Security Directory

HAIMA Ostrava, z.s. is a Czech non-profit organization established in 1996, dedicated to supporting seriously ill children at the pediatric hemato-oncology department of the Faculty Hospital Ostrava. The organization focuses on improving care conditions and facilitating integration of affected children into normal life. The website serves as an information hub for donors, parents, and the community, featuring donation options, news updates, and stories from families. Technically, the site uses a modern but basic tech stack including Bootstrap and jQuery, with embedded social media and donation widgets. While the site is accessible and well-structured, it lacks explicit privacy and cookie policies, and no WHOIS data is available to verify domain registration details, which slightly impacts trustworthiness. Security headers are not detected, though HTTPS is implied. Overall, the site presents a professional and trustworthy image for a small non-profit entity.

T

TIDI Products, LLC

tidiproducts.com

10

TIDI Products, LLC operates a professional and comprehensive website focused on medical products designed to support caregivers and protect patients. The company targets healthcare professionals and medical facilities, offering a broad range of safety and protective equipment. The website is well-branded, consistent, and provides clear contact information and resources such as blogs and product instructions. Technically, the site is built on HubSpot CMS, leveraging modern JavaScript libraries and marketing tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data for the domain is a concern, potentially indicating a registration issue, but the website content and professionalism suggest a legitimate business presence. Overall, the site scores well in content quality, technical implementation, and privacy compliance, with room for improvement in security transparency and domain registration clarity.

I

Intellum

intellum.com

11

Intellum is a leading provider of AI-powered enterprise learning solutions, offering an advanced learning management system (LMS) and integrated content authoring tools designed to streamline training and certification for employees, partners, and customers. The company targets large enterprises across technology, SaaS, financial services, retail, manufacturing, and security sectors, positioning itself as a trusted partner with a strong client base including Fortune 500 companies such as Meta, Google, and Amazon. Their platform emphasizes AI automation to reduce administrative overhead and improve learning outcomes. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, Marketo, and various analytics and marketing tools. It is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive SEO and privacy compliance features. Security posture is strong, with HTTPS enforced, SOC 2 Type II certification, and standard security headers implemented. While the WHOIS data is missing or privacy protected, which slightly reduces transparency, the overall website and business presence indicate a legitimate and professional enterprise. No critical security vulnerabilities or compliance gaps were detected. The site includes clear privacy and cookie policies with consent mechanisms, but lacks explicit incident response or vulnerability disclosure information. Overall, Intellum demonstrates a mature digital presence with strong business credibility and security practices, suitable for enterprise clients. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing incident response transparency, and clarifying data retention policies to further strengthen trust and compliance.

CODEWARE, s.r.o. is a Czech Republic-based company specializing in automatic identification and RFID technologies. Their website showcases their expertise in RFID systems, barcode scanning, and automation solutions, targeting business clients requiring such technologies. The company operates a professional e-shop and provides consulting services in automation technology. The website is well-structured, uses modern web technologies including Bootstrap, jQuery, and FontAwesome, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Cookie consent is implemented, reflecting some privacy compliance awareness. However, the absence of explicit privacy policy and terms of service pages limits full compliance assessment. The website is served over HTTPS with a good SSL configuration, but lacks some recommended security headers. WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the site presents a professional image with moderate technical maturity and a good security posture, but would benefit from improved privacy and legal disclosures.

Q

QI GROUP a.s.

qi.cz

45

QI GROUP a.s. operates the website www.qi.cz, offering a comprehensive ERP and business information system tailored for various industries including manufacturing, retail, and technology sectors. The company positions itself as an established ERP provider with over 1,500 implementations, providing modular solutions such as CRM, DMS, BI, HRM, and mobile applications. The website is professionally designed, well-structured, and targets business clients seeking integrated enterprise solutions. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. Security measures include HTTPS enforcement and GDPR-compliant cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data reduces domain trust slightly, but the overall business credibility and content quality remain high. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve trust.

A

ANGELINI PHARMA PORTUGAL UNIPESSOAL LDA.

harmoniamentis.pt

68

Harmonia Mentis Portugal is a professional healthcare platform operated by Angelini Pharma Portugal, focused on mental health content for healthcare professionals. The platform offers scientific articles, podcasts, and updates related to mental health, with access controlled via login and registration portals hosted on related Angelini Pharma domains. The website branding and content align closely with the parent company, indicating a strong market position in the pharmaceutical healthcare niche in Portugal. Technically, the website uses a modern JavaScript stack including jQuery, Mustache.js, and WaveSurfer.js, with Piwik PRO analytics for user tracking. The site is mobile optimized and uses HTTPS with good SSL configuration. However, some standard security headers are not visibly implemented, and no explicit security or incident response policies are published on the site. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and anonymized analytics tracking. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms, though GDPR-specific details could be more explicit. Business credibility is high due to consistent branding, professional content, and WHOIS data alignment. Overall, the website presents a low-risk profile with good technical and business maturity. Strategic improvements could include publishing a dedicated security policy, incident response contacts, and enhancing security headers to further strengthen the security posture.

A

Angelini Pharma Zug S.p.A., Rom - Zweigniederlassung Zug

harmoniamentis.ch

70

Harmoniamentis.ch is a healthcare-focused platform dedicated to brain health, particularly epilepsy, operated under Angelini Pharma Zug S.p.A. The website serves patients and healthcare professionals by providing educational content, resources, and updates on neurological diseases. It positions itself as a niche informational and support resource within the healthcare sector in Switzerland, leveraging the reputation and backing of Angelini Pharma. Technically, the site uses a modern JavaScript stack with libraries such as jQuery, Mustache, and WaveSurfer, and is built on the Umbraco CMS platform. The site is mobile-optimized and incorporates SEO best practices, though some accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policy and incident response information. Privacy compliance is good with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

H

Health Carousel Travel Nursing

hcalliedtravel.com

67

Health Carousel Travel Nursing operates as a leading healthcare staffing agency specializing in travel nursing and allied health assignments across the United States. Positioned as a top 10 agency, it offers a comprehensive suite of services including local and travel contracts, career development programs, and a full circle of support with benefits and personalized recruiter assistance. The website reflects a mature digital presence with professional branding, rich content, and multiple industry certifications that reinforce its market credibility. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as jQuery, Segment Analytics, HubSpot forms, and Wistia video embeds. It demonstrates good performance, mobile optimization, and SEO practices. The integration of advanced analytics and marketing tools indicates a high level of digital maturity and user engagement tracking. From a security perspective, the site enforces HTTPS and employs secure form handling via HubSpot. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no publicly available security policy or incident response information. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the site's professional presentation and certifications. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic improvements in security headers and transparency around security policies would further enhance trust and compliance.

T

TypeParis

typeparis.com

60

TypeParis is a specialized educational entity focused on typeface design and typography, offering workshops, conferences, and summer intensive programs. Founded in 2015 and originally launched by Typofonderie, it operates independently with a team of professional trainers. The website is well-designed, content-rich, and targets design professionals and enthusiasts globally. Technically, it is built on Webflow with Cloudflare hosting and uses modern web technologies including jQuery and GoatCounter analytics. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Business credibility is high with consistent domain registration and multiple trusted partners and sponsors.

Regeneron is a leading biopharmaceutical company focused on harnessing biology and technology to develop innovative medicines for serious diseases. The website reflects a mature enterprise with a strong market position, targeting healthcare professionals, investors, patients, and job seekers globally. The company emphasizes scientific research, clinical trials, and corporate responsibility. Technically, the website uses modern technologies including Kentico CMS, Google Tag Manager, and embedded Vimeo videos, delivering a well-structured, accessible, and mobile-optimized experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be explicitly declared for enhanced protection. The absence of WHOIS data is noted but likely due to privacy or registry policies rather than malicious intent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

A

Angelini Pharma Deutschland GmbH

harmoniamentis.de

68

Harmonia Mentis is an online platform operated by Angelini Pharma Deutschland GmbH, focusing on epilepsy education and awareness in Germany. The website offers a broad range of content tailored to patients, relatives, and healthcare professionals, including articles, podcasts, and news about epilepsy research and treatment. The platform positions itself as a trusted resource in the healthcare sector, supported by a reputable pharmaceutical company with a clear focus on neurological health. Technically, the site employs modern JavaScript libraries and analytics tools, ensuring a responsive and user-friendly experience across devices. Privacy and cookie policies are well implemented, reflecting compliance with GDPR requirements. Security posture is solid with HTTPS enforced and secure login mechanisms, though some improvements in security headers and incident response transparency are recommended. Overall, the website demonstrates a professional and trustworthy presence with a strong focus on healthcare education.

A

Angelini Pharma Austria GmbH

harmoniamentis.at

70

HarmoniaMentis is a specialized healthcare information platform operated by Angelini Pharma Austria GmbH, focusing on brain health topics such as epilepsy and depression. The website provides medically scientific content tailored for both healthcare professionals and interested patients, including articles, videos, and event information. The platform integrates a secure login and registration system for medical professionals, indicating a controlled access to specialized content. Technically, the website employs modern JavaScript libraries and analytics tools, including Piwik PRO for user behavior tracking, and is built on the Umbraco CMS platform. The site is mobile-optimized with good design and navigation clarity. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not evident. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the strong corporate branding and professional content. Overall, the website presents a trustworthy and professional digital presence for Angelini Pharma Austria GmbH in the healthcare education sector.

A

Angelini Holding S.p.A.

angeliniacademy.com

65

Angelini Academy is a corporate educational platform dedicated to developing leadership and managerial skills within the Angelini Industries group. The website presents a professional, well-structured digital presence with comprehensive content about training programs, methodologies, and partnerships with prestigious business schools. Technically, the site uses modern JavaScript libraries and analytics tools, ensuring good performance, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable concern, but the website's branding and external references strongly associate it with the legitimate Angelini Holding S.p.A. Overall, the site is trustworthy and professional, serving a medium-sized corporate educational function in Italy.

A

Angelini Holding S.p.A.

angeliniindustries.it

62

Angelini Industries is a large, diversified industrial group headquartered in Italy, operating across healthcare, consumer goods, and industrial technology sectors. The company emphasizes sustainable growth, innovation, and corporate responsibility, supported by a strong portfolio of brands and international presence in 21 countries. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including financial reports and sustainability initiatives. Technically, the site uses modern JavaScript libraries and analytics tools, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy and should be verified. Overall, the site projects a trustworthy corporate image but domain registration inconsistencies warrant further investigation.

B

Breast Cancer Initiative East Africa

breastcancerafrica.org

64

Breast Cancer Initiative East Africa (BCIEA) is a Rwanda-based nonprofit organization dedicated to breast cancer awareness, education, screening, and support primarily in Rwanda and East Africa. The organization leverages innovative AI-powered technologies and community-driven models to improve breast health outcomes. Their market position is that of a pioneer and leader in breast cancer support within the region, with a strong focus on sustainable healthcare capacity building and community engagement. The website reflects a professional and well-branded digital presence with clear calls to action for donations and volunteering. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Fonts, Google Tag Manager, and embedded video content. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. However, some accessibility features could be improved, and no explicit hosting provider or advanced frameworks were detected. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The WHOIS data is unavailable or malformed, limiting domain registration transparency, but the website content and social media presence support legitimacy. No critical vulnerabilities or adult content were detected. Overall, the site demonstrates a strong business credibility and content quality but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

S

Spojená akreditační komise, o.p.s.

sakcr.cz

51

Spojená akreditační komise, o.p.s. is a Czech non-profit organization established in 1998, dedicated to improving the quality and safety of healthcare services in the Czech Republic through accreditation, consultancy, and publication activities. The organization holds a reputable position in the healthcare accreditation sector, supported by its ISQua membership and a professional online presence. The website targets healthcare providers and institutions seeking accreditation and related services. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and Nette Framework, ensuring a responsive and user-friendly experience. The presence of multiple login portals indicates a structured user management system catering to different user roles. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements, though it lacks some advanced security headers and explicit incident response policies. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional content and clear contact information. Overall, the website demonstrates a solid digital maturity with room for security and compliance enhancements.

L

Lutrija Bosne i Hercegovine

lutrijabih.ba

71

Lutrija Bosne i Hercegovine is the official national lottery operator of Bosnia and Herzegovina, providing a range of lottery and betting services including Loto 6/39, TV Bingo, and sports betting. The organization targets adult users within the country and operates both online and offline channels, including mobile applications. The website reflects a mature digital presence with modern technologies such as Bootstrap, jQuery, and integration with Google Analytics and Facebook SDK for analytics and marketing. Security practices include HTTPS enforcement, login authentication via AJAX, and cookie consent mechanisms, supported by ISO 27001 and WLA certifications that enhance trust. However, some security headers are not explicitly detected, and incident response contact details are not publicly available. Overall, the site is professional, compliant with privacy regulations, and focused on responsible gaming.

Musicant is a Czech cultural association specializing in organizing concerts and representing artists primarily in jazz, world music, folk, and alternative genres. The organization operates mainly in Havířov and Ostrava, targeting music enthusiasts interested in quality and diverse musical experiences. Their business model revolves around event organization, artist representation, and ticket sales facilitation, positioning them as a regional cultural player with a strong local presence. The website reflects a professional and consistent brand image with clear contact information and active social media engagement.

A

Angelini Holding S.p.A.

angeliniindustries.com

62

Angelini Industries is a large, diversified industrial group headquartered in Italy, operating primarily in healthcare, consumer goods, and industrial technology sectors. The company maintains a strong market position with a presence in 21 countries and 12 production sites, supported by a portfolio of leading brands and a commitment to sustainable growth. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including financial reports, sustainability initiatives, and corporate governance information. Technically, the site uses modern JavaScript libraries and frameworks to deliver a responsive and engaging user experience. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the absence of WHOIS registration data reduces trust from a domain legitimacy perspective and warrants further investigation. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

O

OrthoPedia

orthopedia.com

65

OrthoPedia is a specialized online educational platform focused on orthopedic surgery and musculoskeletal medicine. Sponsored by Arthrex, it offers high-quality, peer-reviewed video content tailored for clinicians, patients, academics, and soon veterinarians. The platform is positioned as a leading resource in orthopedic education, leveraging modern web technologies and a professional design to deliver an excellent user experience. The website integrates comprehensive privacy and cookie consent mechanisms, reflecting a strong commitment to user data protection and regulatory compliance. However, the absence of WHOIS registration data and explicit security policies introduces some uncertainty regarding domain legitimacy and security transparency. Overall, the platform demonstrates a mature digital presence with room for improvement in security disclosures and contact transparency.

Q

QuestionPro

questionpro.eu

61

QuestionPro is a recognized provider of survey software solutions, targeting businesses and professionals who require efficient survey creation and data insights. The website analyzed is a minimal placeholder page indicating a moved or deleted survey, with branding consistent with QuestionPro's market position as a leading survey software provider. The technical infrastructure includes modern JavaScript libraries and third-party analytics and consent management tools, indicating a moderate level of digital maturity. Security posture is basic with HTTPS implied and cookie consent implemented, but lacks visible security headers and detailed privacy or security policies on this page. The absence of WHOIS data limits domain trust assessment, though the website content and branding suggest legitimacy. Overall, the site is functional but minimal, with room for improvement in transparency and security documentation.

C

Centre Hospitalier du Nord (CHdN)

chdn.lu

66

Centre Hospitalier du Nord (CHdN) is a public hospital serving the northern region of Luxembourg, with facilities in Ettelbruck and Wiltz. The website provides comprehensive information about medical specialties, doctors, patient services, and hospital organization. It targets patients, visitors, and healthcare professionals, positioning itself as a key regional healthcare provider. The business model is public healthcare service delivery, focusing on a broad range of medical specialties and patient care services. The hospital appears to be medium-sized and was founded around 2020 based on website content.

A

Affidea

affidea.ro

72

Affidea Romania is a leading healthcare provider specializing in diagnostic imaging, laboratory analyses, and cancer treatment services. Operating in 15 European countries with over 391 centers and 16,000 professionals, Affidea holds a strong market position as the largest European provider in its sector. The website reflects a mature digital presence with comprehensive service offerings, clear navigation, and professional branding. Technically, the site leverages WordPress with modern libraries and APIs, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and website content align well, supporting legitimacy and trustworthiness.

A

Affidea Portugal

affidea.pt

72

Affidea Portugal is a leading healthcare provider specializing in diagnostic imaging, oncology treatment, and ambulatory services across Portugal. Established in 2007 and part of the larger Affidea Group, the company offers a comprehensive range of medical examinations, clinical analyses, and specialty consultations. The website reflects a mature digital presence with clear service offerings targeted at patients and healthcare professionals in Portugal. Technically, the site is built on WordPress with modern libraries and includes essential marketing and analytics tools such as Google Analytics and Facebook Pixel, integrated with GDPR-compliant cookie consent mechanisms. Security posture is generally good with HTTPS enforced and bot protection via reCAPTCHA; however, some improvements are recommended in security headers and vulnerability disclosure practices. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations, supporting Affidea Portugal's strong market position in healthcare diagnostics.

A

Affidea Polska

affidea.pl

62

Affidea Polska operates a large network of diagnostic imaging and oncology treatment centers across Poland, providing both publicly funded and private healthcare services. The website reflects a mature healthcare business with a strong market position supported by numerous partnerships and certifications. The technical infrastructure is based on WordPress CMS with modern plugins and technologies ensuring good performance, SEO, and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, targeting patients and healthcare professionals.

A

Affidea Bosnia

affidea.ba

68

Affidea Bosnia operates as a specialized radiotherapy and oncology center located in Banja Luka, Bosnia and Herzegovina. It is part of the larger Affidea Group, a Swiss-owned European healthcare provider with a broad network of centers across multiple countries. The website presents a professional and comprehensive digital presence, emphasizing advanced medical services such as teleradiotherapy and brachytherapy with modern technologies. The content is well-structured, targeting oncology patients and healthcare professionals, and reflects a strong market position within the regional healthcare sector. Technically, the website is built on WordPress with modern plugins and libraries including jQuery, Google reCAPTCHA, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security measures include HTTPS enforcement, cookie consent management, and use of CAPTCHA to protect forms. However, some security headers are not explicitly detected and could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. No adult or questionable content is present, making the site safe for general audiences. Overall, Affidea Bosnia's website reflects a mature and trustworthy healthcare provider with a strong digital footprint, though it could enhance security headers and incident response transparency to further strengthen its security posture.

Push Braces is a specialized orthopaedic company focused on the development and distribution of braces designed to support joint injuries and chronic disorders. Established in 1986, the company leverages its expertise in orthopaedics to provide innovative products that enhance mobility and reduce pain. The website reflects a mature business with a clear market position in healthcare, targeting both patients and healthcare professionals. The product range is well-categorized and supported by educational content and research insights. Technically, the website is built on a modern CMS platform (Telerik Sitefinity) and uses contemporary web technologies including Bootstrap and Font Awesome, ensuring a responsive and user-friendly experience. The presence of multiple analytics and marketing tools indicates a data-driven approach to customer engagement. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit cookie consent mechanisms, which are recommended for enhanced compliance and protection. Overall, the domain WHOIS data is privacy-protected, which is common for .eu domains, but the website's professional presentation and consistent contact information support its legitimacy. Strategic recommendations include improving privacy compliance, publishing security policies, and implementing security headers to strengthen the security posture.

S

SNT Plus s.r.o.

sntplus.cz

57

SNT Plus s.r.o. is a Czech Republic-based company specializing in the supply and servicing of medical device technology, including ultrasound imaging, patient monitoring systems, pulmonary ventilation, and defibrillators. Established since 1999, the company targets healthcare professionals and medical service providers, offering a broad portfolio of products and professional services. Their market position is that of a reliable and established healthcare technology supplier with a professional online presence and active social media engagement. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Tag Manager and Google Analytics for tracking, with a responsive design optimized for mobile devices. Security posture is good with HTTPS enforced and cookie consent implemented; however, the absence of security headers and WHOIS data reduces overall trust. Privacy compliance is strong, with a comprehensive GDPR policy and cookie banner with consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, though improvements in security headers and domain registration transparency are recommended.

P

Plasma Protein Therapeutics Association (PPTA)

plasmaweek.org

60

The International Plasma Awareness Week (IPAW) website serves as a global advocacy and awareness platform managed by the Plasma Protein Therapeutics Association (PPTA). It focuses on educating the public, honoring plasma donors, and promoting understanding of plasma-derived therapies for rare diseases. The site targets a broad audience including patients, donors, policymakers, and the general public, positioning itself as a key resource in the healthcare advocacy sector. The business model revolves around awareness campaigns, educational resources, and community engagement rather than direct commercial activities. Technically, the website is built on the Webflow CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js for interactive content. It integrates Google Tag Manager and Hotjar for analytics and user behavior tracking, with a cookie consent mechanism that respects user privacy preferences. The site is well-optimized for mobile devices, offers good accessibility features, and demonstrates strong SEO practices through proper metadata and structured content. From a security perspective, the site enforces HTTPS and employs privacy-conscious tracking configurations. However, explicit security headers like Content Security Policy and HSTS are not evident, and there is no visible security policy or vulnerability disclosure page. The WHOIS data is privacy protected, which is typical for advocacy organizations, and no suspicious patterns were detected. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The overall risk assessment is low, with the site presenting a professional, trustworthy, and well-maintained presence. Strategic recommendations include implementing stronger security headers, publishing a security policy, and providing a vulnerability disclosure mechanism to further enhance trust and compliance.

Instituto Politécnico de Bragança (IPB) is a Portuguese public higher education institution focused on delivering a wide range of academic programs including undergraduate, master's, doctoral, and continuing education courses. The institution also emphasizes research, innovation, and internationalization through programs like Erasmus+ and dual degrees. IPB serves students, academic staff, and international partners, positioning itself as a regional leader in polytechnic education in Portugal. The website reflects this with comprehensive content, clear navigation, and consistent branding. Technically, the website employs modern front-end technologies such as Bootstrap 4.6, jQuery, and Google Fonts, and is built on WordPress CMS. The site is mobile-optimized and offers moderate performance. However, there is room for improvement in accessibility and SEO optimization. The hosting provider is not explicitly identified, but the site uses HTTPS with a good SSL configuration. From a security perspective, the site uses HTTPS and modern libraries but lacks visible security headers and explicit security policies. There is no cookie consent mechanism detected, which is a GDPR compliance gap. No forms collecting personal data were found on the homepage, reducing immediate risk. The WHOIS data aligns well with the institution's identity, indicating high legitimacy. Overall, the security posture is moderate but could be enhanced with better headers, policies, and compliance mechanisms. The overall risk is low given the nature of the institution and the website's content. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and improving accessibility and SEO. These steps will enhance trust, compliance, and security maturity.

U

UAB Montonio Finance

montonio.lt

69

Montonio Finance is a Lithuanian-based payment and shipping solutions provider targeting small and medium-sized e-commerce businesses. The company offers an integrated platform that supports multiple payment methods, shipping carriers, and refund management, aiming to increase sales and reduce operational costs. The website demonstrates a strong market presence in the Baltic region with over 7,000 merchants and highlights integrations with popular e-commerce platforms such as Shopify, WooCommerce, and Magento. Technically, the website is built on Webflow with modern tracking and marketing tools including Google Tag Manager, HubSpot, and Trustpilot, ensuring a professional and responsive user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not published. The absence of WHOIS data slightly reduces trust but the business licensing and transparent contact information support legitimacy. Overall, Montonio presents a credible and mature digital presence with room for improvement in security transparency and direct contact details.

G

Garcy.Studio

fastforward.design

54

FastForward.design is a web design service offering affordable, fully-built, and ready-to-launch websites designed by the award-winning agency Garcy.Studio. The company targets startups, SMBs, agencies, and personal brands seeking professional websites without the high cost and time commitment of custom builds. Their business model focuses on selling pre-built website designs with customization based on client content, operating on a one-time payment basis. Technically, the website is built on Webflow CMS, uses modern JavaScript libraries such as Plyr for video playback, Lenis for smooth scrolling, and integrates analytics tools like Google Analytics and Smartlook. The site is well-optimized for mobile and SEO, with excellent design and user experience. Security posture is moderate with HTTPS implied but lacks explicit security headers and incident response information. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism. WHOIS data is unavailable, which slightly reduces trustworthiness but the professional presentation and branding mitigate concerns. Overall, the website scores well on content quality and technical implementation but could improve in security and privacy transparency.

C

Cortex

cortextech.io

64

Cortex is a technology company specializing in fan engagement and marketing technology solutions tailored for the sports industry. Their platform offers a comprehensive suite of products including content management systems, fan data platforms, digital activations, and stadium display software. The company targets sports organizations and rights holders aiming to enhance fan experiences and drive revenue through digital marketing innovations. Cortex positions itself as a scalable SaaS provider with a strong client base including major sports entities, demonstrating a solid market presence. Technically, Cortex employs a modern web infrastructure leveraging Webflow CMS, Google Tag Manager, Vimeo for video content, and advanced consent management tools to ensure GDPR compliance. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital presence. The use of multiple analytics and marketing tools indicates a data-driven approach to user engagement and business intelligence. From a security perspective, Cortex enforces HTTPS and integrates consent management for privacy compliance. While explicit security headers are not fully visible, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. WHOIS data is privacy protected, which is typical for tech companies, and does not detract from the site's legitimacy given the professional presentation and trust signals. Overall, Cortex presents a low-risk profile with a robust business model and technical foundation. Strategic recommendations include enhancing security header implementation, publishing security and vulnerability disclosure policies, and providing clearer contact information to further strengthen trust and compliance.

A

Asociace poskytovatelů sociálních služeb České republiky

apsscr.cz

54

Asociace poskytovatelů sociálních služeb České republiky (APSS ČR) is the largest professional association representing social service providers in the Czech Republic. It operates as an independent nonprofit organization focused on advocacy, education, quality assurance, and sector development. The website presents a professional and comprehensive digital presence with clear navigation, rich content, and multiple services including an educational institute, quality mark, e-shop, and virtual reality experiences related to social services. The target audience includes social service providers, professionals, and related institutions within the Czech social services sector. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Swiper, and lazy loading techniques to optimize performance and user experience. It is mobile responsive and integrates social media and analytics tools like Google Analytics and Facebook Pixel for marketing and user behavior insights. Cookie consent is implemented with granular user controls, supporting GDPR compliance. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers in the provided data. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain registration trustworthiness, but the professional content and certifications support legitimacy. No explicit incident response or security policy pages were found. Overall, the site demonstrates a mature digital infrastructure suitable for a nonprofit professional association, with strong content quality and user experience. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and improving domain registration transparency to strengthen trust and compliance.

Angelato.cz is a small, family-run artisanal ice cream business based in Prague, Czech Republic, operating since 2007. The company produces high-quality ice cream and sorbets using natural ingredients and offers retail sales through multiple physical locations, catering services, and an online e-shop. The website is built on WordPress with modern plugins and technologies, providing a good user experience and mobile responsiveness. Security posture is moderate with HTTPS enabled but lacking advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

S

Scope Productions s.r.o.

scopeproduction.cz

51

Scope Productions s.r.o. is a professional video production company based in Prague, Czech Republic, specializing in creating high-quality video content for global brands, Web3 projects, and livestream events. With over 10 years of experience, they offer a comprehensive range of services including timelapse videos, video marketing, livestreams, corporate videos, commercials, animations, and Web3 content. Their market position is that of a trusted small-sized media service provider with a strong international client base and a focus on innovation and measurable results. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, Vimeo Player API, and uses Cloudflare services for CDN and security. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience with smooth scrolling and interactive elements. From a security perspective, the site employs HTTPS and uses Cloudflare Turnstile CAPTCHA on its contact form to mitigate spam and bot submissions. However, it lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data due to privacy protection is common for this business type but reduces transparency slightly. Overall, the website presents a professional and trustworthy image with strong business credibility and technical maturity. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing explicit incident response contacts to improve compliance and trust.

S

Schubert CZ spol. s r.o.

schubert24.cz

45

Schubert CZ spol. s r.o. is a well-established distributor and exclusive importer of leading healthcare and laboratory brands in the Czech Republic. Operating since 1991 as a subsidiary of the German Schubert Medizinprodukte, the company serves hospitals, clinics, laboratories, and private healthcare practices with a broad portfolio of medical supplies and equipment. Their business model emphasizes rapid supply chain logistics and expert advisory services, positioning them as a trusted partner in the healthcare sector. The website reflects this professional positioning with clear product offerings and contact channels. Technically, the site is built on WordPress with the Divi theme and uses modern web technologies including Yoast SEO for optimization. The site is mobile responsive and well-structured, though some accessibility features could be enhanced. Security posture is solid with HTTPS and no exposed sensitive data, but the lack of configured reCAPTCHA and missing security headers present areas for improvement. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the domain's WHOIS data confirms legitimacy and long-term presence, supporting trust in the business. Strategic improvements in privacy compliance and security hardening would further strengthen the company's digital maturity and customer trust.

The IAU Meteor Data Center website serves as a scientific repository for meteor shower data and meteoroid orbital information under the auspices of the International Astronomical Union. It provides authoritative databases for researchers and amateur astronomers, facilitating access to published meteor shower discoveries and meteoroid orbit data. The site is informational and non-commercial, targeting the astronomy research community. Technically, the website employs a simple and stable technology stack including Bootstrap 3.4.1 and jQuery 3.5.1, hosted likely by a Slovak hosting provider. The site is functional with moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or complex backend is evident, reflecting a straightforward static or lightly dynamic site. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended to enhance security posture. No forms or user input reduce attack surface, but absence of privacy and cookie policies indicates compliance gaps. The WHOIS data shows a consistent domain registration with no privacy protection, appropriate for a scientific entity, though the domain age is recent compared to the long history of the service. Overall, the website is safe, trustworthy, and serves its niche well but would benefit from improved security headers, privacy compliance, and contact transparency to enhance trust and compliance.

S

Slovenská akadémia vied

sav.sk

49

Slovenská akadémia vied (SAV) is a leading Slovak government-affiliated scientific institution focused on basic and applied research, scientific infrastructure, and education. The website serves as a comprehensive portal for researchers, students, and the public, offering news, events, organizational structure, and access to scientific resources. The institution maintains a strong digital presence with official social media channels and provides transparent privacy and cookie policies compliant with GDPR. Technically, the website uses modern libraries such as jQuery and Tiny Slider, integrates Google Custom Search, and implements a cookie consent mechanism via Klaro. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy, professional, and serves its audience effectively.

E

Evidsoft s.r.o.

topenicerpadlem.cz

54

The website www.topenicerpadlem.cz represents Evidsoft s.r.o., a small Czech company specializing in the sale, installation, servicing, and general repairs of heat pumps from leading brands such as Hitachi, Daikin, LG, and Panasonic. The company targets both residential and commercial customers primarily in the Moravia region. The site is well-structured, professionally designed, and provides detailed product information, pricing, and contact details, supporting a strong regional market position. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Fonts, and Google reCAPTCHA v3, ensuring a responsive and secure user experience. The site uses HTTPS exclusively and integrates Google Analytics for traffic monitoring. However, some security headers are missing, and there is no explicit security policy or incident response information published. From a security perspective, the site demonstrates good practices such as encrypted connections and bot protection but lacks comprehensive security headers and incident response contacts. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness. No vulnerabilities or malicious content were detected. Overall, the website is a credible and professional digital presence for a regional energy equipment provider, with moderate technical maturity and a solid security posture. Strategic improvements in security policy transparency and WHOIS data availability would enhance trust and compliance.

MAYBE STYLE s. r. o. is a Czech-based company specializing in the design and realization of professional LED lighting solutions for various interior types including commercial units, offices, industrial spaces, schools, and residential buildings. The company collaborates with investors, architects, project designers, and developers, leveraging high-quality European lighting products. Their website reflects a professional presence with clear business information, product catalogs, and contact options, targeting primarily B2B customers in the Czech market. The company claims over 20 years of experience and a substantial portfolio of completed projects and delivered luminaires. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, Select2, and Facebook SDK for social integration. The site is mobile optimized and SEO friendly with proper meta tags and structured navigation. However, no CMS or hosting provider details are evident, and some security best practices such as security headers are missing. The cookie consent mechanism is implemented, but no dedicated privacy or security policy pages were found. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries visibly. The WHOIS data is privacy protected, which is common for small businesses, but limits verification of domain age and registrant details. No WAF or blocking mechanisms are detected, and no critical vulnerabilities or compliance gaps are apparent from the content. The site lacks explicit incident response or vulnerability disclosure information. Overall, MAYBE STYLE presents a credible and professional business website with good technical implementation and moderate security posture. Strategic improvements include adding comprehensive privacy and security policies, implementing security headers, and enhancing transparency around data protection and incident response to strengthen trust and compliance.

E

Escapegame

escapegame.cz

53

Escapegame.cz is a Czech Republic-based small hospitality business specializing in modern escape room games across multiple cities including Ostrava, Olomouc, Bruntál, Frenštát pod Radhoštěm, and Opava. The company offers a variety of themed escape rooms targeting families, friends, and corporate clients, with online booking and gift voucher options enhancing customer engagement. The website is professionally designed with rich multimedia content, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site leverages modern JavaScript libraries, Google services for analytics and maps, and standard frameworks like Bootstrap, ensuring a responsive and interactive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS registration data is a notable concern but does not currently undermine the business credibility given the professional site and clear contact information. Overall, the site presents a trustworthy and user-friendly platform for escape room entertainment in the Czech market.

Conmetall spol. s r.o. is a Czech-based trading company specializing in hand tools, garden equipment, sanitary technology, and fastening materials, serving both B2B and retail customers. The company is part of the WÜRTH group since 1997, indicating a strong market position and access to extensive know-how. Their website presents a professional and consistent brand image with clear navigation and relevant content tailored to their target audience in the Czech Republic and broader European market. Technically, the website uses modern JavaScript libraries such as jQuery and Bootstrap, with a moderate performance profile and good mobile optimization. Security-wise, the site implements cookie consent mechanisms and GDPR compliance but lacks visible security headers and WHOIS data, which slightly reduces trust. Overall, the website is functional, professional, and compliant with privacy regulations, though improvements in security headers and domain registration transparency are recommended.

S

Slovo 21, z. s.

slovo21.cz

62

Slovo 21 is a Czech non-profit organization dedicated to promoting respect, solidarity, and equality, focusing on the inclusion of Roma people and immigrants. Operating since 1999, it offers educational, cultural, and advocacy services to support marginalized communities. The website reflects a mature digital presence with a clear mission, donation mechanisms, and active social media engagement. Technically, the site is built on Webflow with modern tracking and analytics tools, providing a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and incident response details are absent. Overall, the site is trustworthy and professionally maintained, though WHOIS privacy limits transparency on domain registration details.

L

Line Industries

lineindustries.com

10

Line Industries is a specialized digital agency based in London and Cardiff, focusing on bespoke website, app, and software development primarily for publishers, educators, arts organizations, and membership associations. The company positions itself as a trusted partner for both startups and established household names, offering tailored digital platforms that enhance audience engagement and operational workflows. Their market presence is reinforced by notable clients such as Penguin Random House and Pan Macmillan, indicating a strong foothold in the publishing and education sectors. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, and Vimeo for multimedia content. The site is well-optimized for performance and mobile responsiveness, with a comprehensive cookie consent mechanism demonstrating good privacy compliance. However, the absence of explicit security headers and published security policies suggests room for improvement in security maturity. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible incident response contacts or vulnerability disclosure mechanisms. The WHOIS data is notably absent, which raises concerns about domain registration transparency despite the professional appearance and business legitimacy of the website. This discrepancy impacts the overall trust score but does not negate the evident operational professionalism. Overall, Line Industries presents a high-quality, professional digital presence with strong business credibility and technical implementation. Strategic enhancements in security policy publication, WHOIS transparency, and security header implementation would further strengthen their security posture and trustworthiness.

BNP Paribas is a major international banking and financial services institution headquartered in France. The website analyzed is a subdomain (mediahub.bnpparibas) currently under maintenance, providing corporate and brand information in multiple languages. The business model focuses on banking and financial services with a strong market position. The site uses common web technologies such as jQuery and Bootstrap but lacks advanced CMS or frameworks. Security posture is moderate with domain registration locks but missing DNSSEC and visible HTTPS configuration. No privacy or cookie policies are present, and no contact information is provided on the maintenance page. Social media presence is strong with official accounts linked. Overall, the site is professional but currently limited in content due to maintenance.

I

ING

ing.com

76

ING is a large, established global financial institution of Dutch origin, providing a broad range of banking and financial services with a strong emphasis on sustainability and corporate governance. The website serves multiple audiences including customers, investors, and the general public, offering comprehensive information on corporate strategy, compliance, and sustainability initiatives. The digital infrastructure employs modern web technologies and analytics tools, supporting a professional and accessible user experience. Security posture is strong with HTTPS enforced and CSRF protections, though explicit security headers and incident response contacts could be improved. Overall, the website reflects a mature and credible financial services brand with a high level of professionalism and trustworthiness.

S

S.A. TROX Belgium/TROX Belgium N.V.

trox.be

70

S.A. TROX Belgium/TROX Belgium N.V. is a medium-sized manufacturing company specializing in air handling and ventilation products, serving primarily B2B clients in Belgium and connected globally through the TROX Group. Their website is professionally designed, multilingual, and provides comprehensive product and service information, including digital tools like the myTROX portal and TROX Academy for customer engagement and training. The technical infrastructure is modern, leveraging Scrivito CMS, jQuery, and Google reCAPTCHA for security and user experience. Security posture is strong with HTTPS, multiple security headers, and spam protection on forms. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. WHOIS data is restricted, which is typical for privacy reasons, but no suspicious patterns are detected. Overall, the website reflects a mature digital presence aligned with the company's business operations.

Ú

ÚHŠ Jánské koupele

uhs.cz

52

ÚHŠ Jánské koupele is an educational institution specializing in professional training for members of voluntary fire brigades (JSDH) in the Czech Republic. The organization offers a variety of courses, adaptation programs for schools, recreational stays, and international cooperation projects. Their website reflects a focused business model targeting fire safety education and community engagement, with clear contact information and a professional presentation. The institution appears to hold a medium-sized regional position within the education sector, serving primarily fire brigade members, schools, and youth groups. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various UI libraries to deliver a responsive and user-friendly experience. The site is mobile optimized and structured with SEO best practices, although accessibility features are basic. The absence of a CMS or hosting provider information limits deeper infrastructure insights. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal privacy or terms of service documentation, which are important for compliance and trust. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact details suggest legitimacy. No signs of malware, phishing, or adult content were found, indicating a safe environment for users. Overall, the website is professionally designed and functional, but improvements in privacy compliance, security headers, and domain transparency would enhance trust and security posture. Strategic recommendations include publishing privacy and terms policies, implementing security headers, and clarifying incident response procedures.