

C

Center for Technology & Society

cts.wien

50

The Center for Technology & Society (CTS) is an inter-university and interdisciplinary cooperation platform based in Vienna, Austria, involving prominent academic institutions such as TU Wien, FH Campus Wien, FH Technikum Wien, and Universität Wien. It focuses on research, teaching, and societal engagement addressing technological and social challenges like climate change and digital transformation. The platform supports researchers, students, and societal stakeholders through networking, coordination, and participatory approaches. Technically, the website is built using the Hugo static site generator and leverages multiple JavaScript libraries including jQuery, Bootstrap, and Leaflet for interactive maps. However, the site suffers from a lack of HTTPS security, with no valid SSL certificate and no modern TLS protocols enabled, which significantly impacts its security posture. The site also lacks privacy and cookie policies, which affects compliance with data protection regulations. Performance is slow with a high load time and large page size, though mobile responsiveness and navigation are well implemented. Overall, the site presents a professional academic presence but requires urgent improvements in security and privacy compliance to enhance trust and protect users.

A

Association Française du génie Parasismique

afps-seisme.org

40

The Association Française du génie Parasismique (AFPS) is a French non-profit organization dedicated to seismic engineering, risk prevention, and post-earthquake response. The website serves as a comprehensive resource for professionals and members involved in seismic risk management, offering detailed information on missions, training, publications, and events. The association maintains partnerships with governmental bodies and other organizations, reinforcing its position as a key player in seismic risk mitigation in France. Technically, the website is built on Drupal 7 with a range of JavaScript libraries for UI and interactivity, hosted on OVH infrastructure. However, the site lacks a valid SSL certificate and does not support modern TLS protocols, exposing it to security risks. Security headers are minimal but present, and a cookie consent mechanism compliant with GDPR is implemented. Overall, the site provides good content quality and professional presentation but requires urgent security improvements to protect user data and enhance trust.

I

IMT Mines Albi-Carmaux Alumni

mines-albi.org

40

IMT Mines Albi-Carmaux Alumni operates as a non-profit alumni association serving graduates, students, and recruiters connected to the IMT Mines Albi-Carmaux engineering school in France. The website provides comprehensive services including news updates, event management, career resources, and an extensive alumni directory with nearly 40,000 registered members. The platform targets alumni and community members seeking networking and professional development opportunities. Technically, the website employs a traditional tech stack with jQuery, Bootstrap, slick carousel, and integrates hCaptcha for form security and tarteaucitron.js for cookie consent management. However, the site suffers from a critical lack of valid SSL/TLS certificates, resulting in no HTTPS support and no modern TLS protocols enabled, which significantly undermines its security posture. Despite this, the site maintains GDPR compliance through cookie consent and privacy policies, and offers a good user experience with clear navigation and responsive design. The overall risk is moderate due to security gaps, particularly the absence of HTTPS and security headers, which should be prioritized for remediation.

E

ESCP Business School

escp.eu

40

ESCP Business School is a prestigious, top-ranked European business school established in 1819, operating a unique multi-campus model across six European cities. It offers a broad portfolio of degree programs including Bachelor, Master in Management, MBA, Executive MBA, specialized Masters, doctoral programs, and executive education. The school targets students, professionals, and corporate clients seeking high-quality business education and leadership development. Technically, the website is built on Drupal 10, hosted on Amazon AWS infrastructure, and integrates numerous modern web technologies and marketing analytics tools. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. The site employs extensive tracking and advertising scripts, managed via a consent platform, indicating a mature marketing approach but raising privacy considerations. Overall, the website is professionally designed with excellent content quality and user experience but requires urgent security improvements to enable HTTPS and implement security headers to protect user data and enhance trust.

E

ESCP Business School

escpeurope.eu

40

ESCP Business School is a prestigious, top-ranked European business school established in 1819, offering a wide range of degree programs including bachelor, master, MBA, executive education, and doctoral programs across six European campuses. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting students and professionals seeking business education. Technically, the site is built on Drupal 10 with modern JavaScript libraries and integrates marketing and analytics tools such as Google Tag Manager and Consent Manager. However, the security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which significantly impacts the overall security score. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent improvements in SSL/TLS implementation to secure user data and improve trust.

Maison des Ponts is a small non-profit alumni association based in Paris, France, providing a prestigious venue for its members and hosting professional and private events. The website presents clear business information, contact details, and partner organizations, targeting alumni and event clients. Technically, the site uses common web technologies such as Apache, jQuery, and hCaptcha but lacks modern security configurations, notably missing HTTPS and security headers, which critically impacts its security posture. The absence of privacy and cookie policies further reduces compliance confidence. Overall, the website is functional with good content quality and navigation but requires urgent security improvements to protect user data and enhance trust.

Concours Passerelle operates as an educational admissions platform facilitating entry into prestigious French business schools for candidates holding bac+2 or higher. The website provides detailed information about admissions pathways, exam modalities, and school options, targeting prospective students seeking higher education in commerce and management. The platform leverages modern web technologies and integrates marketing and analytics tools such as Google Tag Manager. However, the technical infrastructure shows critical security weaknesses, notably the absence of a valid SSL certificate and HTTPS support, which undermines user trust and data security. Security headers are well configured but cannot compensate for the lack of proper encryption. Privacy compliance is minimal, with no cookie consent mechanism or explicit GDPR adherence visible. Overall, the site is functional and professionally designed but requires urgent security and privacy improvements to meet modern standards.

S

SIA "Juridiskā koledža"

jk.lv

40

Juridiskā koledža is a Latvian educational institution specializing in legal and related professional studies. The website presents a comprehensive offering of study programs, courses, and international cooperation such as ERASMUS. The institution positions itself as a provider of qualified specialists with practical and theoretical knowledge for the labor market in Latvia and abroad. Technically, the website is built on WordPress with common libraries like jQuery and Bootstrap, but suffers from slow performance and lacks a valid SSL certificate, which impacts security and user trust. Security posture is weak due to missing HTTPS, lack of security headers, and absence of DMARC records, although SPF is correctly configured. Privacy compliance is minimal with no visible privacy or cookie policies or consent mechanisms. Contact information and certifications are clearly presented, supporting business credibility. Overall, the site is functional but requires significant improvements in security and privacy to meet modern standards.

I

IMT Nord Europe

imt-nord-europe.fr

40

IMT Nord Europe is a French graduate engineering school affiliated with the Institut Mines-Télécom and partnered with the University of Lille. Positioned strategically in northern France, it serves as a key educational and research institution focusing on energy, ecological, digital, and industrial transitions. The website presents a professional and content-rich platform targeting students, researchers, and industry partners, offering a wide range of engineering programs and continuous training. Technically, the site is built on WordPress with modern plugins and frameworks but lacks a valid SSL certificate, which impacts its security posture. While security best practices such as hCaptcha and cookie consent are implemented, the absence of HTTPS and minimal security headers present significant vulnerabilities. Overall, the site is functional and trustworthy but requires urgent improvements in security to protect user data and enhance trust.

S

Safran

safran.com

53

Safran is a UK-based medium-sized company specializing in project management software and risk analytics solutions, serving industries such as energy, aerospace, defense, and construction. Positioned as a global leader, Safran offers integrated tools for project planning, risk management, and execution, supported by professional services including consulting, training, and partner services. The website is professionally designed, content-rich, and targets project managers and risk professionals. Technically, the site is built on HubSpot CMS with multiple modern JavaScript libraries and integrates various analytics and marketing tools. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which critically impacts HTTPS security. Privacy policies and terms of service are present and comprehensive, but no cookie consent mechanism is detected. Social media presence and customer testimonials enhance business credibility. Overall, the site is functional and professional but requires urgent SSL/TLS remediation to improve security and trust.

Net.Com is a specialized digital agency focused on providing web solutions for the public sector in France, including government agencies, hospitals, educational institutions, and social housing organizations. With over 27 years of experience and more than 500 projects completed, the company offers services such as Drupal and WordPress development, UX design, SEO, and agile development methodologies. The website reflects a professional and well-structured digital presence with comprehensive client references and testimonials. Technically, the site uses modern JavaScript libraries and frameworks but lacks HTTPS support, which is a critical security deficiency. The absence of SSL/TLS and security headers exposes the site and its users to potential risks. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the business demonstrates strong credibility and a clear market niche but must urgently address its security posture to protect its reputation and client data.

E

Excelia Group

excelia-group.com

64

Excelia Group is a reputable French higher education institution offering a wide range of undergraduate and postgraduate programs in business, tourism, communication, and related fields. Founded in 1988 and co-founded by regional chambers and councils, it holds prestigious triple accreditation and ranks well internationally. The website reflects a mature digital presence with a comprehensive program overview, multilingual support, and strong branding. Technically, the site is built on Drupal with modern libraries and hosted behind Cloudflare, though performance could be improved. Security posture is solid with HTTPS and SPF/DMARC email protections, but lacks HSTS and DNSSEC. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, Excelia demonstrates strong business credibility and digital maturity.

P

Persistent Systems

persistent.com

59

Persistent Systems is a well-established technology services company specializing in AI, digital engineering, and enterprise modernization. The company positions itself as a trusted partner for enterprises seeking to transform their AI journey and digital capabilities. Their website reflects a mature digital presence with comprehensive service offerings, a strong partner ecosystem, and extensive client success stories. The company targets large enterprises across multiple industries, leveraging a B2B business model with a focus on innovation and technology leadership. Technically, the website is built on WordPress and employs a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools such as Google Tag Manager, Pardot, and CookiePro. Hosting is via AWS CloudFront CDN, ensuring global content delivery. The site is well-optimized for SEO and accessibility, with multilingual support and responsive design. However, performance metrics are not explicitly available. From a security perspective, the site has several security headers configured and uses HttpOnly cookies and a detailed Content Security Policy. However, a critical issue is the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Other TLS protocols and features like OCSP stapling and session resumption are not enabled. DNS CAA records appear malformed, which could affect certificate issuance policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism and business credibility but suffers from a critical security gap due to missing HTTPS. Strategic remediation of SSL/TLS configuration is essential to improve trust and security compliance.

G

Globant

globant.com

59

Globant is a leading global IT and software development company specializing in AI-driven business transformation and digital innovation. Operating across multiple countries, Globant offers a subscription-based AI Pods model alongside enterprise AI solutions, software engineering, and design services. The company is recognized as a top IT services brand with strong market positioning and a broad industry reach including finance, healthcare, media, and retail. Technically, the website is built on Drupal CMS, leveraging modern libraries and Google services for analytics and security. However, the site currently lacks a valid SSL/TLS certificate, which significantly impacts its security posture. Despite this, Globant implements strong security headers and privacy policies, including GDPR compliance and cookie consent mechanisms. The website demonstrates excellent content quality, professional design, and clear navigation, supporting a high level of business credibility. Strategic improvements in SSL/TLS configuration and enhanced security practices are recommended to elevate the overall security and trustworthiness.

É

École polytechnique

polytechnique.edu

51

École polytechnique is a prestigious French engineering school that combines research, education, and innovation at the highest scientific and technological levels. It operates as a leading educational institution within the Institut polytechnique de Paris, offering a wide range of programs including Bachelor, Master, Doctorate, and Executive education. The school maintains strong partnerships with industry and alumni networks, supporting entrepreneurship and technology transfer. Technically, the website is built on Drupal CMS with modern frontend libraries, but suffers from slow performance and lacks a valid SSL certificate, which impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the institution presents a professional and trustworthy digital presence, though improvements in security and performance are recommended.

E

Excelia Group

excelia-group.fr

40

Excelia Group is a well-established French higher education institution founded in 1988, offering a broad portfolio of programs across business, tourism, communication, real estate, health, and languages. It holds prestigious triple accreditation (EQUIS, AACSB, AMBA) and is recognized in global rankings, positioning it as a reputable player in the education sector. The website reflects a professional and content-rich digital presence, targeting students, parents, professors, and corporate partners with comprehensive program details and support services. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates marketing and analytics tools such as Matomo and Crisp chat. However, the site suffers from a critical security weakness due to the absence of a valid SSL certificate and HTTPS enforcement, which undermines user trust and data security. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Overall, the site demonstrates strong business credibility and user engagement but requires urgent security improvements to protect users and enhance trust.

G

Guidewire Software, Inc.

guidewire.com

68

Guidewire Software, Inc. is a leading enterprise technology company specializing in Property and Casualty (P&C) insurance software and cloud platforms. Founded in 2001 and headquartered in the United States, Guidewire offers a comprehensive suite of products including InsuranceSuite for policy administration, claims management, and billing, as well as InsuranceNow, a cloud-based platform designed for rapid deployment. The company serves a global market with customers in over 40 countries and maintains a strong presence through partnerships, professional services, and an extensive marketplace ecosystem. Guidewire is recognized as a market leader with multiple industry awards and a robust social media presence. Technically, Guidewire's website leverages modern web technologies such as Next.js and React, hosted on Vercel, and managed via Sitecore CMS. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. The use of Marketo forms and integration with marketing and analytics tools like Google Tag Manager and Cookiebot indicates a mature digital marketing infrastructure. From a security perspective, the site employs several security headers and enforces HTTPS, although the SSL certificate is currently invalid, which is a critical issue. The absence of full HSTS enforcement and OCSP stapling are areas for improvement. The company provides clear security and privacy policies, including incident response contact information, reflecting a responsible security posture. No major vulnerabilities or exposed sensitive data were detected. Overall, Guidewire presents a strong business and technical profile with excellent content quality and business credibility. The primary risk lies in the SSL certificate status, which should be promptly addressed to maintain trust and security. Strategic recommendations include enhancing SSL management, fully enabling HSTS, and continuing to strengthen privacy compliance and security best practices.

I

innovAARE AG

parkinnovaare.ch

36

innovAARE AG operates the Park Innovaare, a high-tech innovation and industrial park in Switzerland focused on accelerating deep-tech research and commercialization. The park provides modern office, laboratory, and specialized research spaces, along with community and networking services to startups, SMEs, and R&D departments. The website is professionally designed, content-rich, and well-structured, targeting innovation ecosystem participants. Technically, the site uses TYPO3 CMS with modern frontend libraries and is hosted by cyon AG. However, a critical security gap is the lack of HTTPS/SSL, exposing users to risks. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Business credibility is strong with clear contact details and legal information.

O

Open-Xchange

open-xchange.com

72

Open-Xchange is a leading global provider of open and trusted software solutions primarily focused on email platforms for service providers, telcos, and hosters. With over 220 million users, it holds a strong market position as the largest independent email provider worldwide. Their product portfolio includes cloud and on-premises email solutions, DNS products, and IMAP server platforms, targeting enterprise and public sector customers. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation.

L

Laracon Australia

laracon.au

57

Laracon AU is a prominent technology conference focused on the Laravel PHP framework, organized in collaboration with Laravel, Inc. The event is scheduled for November 2025 in Brisbane, Australia, targeting Laravel developers and the broader PHP community. The website serves as a comprehensive platform for event information, ticket sales, speaker announcements, and sponsorship opportunities. Technically, the site employs modern frontend technologies such as Alpine.js and Livewire, hosted behind Cloudflare DNS services. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security concern. Privacy and cookie policies are not explicitly presented, indicating potential compliance gaps. Overall, the site demonstrates good business credibility and content quality but requires urgent improvements in security and privacy compliance to enhance trust and user safety.