Security Directory

E

EuSEN asbl

eusencongress.org

6

The website eusencongress.org represents the EuSEN Nursing Congress 2025, organized by EuSEN asbl, a European society focused on emergency nursing. The site currently displays a notice that the congress has been cancelled for reasons beyond the organizers' control. The business operates as a small non-profit entity targeting healthcare professionals in emergency nursing, providing congress events and professional networking opportunities. The website content is minimal and primarily serves as an informational placeholder with contact email and social media links to official EuSEN pages. Technically, the website is built on WordPress and uses common front-end libraries such as jQuery, Bootstrap, and Font Awesome. The hosting provider is OVH sas. The site is currently offline using a site-offline plugin, with no active forms or data collection mechanisms. Mobile optimization and SEO are basic, and no advanced accessibility features are detected. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which reduces its security posture. No privacy, cookie, or terms of service policies are present, indicating poor privacy compliance. The WHOIS data is consistent with the website's purpose and timeline, showing a legitimate registration with no suspicious patterns. Overall, the site has a moderate trustworthiness level but requires improvements in security and privacy compliance. The overall risk is low given the limited functionality and content, but the lack of privacy policies and security headers should be addressed to improve compliance and trust. Strategic recommendations include enabling DNSSEC, implementing security headers, adding privacy and cookie policies, and enhancing the site's technical and content quality to better serve its audience.

E

EstiCRM

esticrm.pl

10

EstiCRM is a specialized CRM software provider targeting real estate agencies and developers in Poland. The company offers modern, intuitive CRM solutions designed to streamline client relationship management and enhance business operations within the real estate sector. Their market position is niche-focused, catering specifically to real estate and development companies with tailored software and web solutions. The website reflects a professional and consistent brand image, with clear messaging and relevant content for their target audience. Technically, the website is built using modern web technologies including Webflow CMS, Cloudflare CDN, and integrates multiple Google services such as Google Analytics and Tag Manager for analytics and marketing purposes. Cookiebot is used for comprehensive cookie consent management, ensuring GDPR compliance. The site demonstrates good mobile optimization and moderate performance, with a solid technical infrastructure supporting its operations. From a security perspective, the website enforces HTTPS, employs security headers, and uses cookies to protect against cross-site request forgery and bot traffic. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No critical vulnerabilities or suspicious activities were detected, indicating a mature security posture appropriate for the business scale. Overall, EstiCRM presents a trustworthy and professional online presence with strong privacy and security practices. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility features, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

W

Whistlelink

whistlelink.com

10

Whistlelink is a technology company specializing in providing a secure, anonymous, and compliant whistleblower system designed to help organizations meet EU whistleblower protection laws and other regulatory requirements. The company offers a SaaS platform that includes anonymous reporting channels and intuitive case management tools, targeting medium-sized to large organizations across multiple industries. The website is professionally designed, multilingual, and includes comprehensive privacy and cookie policies, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Calendly for marketing and scheduling. Security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response policies are not evident. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site content and trust indicators such as G2 badges and social media presence. Overall, Whistlelink presents as a credible and professional compliance technology provider with room for improvement in transparency around security policies and domain registration details.

S

Schweizerische Gesellschaft für Pulmonale Hypertonie

sgph.ch

58

The Schweizerische Gesellschaft für Pulmonale Hypertonie (SGPH) is a specialized non-profit medical society founded in 1998 in Bern, Switzerland. It serves as a reference center for pulmonary hypertension, providing education, research support, and networking for medical professionals and patients. The organization has a strong market position in Switzerland with over two decades of expertise and collaboration with pharmaceutical partners. The website reflects a professional and focused digital presence, targeting healthcare professionals and patients interested in pulmonary hypertension.

COMORESTAURANT is an online magazine primarily targeting Slovak-speaking audiences with content focused on home improvement, marketing strategies, investment advice, and lifestyle topics. The website operates on WordPress CMS and employs standard SEO practices including JSON-LD structured data and Open Graph metadata to enhance search engine visibility. The technical infrastructure is moderate, with some outdated components such as older WordPress and jQuery versions that may pose security risks if not updated. Security posture is limited due to absence of security headers and lack of visible security or incident response policies. The website lacks privacy and cookie policies, which impacts GDPR compliance and user trust. WHOIS data for the domain is unavailable, reducing confidence in domain legitimacy and ownership transparency. Overall, the site provides good quality content and user experience but requires improvements in security, privacy compliance, and business credibility to enhance trustworthiness and regulatory adherence.

The website www.barlifeevents.cz operates as an online magazine primarily targeting Slovak-speaking audiences with content focused on household topics, energy, gardening, investment, and related services. The site uses WordPress CMS with a standard set of plugins and themes, providing a moderate level of technical sophistication and a generally good user experience. SEO metadata and structured data are implemented, enhancing search engine visibility. However, the absence of contact information, privacy policies, and cookie consent mechanisms indicates gaps in compliance and user trust facilitation. The WHOIS data for the domain is unavailable, which raises concerns about the domain's registration legitimacy and reduces overall trustworthiness. Security posture is basic, with no advanced security headers detected, though HTTPS is implied by canonical URLs. Overall, the site is functional and content-rich but requires improvements in privacy compliance, security best practices, and transparency to enhance credibility and user trust.

W

Webgaleria.sk

webgaleria.sk

42

Webgaleria.sk is a Slovak-based company specializing in custom web development, e-commerce solutions, and software programming. With over 150 successful projects across diverse sectors such as medicine, gastronomy, and manufacturing, they position themselves as a reliable provider of tailored digital services. Their offerings include website and e-shop creation, software applications, SEO services, professional photography, and corporate identity design. The website demonstrates a solid technical infrastructure utilizing modern frameworks like Bootstrap and jQuery, with responsive design and moderate performance. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and formal privacy policies. Contact information is clearly presented, enhancing business credibility. Overall, the site reflects a professional small business with a moderate market presence in Slovakia.

T

ThemeGrill

themegrilldemos.com

48

ThemeGrill Demos is a comprehensive WordPress theme demo portal offering over 130 ready-to-import demos across multiple popular themes such as ColorMag, Spacious, Flash, eStore, and others. The platform targets WordPress users, developers, and businesses seeking quick and professional website setups. The technical infrastructure is based on WordPress with a rich ecosystem of plugins and page builders including Elementor, Gutenberg, and SiteOrigin, supported by modern web technologies and analytics tools like Google Tag Manager. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are not found, indicating a gap in compliance. Overall, the website is professional, well-structured, and trustworthy, but could improve in privacy compliance and security best practices.

R

Revma Liga Česká republika, z.s.

revmaliga.cz

42

Revma Liga Česká republika, z.s. is a Czech non-profit patient organization dedicated to supporting individuals with rheumatic diseases. Established since 1991, it provides patient advocacy, educational workshops, psychological counseling, and community clubs. The website is professionally designed using WordPress and Elementor, featuring modern technologies such as Swiper.js and Google Tag Manager for analytics. The organization maintains an active social media presence on Facebook and Instagram, enhancing outreach and engagement. Security posture is generally good with HTTPS enforced, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is understandable for this type of organization. Overall, the website is a credible and valuable resource for its target audience.

E

European Society for Emergency Nursing

eusen.org

55

The European Society for Emergency Nursing (EuSEN) is a well-established non-profit professional society founded in 2012, focused on supporting emergency nursing professionals across Europe. The website serves as a hub for news, events, educational webinars, newsletters, and organizational information, targeting healthcare professionals in emergency nursing. The society maintains a consistent brand presence and active social media engagement, reinforcing its position in the healthcare non-profit sector. Technically, the website is built on WordPress CMS with a modern tech stack including Google Analytics, reCAPTCHA, and common plugins for forms and RSS aggregation. Hosting is provided by OVH sas, a reputable provider. The site demonstrates moderate performance and good mobile optimization, with structured metadata and SEO best practices implemented. From a security perspective, the site uses HTTPS and domain status protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy and cookie policies are absent, representing a compliance gap with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security posture. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance and security hardening are advised to mitigate risks and align with best practices.

E

EDTNA/ERCA

edtnaerca.org

51

EDTNA/ERCA is a well-established European non-profit association focused on renal care professionals, primarily nurses. The organization provides education, accreditation, conferences, publications, and fosters collaboration across the renal care community. Their website reflects a mature digital presence with comprehensive content targeting healthcare professionals in nephrology. Technically, the site employs modern web technologies including Material Design Lite, Google reCAPTCHA, and tracking via Google Tag Manager and Facebook Pixel, indicating a balanced approach to user experience and analytics. Security posture is strong with HTTPS, CSRF protection, and bot mitigation, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and serves its audience effectively.

The European Specialist Nurses Organisation (ESNO) operates as a non-profit entity focused on advancing the role and sustainability of specialist nurses across Europe. Their website serves as a central hub for information on their congresses and events, targeting healthcare professionals, policymakers, and partners. The organization positions itself as a key influencer in European healthcare policy through knowledge exchange and advocacy. Technically, the website employs a modern but straightforward tech stack including Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. Security-wise, the site uses HTTPS and avoids collecting sensitive data via forms, but lacks advanced security headers and a cookie consent mechanism, which are areas for improvement. Overall, the site is professional, trustworthy, and well-aligned with its mission, though it could enhance privacy compliance and security posture.

C

CLA

cla.global

51

CLA is a professional services firm specializing in advisory, accounting, tax, and corporate consulting services. The company targets businesses seeking scalable and compliant growth solutions, offering services such as company registration, corporate advisory, and banking services. The website is built on WordPress using Elementor, featuring a professional design and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. WHOIS data is unavailable due to privacy protection or unsupported TLD, which is common for such businesses. Overall, the website presents a credible and professional business presence with room for improvement in privacy and security disclosures.

C

COT group s. r. o.

stop-sikane.cz

57

COT group s. r. o. is a well-established Czech communication agency founded in 1999, specializing in marketing, media, and event services. The company positions itself as a trusted partner for businesses and organizations seeking impactful marketing solutions and brand experiences. Their website reflects a professional and consistent brand image, supported by client testimonials and a strong social media presence across Facebook, Instagram, LinkedIn, YouTube, and TikTok. The business model focuses on service provision in the media sector, targeting corporate clients and public institutions.

R

RESTAURACE VALTICKÁ RYCHTA VALTICE

valtickarychta.cz

58

RESTAURACE VALTICKÁ RYCHTA VALTICE is a traditional Czech restaurant located in a historic building with over 100 years of history. The business offers classic Czech cuisine, specializing in dishes such as roasted pork knuckles and ribs, complemented by a curated selection of South Moravian wines. They also provide catering services and host events in historic wine cellars and other notable venues in Valtice. The website is professionally designed using Incomedia WebSite X5 Pro, featuring modern web technologies like jQuery and Font Awesome, and is mobile optimized. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is basic with HTTPS enabled but missing security headers. No contact emails or phone numbers were explicitly found in the provided content, which may impact user trust and communication. Overall, the website is functional and trustworthy but can improve in privacy compliance and security best practices.

Pol'and'Rock Festival is a prominent free music festival organized in Poland by the Fundacja Wielka Orkiestra Świątecznej Pomocy, a well-established non-profit foundation. The festival targets music enthusiasts, volunteers, and the broader community, offering a rich program of events and volunteer opportunities. The website serves as a comprehensive portal for festival information, news, and engagement, reflecting a strong market position as a leading cultural event in Poland. Technically, the site employs a modern tech stack including Yii framework, Bootstrap, and various analytics and marketing tools, hosted by a reputable Polish provider. Security posture is solid with HTTPS and CSRF protections, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and user experience, supporting the festival's community-driven mission.

U

Uniwersytet SWPS

swps.pl

61

Uniwersytet SWPS is a well-established private university in Poland, founded in 2001, offering a wide range of academic programs and research activities. The website reflects a mature digital presence with extensive content related to education, research, and community engagement. The institution targets students, researchers, and the academic community, positioning itself as a significant player in the Polish higher education sector. Technically, the website employs a variety of modern web technologies including jQuery, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, indicating a moderate to advanced digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially met with cookie consent but lacks explicit privacy and terms of service documentation. Overall, the website is professional, trustworthy, and safe for general audiences.

The website snake.ch is a personal blog operated by Marco Trevissoi, showcasing a variety of creative projects including crafting, digital graphics, furniture, and other artistic endeavors. The site targets a general audience interested in creative arts and craftsmanship, with content organized into clear categories and regular blog posts dating back many years. The business model appears to be primarily content-driven with potential for custom commissions or ordering through dedicated pages. The domain has been registered since 2002, indicating a long-standing presence consistent with the website's content and author identity. Technically, the site is built on WordPress 5.7.14, utilizing common plugins such as Contact Form 7, Mailchimp for WordPress, and Slider Revolution. It employs modern web technologies including jQuery and Google Fonts, and is served over HTTPS, ensuring encrypted communications. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content-Security-Policy or HSTS, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is weak, with no privacy or cookie policies found, and no consent mechanisms implemented, which may pose compliance risks under GDPR. Contact information is limited to a contact form and subscription form, with no direct emails or phone numbers provided. Overall, snake.ch is a legitimate, well-maintained personal blog with good content quality and technical implementation. However, it would benefit from improved privacy compliance and enhanced security headers to strengthen its security posture and regulatory adherence.

M

Mikro Trading a.s.

mikrotrading.cz

55

Mikro Trading a.s. is a Czech Republic-based company specializing in the import, export, and distribution of toys. The company positions itself as one of the most stable businesses in the Czech market, with over 30 years of operational history. Their business model focuses on direct import and export, as well as exclusive product development, targeting children and toy distributors. The website reflects a medium-sized enterprise with a professional online presence and clear contact information.

I

IBCLC Commission

ibclc-commission.org

10

The IBCLC Commission is a well-established non-profit organization dedicated to certifying lactation consultants worldwide. With over 40 years of history and accreditation by the NCCA, it serves a global audience of healthcare professionals and breastfeeding families. The website provides comprehensive resources for certification, examination, and recertification, supporting the professional development of IBCLCs. Technically, the site is built on WordPress with modern plugins and demonstrates good mobile optimization and accessibility. Security posture is adequate with HTTPS and domain transfer protections, though it lacks some advanced security headers and a public security policy. Privacy compliance is supported by clear privacy and cookie policies, though a cookie consent mechanism is absent. Overall, the site is professional, trustworthy, and serves its niche effectively.

M

MeDiLa spol. s r.o.

mojemedila.cz

60

MeDiLa spol. s r.o. operates a Czech network of clinical laboratories offering comprehensive laboratory diagnostic services primarily targeting individuals seeking premium health testing solutions. The company provides a variety of health screening packages, vitamin and hormone testing, and corporate health benefits, positioning itself as a reputable regional healthcare provider in the Czech Republic. The website is professionally designed with clear navigation, detailed product information, and multiple customer engagement points including social media and newsletter subscription. Technically, the site leverages modern web technologies such as Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a responsive and secure user experience. Security measures include HTTPS enforcement, anti-CSRF tokens, and CAPTCHA integration, although some security headers are not explicitly detected. Privacy and cookie policies are present and indicate GDPR compliance. However, WHOIS data is unavailable, which slightly impacts trustworthiness but does not detract from the professional presentation and business legitimacy. Overall, the website demonstrates a solid digital maturity with room for improvement in security transparency and incident response documentation.

S

Stoehr Haustechnik

stoehr-solar.de

44

Stoehr Haustechnik is a small German company operating in the energy sector, specializing in solar technology and building technology services. The website is built on Joomla CMS using the Helix Ultimate template framework and incorporates modern technologies such as Bootstrap, jQuery, and Google Maps API. Usercentrics is used for cookie consent management, indicating some level of GDPR compliance awareness. However, the site lacks explicit privacy policy, terms of service, and visible contact information, which are critical for full compliance and user trust. Security posture is good with HTTPS and CSRF protections in place, but there is room for improvement in transparency and user communication. Overall, the website is functional and moderately professional but would benefit from enhanced compliance documentation and clearer contact channels.

S

Soppart GmbH & Co. KG

soppart.com

10

Soppart GmbH & Co. KG is a medium-sized German company specializing in integrated building technology solutions with a strong focus on renewable energy, including photovoltaics, heat pumps, energy storage, and smart home systems. The company positions itself as a regional market leader in the Bavarian Forest area, offering comprehensive services from planning to installation. Their website reflects a professional and consistent brand image, supported by partnerships with reputable technology providers such as Sonnen and Stiebel Eltron. Technically, the website is built on TYPO3 CMS with modern web technologies and includes standard analytics and social media integrations. Security posture is generally good with HTTPS and privacy compliance, though there is room for improvement in security headers and explicit incident response information. The absence of WHOIS registration data is a notable concern that warrants further investigation to confirm domain legitimacy. Overall, the website and business present a trustworthy and professional front with minor technical and compliance enhancements recommended.

S

SunStrom GmbH

sunstrom.de

10

SunStrom GmbH is a well-established German company specializing in photovoltaic solar energy solutions, with 25 years of experience and a strong regional presence in Dresden. The company offers comprehensive services including consulting, planning, installation, and maintenance of solar power systems, energy storage, and electric vehicle charging infrastructure. Their business model focuses on providing end-to-end solutions for sustainable energy production to private and commercial customers. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Font Awesome, hosted on a reputable provider (netcup). The site is mobile-optimized, SEO-friendly, and includes a robust cookie consent mechanism ensuring GDPR compliance. The infrastructure is secure with HTTPS enforced and email obfuscation implemented to protect contact details. From a security perspective, the website demonstrates good practices including secure forms, no exposed sensitive data, and a comprehensive cookie consent system. However, there is room for improvement by adding explicit security headers and a vulnerability disclosure policy. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a professional and trustworthy digital presence aligned with the company's business goals. The risk level is low, with recommendations focused on enhancing security headers and transparency policies to further strengthen trust and compliance.

I

International Board of Lactation Consultant Examiners

iblce.org

64

The International Board of Lactation Consultant Examiners (IBLCE) is a globally recognized non-profit organization dedicated to advancing professional lactation consultation through credentialing. With over 38,000 certified professionals worldwide, IBLCE holds a strong market position as the standard bearer in lactation consultant certification. The website reflects a mature organization with comprehensive services including certification, recertification, educational resources, and recognition programs. The presence of multiple regional offices and clear contact information supports its global operational footprint. Technically, the website is built on WordPress and hosted on WordPress.com infrastructure, leveraging modern JavaScript libraries and plugins to enhance user experience. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate likely due to rich media content. Security posture is solid with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and implementing advanced security headers such as Content-Security-Policy. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness with no signs of malicious activity or content safety concerns. The organization’s WHOIS data aligns well with its public claims, reinforcing legitimacy. Strategic recommendations include enhancing DNS security, publishing a vulnerability disclosure policy, and improving security header implementation to further strengthen the security posture.

S

Sünnitusmajade Fond

aitaalustadaelu.ee

40

Sünnitusmajade Fond is a small Estonian non-profit organization dedicated to supporting maternity hospitals through charitable events and exhibitions. Founded in 2000, it has a focused mission to raise awareness and funds for childbirth-related causes. The website is built on WordPress and hosted by Zone Media OÜ, reflecting a moderate level of technical maturity with caching and responsive design. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but could improve in transparency and security documentation.

A

Agentura Život spol. s r.o.

zivot.cz

34

Agentura Život spol. s r.o. is a Czech security agency established in 1990, providing comprehensive physical security services including protection of persons, property, and event security. The company holds recognized certifications such as ISO 9001, ISO 27001, and OHSAS 18001, indicating a mature integrated management system. Their client base includes government entities and commercial organizations, positioning them as a trusted medium-sized security service provider in the Czech Republic. Technically, the website uses common web technologies like Bootstrap, jQuery, and Google Analytics, but lacks HTTPS enforcement and modern security headers, which weakens its security posture. The absence of privacy and cookie policies also indicates compliance gaps. Overall, the site is professional and content-rich but requires improvements in security and privacy compliance to align with best practices.

K

Kompostuj

kompostuj.cz

47

Kompostuj.cz is a well-established Czech non-profit organization dedicated to promoting bio-waste sorting and recycling awareness across the Czech Republic. The website reflects a medium-sized organization with a clear focus on environmental education and sustainability. The business model centers on communication and advocacy rather than commercial activities, positioning it as a trusted entity in the non-profit environmental sector. The website's content is relevant and professionally presented, targeting a general audience interested in ecological topics. Technically, the website is built on WordPress using popular themes and plugins such as Astra, Elementor, and Smart Slider 3. It employs modern web technologies including JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. Accessibility features are basic but present. From a security perspective, the site uses HTTPS with excellent SSL configuration, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given the use of tracking technologies. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

H

Hochschule für öffentliche Verwaltung Kehl

hs-kehl.de

46

Hochschule Kehl is a public higher education institution specializing in training qualified professionals for public administration. It offers a range of Bachelor, Master, and doctoral programs focused on public management, digital administration, and international cooperation. The institution positions itself as a bridge between academia and the public sector, emphasizing sustainable development and social justice. The website reflects a well-structured academic portal with event announcements and research activities, targeting students, public sector professionals, and international partners. Technically, the site is built on WordPress with Elementor and incorporates modern SEO and cookie consent tools, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent management, though improvements in security headers and explicit security policies are recommended. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, serving its educational mission effectively.

R

RICOM secure s.r.o.

oxe.hu

44

OXE.hu is an e-commerce platform specializing in electronic products such as hunting cameras, GPS locators, power stations, and security systems. The company operates primarily in Hungary and is part of the RICOM secure s.r.o. group, which has a regional presence across multiple Central and Eastern European countries. The website targets general consumers and business clients interested in specialized electronic and security products. The business model focuses on retail sales through an online shop with additional physical pickup points in Hungary. The company maintains a consistent brand presence and offers a wide range of products catering to hunting, security, and electronic needs. Technically, the website employs a modern front-end stack including jQuery, Bootstrap, Font Awesome, and Google Analytics for tracking. It uses HTTPS with an excellent SSL configuration and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, no CMS or hosting provider details were explicitly detected. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage user privacy preferences. There are no visible security headers or explicit security policies published on the site, and no incident response contacts were found. The site does not expose sensitive data and uses reputable third-party scripts. Overall, the security posture is good but could be improved by adding dedicated security documentation and enhancing HTTP security headers. Overall, OXE.hu presents a trustworthy and professional online retail presence with moderate technical maturity and good privacy compliance. Strategic improvements in security transparency and incident response readiness would further enhance its risk profile and customer trust.

Z

Zentrum für Elementarpädagogik

zentrum-elementarpaedagogik.at

37

Zentrum für Elementarpädagogik is an Austrian educational organization specializing in elementary pedagogy training and services. The website presents a professional and well-structured platform primarily targeting educators and professionals interested in early childhood education. The technical infrastructure is based on WordPress with Elementor and Yoast SEO, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is acceptable with HTTPS enabled but lacks advanced security headers and visible incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

C

Consulting22 s.r.o.

inefko.cz

59

The website www.inefko.cz represents the Institut Efektivní Komunikace, a Czech-based educational institution specializing in online courses and professional development seminars with live instructors. The platform targets individuals and companies seeking practical skills in communication, law, coaching, nutrition, and other professional areas. The business model revolves around offering live online courses, certification programs, and VIP memberships, positioning itself as a modern and interactive learning environment. The site is operated by Consulting22 s.r.o., a Czech company with clear contact details and professional branding. Technically, the website employs a modern tech stack including PHP, Bootstrap, Font Awesome, and Google Fonts, with interactive elements powered by jQuery and Slick Slider. The site is mobile-optimized and features a clean, professional design with good SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. HTTPS is enforced, and login forms include usability features such as password visibility toggles. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and explicit incident response or vulnerability disclosure policies. GDPR compliance is indicated by a dedicated privacy policy page, but no cookie consent mechanism was detected. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and business information appear trustworthy and professional. Overall, the site presents a credible and well-structured educational platform with solid business credibility and user experience. However, the missing WHOIS data and limited security policy disclosures suggest areas for improvement in trust and compliance transparency.

P

PRO.Laika

prolaika.sk

63

PRO.Laika is a well-established Slovakian e-commerce and retail business specializing in photographic and video equipment. Founded in 1993, it holds a strong market position as the largest specialized photo equipment store in Slovakia, offering authorized sales of major brands such as Nikon, Canon, Panasonic, Olympus, Fujifilm, and Leica. The company targets photography enthusiasts and professionals, providing a broad range of products and services including sales, servicing, and workshops. Technically, the website is built on a custom e-commerce platform powered by Unisite CMS, utilizing modern JavaScript libraries and tracking tools. The site is mobile-optimized and SEO-friendly, with a good user experience and clear navigation. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, although formal security policies and incident response information are not publicly available. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, PRO.Laika demonstrates a mature digital presence with room for improvement in privacy policy transparency and security disclosures.

K

Kvásková kuchařka Jana Berková

kvaskovakucharka.cz

41

Kvásková kuchařka Jana Berková operates a niche e-commerce and educational platform focused on sourdough baking. The website offers cookbooks, baking courses, and related products primarily targeting home bakers and culinary enthusiasts in the Czech Republic. The business is small-sized, founded in 2014, and maintains a consistent brand presence with customer testimonials and clear contact information. Technically, the site is built on WordPress with WooCommerce and Elementor, hosted by WEDOS, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a GDPR policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though improvements in security and privacy practices are recommended.

S

SATOYA s.r.o.

satoya.cz

43

SATOYA s.r.o. is a Czech Republic-based IT service provider specializing in computer sales and servicing, IT outsourcing, web design, hosting services including webhosting, email, cloud, virtual and dedicated servers, and server housing. The company also develops custom software and hardware solutions, targeting businesses and individuals requiring reliable IT infrastructure and support. The website demonstrates a professional digital presence with detailed service descriptions, client references, and a regularly updated blog, indicating active engagement with its audience. Technically, the site is built on WordPress with modern plugins such as Smart Slider 3 and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data due to privacy protection slightly reduces trust but does not detract from the overall legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, publishing security and incident response information, and enhancing security headers and accessibility features.

OSK Praha s.r.o. is a Czech construction company specializing in earthworks, demolition, waste disposal, material transport, and land reclamation. The company has been operating since 2007 and collaborates with large construction and development firms, positioning itself as a reliable local service provider. The website reflects this business focus with clear service descriptions and references to industry-related external resources. Technically, the website is built on Joomla CMS using Bootstrap and SP Page Builder, providing a responsive and professional design. However, the site lacks advanced SEO and accessibility features and does not include privacy or cookie policies, which are critical for compliance. Security posture is basic with HTTPS and CSRF protection but lacks important HTTP security headers and incident response contact information. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

G

Gebrüder Weiss

euroexpress.at

59

EuroExpress, operated under the parent company Gebrüder Weiss, is a well-established European logistics cooperative founded in 1982. The company specializes in express delivery, special transport services, and distribution logistics across Europe, supported by a network of over 600 depots. Their website reflects a professional and consistent brand presence targeting business customers requiring fast and reliable transport solutions. Technically, the site is built on TYPO3 CMS, uses modern consent management via Usercentrics, and analytics through Piwik PRO, indicating a mature digital infrastructure. Security posture is solid with HTTPS and privacy compliance mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and aligned with GDPR requirements.

O

Obiteljsko Poljoprivredno Gospodarstvo Damjanić Ivan

damjanic.eu

45

Damjanić Wines is a small family-owned winery based in Fuškulin near Poreč, Croatia, with a long tradition dating back to the early 18th century. The company produces a variety of wines and olive oil, offers wine tastings by appointment, and operates a webshop for direct sales. Their market position is that of a leading regional winery in Istria, targeting wine consumers, tourists, and distributors. The website is multilingual and professionally designed to support their business model and customer engagement. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various frontend libraries. Hosting is provided by a Croatian hosting company, and the site uses HTTPS with a cookie consent mechanism to comply with GDPR. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business information, indicating a legitimate and trustworthy domain. Overall, the website presents a professional and trustworthy online presence for a small winery business, with good privacy compliance and moderate security posture. There are opportunities to enhance security headers and incident response information to further improve trust and compliance.

E

Exevio Ltd.

exevio.hr

55

Exevio Ltd. is a Croatian-based small technology company specializing in corporate IT solutions including web development, loyalty platforms, app and game development, and quality assurance services. Founded in 2013, the company positions itself as a quality-focused partner for businesses seeking tailored IT solutions. Their website reflects a professional and consistent brand image, supported by ISO 9001 and ISO 27001 certifications and EU funding partnerships, enhancing their credibility in the market. Technically, the website employs modern web technologies such as jQuery and integrates Google Analytics and Tag Manager for data insights. The site is mobile optimized with good SEO practices, though some improvements in accessibility and security headers could be made. Hosting details are limited but the domain is registered with NameCheap and secured with HTTPS. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. No incident response or vulnerability disclosure policies are published, which could be improved to enhance trust. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the website and business present a low-risk profile with strong business credibility and moderate technical maturity. Strategic improvements in security policies and technical hardening are recommended to further strengthen their posture.

T

Turistička Zajednica Varaždinske Županije

turizam-vzz.hr

52

The website turizam-vzz.hr serves as the official tourism portal for Varaždin County in Croatia, managed by the regional tourism board Turistička Zajednica Varaždinske Županije. It provides comprehensive information about local destinations, cultural heritage, accommodation options, events, and tourism offers, targeting tourists and visitors interested in exploring the region. The site is positioned as a regional governmental/non-profit entity focused on tourism promotion. Technically, the website is built on Joomla CMS using Bootstrap, jQuery, and other common web technologies. It features responsive design and moderate performance, with good SEO and basic accessibility features. The site employs HTTPS and includes a cookie consent mechanism, demonstrating awareness of GDPR requirements, though it lacks a clearly published privacy policy and terms of service. From a security perspective, the site uses HTTPS but lacks important security headers and does not publish security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration data aligns well with the website's claims, indicating legitimacy and trustworthiness. Overall, the site is professional and trustworthy but could improve its security posture and privacy compliance documentation.

K

Karlovačka županija

kazup.hr

59

Karlovačka županija's official website serves as a comprehensive digital portal for the regional government of Karlovac County, Croatia. It provides citizens and stakeholders with access to administrative information, news updates, public tenders, open data, and contact details. The site is well-structured, professionally designed, and targets local residents and interested parties in the government sector. The business model is focused on public service and transparency, positioning the site as a trusted source of regional governmental information. Technically, the website is built on Joomla CMS with modern frameworks such as Helix Ultimate and SP Page Builder, incorporating Bootstrap and Font Awesome for responsive design and iconography. It integrates accessibility tools like UserWay and supports multilingual content via GTranslate. The site demonstrates good mobile optimization and SEO practices, with moderate performance characteristics. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements a cookie consent mechanism compliant with GDPR. While some security headers like Content-Security-Policy are not detected, the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the domain's legitimacy and long-term registration consistent with a government entity. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers and maintaining up-to-date CMS and extensions to mitigate potential risks.

H

Hrvatska zajednica županija

hrvzz.hr

48

Hrvatska zajednica županija is the official Croatian County Association, providing a centralized platform for news, projects, international cooperation, and information about member counties. The website serves local government officials, citizens, media, and international partners, positioning itself as an authoritative source for county-related information in Croatia. Founded in 2008, it maintains a consistent and professional online presence with clear branding and official contact details. Technically, the website employs modern frontend technologies including Swiper.js for interactive sliders, Font Awesome for icons, and Google Fonts for typography. It is hosted with Cloudflare DNS services and uses HTTPS to secure communications. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and modern libraries but lacks explicit security headers and a vulnerability disclosure policy. No privacy or cookie policies are present, which is a compliance gap. Contact information is clearly provided, enhancing business credibility. No advertising or tracking services are detected, indicating a privacy-respecting approach. Overall, the website is trustworthy and professionally maintained, with a strong alignment between WHOIS data and website content, indicating legitimacy. Strategic improvements in privacy compliance, security headers, and accessibility would enhance its security posture and user trust.

P

Poduzetnički centar Zagrebačke županije

pczz.hr

45

Poduzetnički centar Zagrebačke županije is a regional entrepreneurial support institution focused on creating a quality and user-oriented business environment in the Zagrebačka županija region of Croatia. The organization provides key services such as project management, credit guarantees, investment zone support, and advisory services for agriculture and rural development. The website reflects a medium-sized government or non-profit entity with a clear regional focus and a professional online presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Hosting is provided by TOTOHOST d.o.o., a Croatian hosting provider, which aligns with the regional focus. The site is mobile optimized, accessible, and SEO-friendly, with good performance and no detected blocking or WAF interference. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, there is no explicit security policy or incident response information published, and security headers are not detected, suggesting room for improvement in formal security posture documentation and technical hardening. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It serves its target audience effectively, providing relevant content and contact information. Strategic recommendations include publishing formal security policies, adding incident response contacts, and enhancing security headers to improve resilience and trust further.

8

8devs

8devs.com

9

8devs is a small German company specializing in native app development for the healthcare sector, rescue services, and occupational safety. Their business focuses on improving health and well-being through innovative digital solutions, including apps like NeoDiary, HeroShift, and Verbandbuch. The company supports the entire app lifecycle from conception to publishing in major app stores. Technically, the website is built on WordPress with Elementor and uses modern web technologies, hosted by HTTP.NET INTERNET GMBH. The site is well designed, mobile optimized, and provides clear contact information. However, it lacks privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and incident response details. Overall, the company presents a professional digital presence with room for improvement in compliance and security transparency.

K

Kulturreferat Garching

buergerhaus-garching.de

10

The website www.kultur-garching.de serves as the official cultural portal for the town of Garching, Germany, focusing on promoting cultural events, ticket sales, and community engagement through the Bürgerhaus Garching. It targets local residents and visitors interested in cultural activities, offering a comprehensive event calendar and ticket purchasing options via a reputable third-party platform. The site is well-positioned as a local government-affiliated cultural service provider with a clear and consistent brand presence. Technically, the website employs modern frontend technologies including Angular, jQuery, and Slick Carousel, supported by a CMS platform (EGOTEC). It is hosted on SchlundTech infrastructure, ensuring reliable performance and good mobile responsiveness. SEO and accessibility are basic but functional, with room for improvement in accessibility features and SEO optimization. From a security perspective, the site uses HTTPS and includes some security best practices such as email obfuscation and standard security headers. However, it lacks a security.txt file and explicit Content-Security-Policy headers, which are recommended for enhanced security posture. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is detected, which is a gap for GDPR compliance. Overall, the website is trustworthy and professional, with a high business credibility score. Strategic improvements in privacy compliance and security headers would further strengthen its security posture and user trust.

W

Webinaris

webinaris.co

66

Webinaris is a technology company specializing in automated webinar software designed to enhance digital customer acquisition. Positioned as a market leader in the German-speaking market, it offers an all-in-one platform integrating marketing automation, landing pages, and email marketing to increase customer conversion rates significantly. The website is professionally designed, targeting businesses and marketers seeking efficient webinar solutions. Technically, the site leverages modern marketing and analytics tools such as Leadpages, Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. The platform is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of explicit security headers and lack of published privacy and terms policies are notable gaps. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not directly contradict the professional nature of the website. Overall, the site presents a moderate risk profile with room for improvement in compliance and security transparency.

SIRO-Poland Sp. z o. o. operates as the exclusive distributor in Poland for decorative furniture accessories, including handles, knobs, LED lighting, and decorative mats. The company targets furniture manufacturers, wholesalers, retailers, and interior designers, positioning itself as a key player in the Polish furniture accessory market. The website reflects a professional business presence with clear product offerings and partner relationships. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks some security headers and formal privacy/cookie policies, which are areas for improvement. Overall, the site is trustworthy and well-maintained, supporting the company's market position.

M

Motion Media Company

motionmediacompany.com

48

Motion Media Company is a newly established media production business specializing in video and creative content services. The website reflects a professional media portfolio targeting businesses and individuals seeking high-quality media production. The company appears to be small and recently founded in 2024, consistent with the domain registration date. Technically, the site is built on WordPress using Elementor, with a moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is limited, with no privacy or terms of service pages found, though a cookie consent mechanism is present. Overall, the site is functional and professional but would benefit from enhanced security and compliance documentation.

C

CRANE

crane.hr

9

CRANE.hr is the official website of the Croatian Investors and Business Angels Association, the oldest such organization in Croatia, focused on connecting private investors with innovative early-stage companies. The website serves as a platform for sharing news, events, and resources related to investment and entrepreneurship in Croatia. It targets private investors and startups seeking early-stage funding, positioning itself as a key national player in the investment ecosystem. The business model revolves around networking, knowledge sharing, and facilitating investments. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO, WPML for multilingual support, Contact Form 7 for contact forms, and WPBakery Page Builder for layout management. The site is hosted by a Croatian hosting provider, cyber_Folks d.o.o., and uses HTTPS with a valid SSL certificate. Performance and mobile optimization are good, though accessibility features are basic. SEO is adequately implemented with meta tags and structured data. From a security perspective, the site uses HTTPS and some security plugins (e.g., Wordfence), but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. Overall, the website is professional and trustworthy with good business credibility and content quality. However, improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

Chryso España is a specialized provider of chemical additives and solutions for the construction industry, focusing on improving concrete and building materials. The company operates primarily in Spain and is part of the larger Sika AG group, positioning itself as a reputable player in the manufacturing sector. The website reflects a professional B2B business model targeting construction professionals and concrete producers. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics tools such as HubSpot and Google Tag Manager, indicating a mature digital presence. Security-wise, the site enforces HTTPS, employs standard security headers, and implements GDPR-compliant privacy and cookie policies, although it lacks a dedicated security policy or incident response page. Overall, the website is trustworthy, well-structured, and safe for general audiences, with no signs of blocking or WAF interference.