Security Directory

4

4toStay GmbH

chronuu.de

53

Chronuu is a German-based digital platform specializing in estate and legacy management, operated by 4toStay GmbH. The company offers a secure, user-friendly service that enables individuals to manage their digital and material estate, document their life story, and provide access to heirs in a compliant and encrypted environment. The platform is positioned as a niche provider in the German market, leveraging modern web technologies and mobile app availability to reach its target audience. Technically, the website is built on WordPress with a robust tech stack including Bootstrap, Slider Revolution, and Matomo analytics, hosted behind Cloudflare DNS services. Security posture is strong with HTTPS enforced, data stored in Germany, and no provider access to user data, complemented by GDPR-compliant privacy and cookie policies. No critical vulnerabilities or suspicious patterns were detected, and the site demonstrates good design, navigation, and content quality. Overall, Chronuu presents a trustworthy and professional digital service with room for improvement in security headers and incident response transparency.

M

Mensch Digital

mensch.rs

43

Mensch Digital is a Serbian-based digital agency specializing in web development, graphic design, 3D design, live streaming, multimedia production, and digital security services. Established in 2016, the company has built a solid market presence with clients across multiple continents and countries, emphasizing innovation, creativity, and quality in digital solutions. Their website reflects a professional and modern digital infrastructure built on WordPress with a strong focus on user experience and mobile optimization. Security posture is good with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, Mensch Digital demonstrates a credible and trustworthy business with a well-maintained online presence.

F

Flotation Energy

flotationenergy.com

69

Flotation Energy is a specialized global offshore wind developer focusing on pioneering floating wind projects in deep waters. The company aims to accelerate the transition to renewable energy by delivering large-scale offshore wind farms, with a strong track record in project development, consenting, construction, and operations. Their market position is that of a leader at the forefront of floating offshore wind technology, targeting international markets with a medium-sized organizational footprint. Technically, the website is built on WordPress with modern optimization tools such as NitroPack and uses Google Analytics for tracking. The site is well-structured, mobile-optimized, and performs well, reflecting a mature digital infrastructure. However, some security best practices like DNSSEC and security headers could be improved. From a security perspective, the site uses HTTPS with a secure domain registration status but lacks published security policies or incident response contacts. Cookie consent is implemented, indicating basic GDPR compliance, but privacy and terms of service pages are missing, which could be improved for better compliance and user trust. Overall, the website presents a professional and trustworthy image with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and improving transparency around incident response and data protection roles.

N

NUTRICIA

enteraledomicile.fr

63

The website 'Entérale à domicile' serves as an informational and support platform dedicated to patients undergoing enteral nutrition at home, their caregivers, and healthcare providers. It is affiliated with Nutricia, a recognized nutrition company, and provides educational content, practical advice, video testimonials, and specialized resources for children and polyhandicap patients. The site targets the French healthcare market and aims to facilitate better management of enteral nutrition in a home setting. Technically, the website is built on WordPress, utilizing modern libraries such as jQuery, Google Tag Manager, Google Analytics, and reCAPTCHA for security and analytics. The site is mobile-optimized with good SEO practices and structured data for enhanced search engine visibility. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional and trustworthy digital presence with a strong focus on patient education and support. The absence of WHOIS data limits domain registration insights, but the affiliation with Nutricia and the quality of content support a high legitimacy score. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the site's security posture and user trust.

C

CSC crewing

csc-crewing.com

53

CSC Crewing is a well-established certified manning agency specializing in crew management, recruitment, and payroll services for the energy, maritime, and project staffing sectors. With over 27 years of history in maritime manning and a membership in the Oceanwide group, the company holds a strong market position in the Netherlands and internationally. Their website reflects a professional and business-focused approach, targeting companies requiring qualified personnel for offshore and onshore operations. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Yoast SEO, ensuring good SEO and user experience. The site is mobile-optimized, fast-loading, and integrates Google Tag Manager and Google reCAPTCHA for analytics and security. However, some security best practices like DNSSEC and security headers are missing, and there is no visible cookie consent mechanism. The security posture is solid with HTTPS enforced and form protections in place, but improvements are recommended in DNS security and HTTP headers. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration without privacy protection, which supports transparency. Overall, CSC Crewing presents a trustworthy and professional online presence with moderate to high digital maturity. Strategic enhancements in privacy compliance and security headers would further strengthen their posture and compliance with evolving regulations.

M

Møllerodden AS

mollerodden.no

56

Møllerodden AS is a well-established Norwegian company specializing in quality lifting equipment for onshore and offshore applications. Founded in 1960, the company offers a broad range of products including blocks, sheaves, hooks, and swivels, with a focus on custom solutions and certified load testing. Their market position is strong within the energy and transportation sectors, supported by recognized certifications such as Achilles and DNVGL. The website reflects a professional business with clear contact information and product offerings, targeting industrial clients globally. Technically, the website is built on WordPress with WooCommerce, utilizing modern plugins like WPBakery Page Builder and Slider Revolution. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and formal security policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies or consent mechanisms, which could pose regulatory risks especially under GDPR. The absence of a vulnerability disclosure policy and incident response contacts also limits transparency and security readiness. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security governance. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing a vulnerability disclosure policy, and improving accessibility and SEO. These steps will strengthen compliance, security posture, and user trust.

Jítravský Dvorec is a Czech hospitality business offering a wide range of services including apartment-hotel accommodation, wellness, restaurant and pub dining, equestrian facilities, conference rooms, and a bakery. The company targets tourists, families, corporate clients, and wellness seekers, positioning itself as a regional provider of comprehensive leisure and event services. The website is built on WordPress with modern plugins and technologies, featuring good design, mobile optimization, and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data limits full trust assessment of the domain registration, but the website content and contact information indicate a legitimate business. Strategic recommendations include improving security headers, adding vulnerability disclosure mechanisms, and enhancing accessibility compliance.

M

Montenegro Chess Federation and the European Chess Union

eycc25.me

46

The European Youth Chess Championship 2025 website serves as the official online presence for a major youth chess event organized by the Montenegro Chess Federation and the European Chess Union. It provides comprehensive event details including registration, official information, venue, accommodation, travel, rules, prizes, and contact pages. The site targets youth chess players and national federations across Europe, positioning itself as a key resource for participants and stakeholders. Technically, the site is built on WordPress with popular plugins like Slider Revolution and WPBakery Page Builder, delivering a modern and responsive user experience with good SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic with a privacy policy and cookie consent banner present, but lacks detailed GDPR compliance indicators or terms of service. Overall, the site is professional, trustworthy, and well-aligned with its event purpose, though it could benefit from enhanced security and compliance transparency.

E

European Chess Union

eccc2025.com

43

The European Chess Club Cup 2025 website serves as the official information portal for the 40th European Chess Club Cup and the 29th European Women’s Chess Club Cup, scheduled in Rhodes, Greece. It targets European chess federations, clubs, players, and enthusiasts by providing event details, prize fund information, live results, news, and media content. The site is affiliated with the European Chess Union and uses official branding and external links to ECU resources, reinforcing its legitimacy and market position within the chess sports event domain. Technically, the site is built on WordPress with common plugins and libraries, including WPBakery Page Builder and Google Analytics, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. The domain WHOIS data shows an unusual future creation date, which slightly undermines trust but does not negate the site's apparent legitimacy. Overall, the website is professional, functional, and trustworthy for its purpose but would benefit from enhanced privacy and security disclosures.

V

VWI Verband Deutscher Wirtschaftsingenieure e.V.

vwi.org

48

The VWI Verband Deutscher Wirtschaftsingenieure e.V. is a well-established professional association representing Wirtschaftsingenieure (industrial engineers) in the German-speaking region. With over 6,000 members, 20 regional groups, and 40 university groups, the association focuses on personal networking, quality education, and political advocacy for its members. The website serves as an information hub for members and interested parties, presenting a professional and consistent brand image. Technically, the website is built on WordPress, utilizing popular plugins such as LayerSlider and WPBakery Page Builder. It employs Matomo for analytics and Cookiebot for cookie consent management, reflecting a moderate level of digital maturity and compliance with privacy regulations. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent with granular user controls. However, it lacks DNSSEC and security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain registration consistent with the association's history, enhancing trustworthiness. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers, explicit privacy and security policies, and clearer contact information would further strengthen its posture.

H

Hvozdnice

hvozdnice.eu

42

Hvozdnice.eu is the official municipal website for the village of Hvozdnice in the Czech Republic. It serves as a community portal providing news updates, official documents, contact information, and public service announcements relevant to residents and visitors. The website is positioned as a local government informational resource with a focus on transparency and community engagement. The content is primarily in Czech and includes sections on urban planning, local governance, cultural events, and infrastructure projects. Technically, the site is built on WordPress with common plugins such as Yoast SEO and WPBakery Page Builder, indicating a moderate level of digital maturity. The site is mobile responsive and optimized for search engines, though accessibility features are basic. Security posture is good with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response information. Overall, the website is trustworthy and professionally maintained, suitable for its purpose as a municipal information portal.

W

WVRC Digital

wvrcdigital.com

51

WVRC Digital is a small digital marketing agency founded in 2021 and operating as a subsidiary of WVRC Media Company. The company specializes in a broad range of digital marketing services including consumer targeting, website development, video advertising, social media management, email marketing, SEO, pay per click, OTT media, and website chat solutions. Their target audience consists primarily of businesses seeking to establish or grow their digital presence. The website is professionally designed, consistent in branding, and provides clear service descriptions and client testimonials, positioning WVRC Digital as a credible regional player in the digital marketing sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted on A2 Hosting. It employs modern web technologies including Google Fonts, Font Awesome, Vimeo embeds, and Google Maps API. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. Cookie consent is implemented via CookieYes, and Google Analytics is used for user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain status clientTransferProhibited to prevent unauthorized domain transfers. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content, representing areas for improvement. No privacy policy or terms of service pages were found, which are important for compliance and user trust. Tracking pixels from ZoomInfo and Pearl Diver indicate moderate user tracking. Overall, WVRC Digital presents a professional and credible digital marketing service with a solid technical foundation but requires enhancements in privacy compliance and security best practices to strengthen its security posture and regulatory adherence.

D

Dobráci s.r.o.

dobraci.sk

60

Dobráci s.r.o. is a specialized Slovak company focused on distributing firefighting vehicles and equipment primarily for volunteer firefighters in Slovakia and Czechia. The company offers comprehensive services including vehicle sales, customization, equipment installation, training, and after-sales support. Their market position is niche but well-established with over 16 years of experience. The website serves both informational and e-commerce purposes, targeting firefighting units and related organizations. Technically, the site is built on WordPress with a modern tech stack including WPBakery, Slider Revolution, and various UI libraries. Performance and mobile optimization are adequate, though accessibility is basic. Security posture is moderate with HTTPS enabled but lacking some important security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented with phone numbers and active social media channels, enhancing business credibility. Overall, the site is professional and trustworthy but could improve in privacy and security compliance.

S

Soltau Therme

soltau-therme-online.de

69

Soltau Therme is a German regional wellness and leisure center offering a variety of services including sole baths, sauna, wellness treatments, swimming pools, and children's activities. The website reflects a well-structured and professionally maintained WordPress platform with modern plugins such as Yoast SEO, Events Manager, and Captcha EU, indicating a good level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content for its target audience. Security posture is solid with HTTPS enforced and captcha protection on forms, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Business credibility is supported by clear contact information and social media presence. Overall, the website is trustworthy and suitable for its hospitality sector audience.

E

EGroupware

egroupware.org

64

EGroupware is a German-based software company specializing in online collaboration and groupware solutions. Their offerings include a comprehensive suite of business applications such as calendar, contacts, tasks, project management, timesheets, and e-invoicing. The company targets businesses and organizations seeking efficient collaboration tools, providing both SaaS and on-premises deployment options. The website reflects a mature market position with a focus on privacy and German hosting standards. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile responsiveness, and SEO optimization. The use of Borlabs Cookie for consent management and WPML for multilingual support indicates a commitment to privacy and international reach. The site employs HTTPS with strong security headers, contributing to a robust security posture. Security-wise, while the site demonstrates good practices such as HTTPS enforcement and cookie consent, it lacks a publicly visible security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is privacy protected, which is typical for this business type and does not detract from legitimacy. Overall, EGroupware presents a professional, trustworthy, and secure online presence suitable for its business model. Strategic improvements could include publishing a dedicated security policy and incident response contacts to enhance transparency and trust.

L

Lukáš Pavelec

lukaspavelec.cz

52

Lukáš Pavelec is a seasoned web designer and UX specialist based in the Czech Republic, offering professional web design and user experience services with over 14 years of experience and a portfolio exceeding 250 projects. The website showcases a well-structured, visually appealing, and mobile-optimized WordPress-based platform, leveraging popular plugins such as Yoast SEO, Contact Form 7, and Google Analytics for enhanced functionality and tracking. Security measures include HTTPS enforcement and Google reCAPTCHA integration on the contact form, although explicit security headers and privacy policies are absent, indicating areas for improvement. Overall, the site presents a credible and professional business presence with clear contact information and a strong portfolio, but lacks formal privacy and cookie compliance documentation.

A

Arcibiskupství olomoucké

ado.cz

56

Arcibiskupství olomoucké is the official website of the Olomouc archdiocese, a religious non-profit organization serving the Catholic community in the Czech Republic. The site provides comprehensive information about the archdiocese's structure, events, pastoral activities, and spiritual resources. It targets parishioners, clergy, and the general public interested in the church's activities in the region. The website is well-branded, consistent, and offers clear navigation and relevant content.

The website www.loretarumburk.cz serves as the official online presence for the Loreto Chapel in Rumburk, a significant Baroque cultural and religious site in northern Bohemia, Czech Republic. It provides detailed information about the chapel's history, visitor services including tours, exhibitions, and religious ceremonies, targeting families, tourists, and pilgrims. The site is managed by the Roman Catholic Parish Rumburk and offers multilingual content to accommodate international visitors. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Slider Revolution and WPBakery Page Builder. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. The site demonstrates moderate performance and good mobile optimization but lacks advanced security headers and privacy compliance mechanisms. From a security perspective, the site has a good baseline with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, it lacks privacy and cookie policies, which are critical for GDPR compliance. There is no evidence of an incident response policy or vulnerability disclosure mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is a trustworthy and professional cultural heritage portal with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

A

Arcidiecézní centrum pro rodinný život

rodinnyzivot.cz

52

Arcidiecézní centrum pro rodinný život is a Czech non-profit organization affiliated with the Olomouc Archdiocese, focused on supporting family life through education, spiritual renewal, counseling, and community events. Established in 2002, it serves a broad audience including families, couples, singles, and seniors. The website reflects a mature digital presence with regular content updates, event calendars, and educational resources. Technically, the site is built on WordPress with common plugins for SEO, forms, and event management, hosted by a Czech hosting provider. The site is mobile optimized and uses structured data for SEO enhancement. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response policies are missing. Privacy compliance is partially met with a GDPR policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, serving its community effectively.

S

Salesiánská asociace Dona Boska, z.s.

dnesjimjako.cz

43

The website www.dnesjimjako.cz represents an educational project run by Salesiánská asociace Dona Boska, z.s., focused on providing engaging learning materials about life and cooking in various foreign countries for Czech primary and secondary school students. The project offers worksheets, recipes, photos, videos, and dedicated web content for each featured country. It operates as a non-profit initiative with funding partially from donations and registration fees from participating schools. The site is well-branded and targets educators and students with a clear mission to raise global awareness and responsibility. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, Slider Revolution, and Contact Form 7. It employs Google Analytics for visitor tracking and implements a cookie consent banner, indicating some level of privacy compliance. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with a presumably strong SSL configuration. However, it lacks important security headers and does not provide a privacy policy or terms of service pages, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is available. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective, though the website content and partner affiliations suggest legitimacy. Overall, the website is a credible educational resource with good content and technical implementation but requires improvements in privacy documentation, security headers, and domain registration transparency to enhance trust and compliance.

S

Salesiánská asociace Dona Boska

adopcenablizko.cz

42

The website adopcenablizko.cz represents a Czech non-profit organization focused on preparing and sending volunteers to assist vulnerable communities worldwide. The organization operates under the Salesiánská asociace Dona Boska umbrella, providing humanitarian aid through volunteer engagement. The site features volunteer letters, photo galleries, and donation options, targeting potential volunteers and donors. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, ensuring a professional and responsive user experience. Security posture is adequate with HTTPS and cookie consent implemented, though explicit privacy and security policies are missing. The absence of WHOIS data slightly reduces domain trust but does not detract significantly from the site's legitimacy. Overall, the site is well-positioned within its niche, offering clear calls to action and engaging content.

Z

ZMK Kassel

zmk-kassel.com

57

ZMK Kassel is a modern dental practice located in Kassel, Germany, offering a wide range of dental services including implantology, prophylaxis, endodontics, and aesthetic dentistry. The website presents a professional image with detailed service descriptions and emphasizes prevention and high-quality care. The business targets patients in the Kassel region and operates multiple specialized departments with over 40 years of combined experience. Technically, the website is built on WordPress using WPBakery Page Builder, hosted by Hetzner Online GmbH, and employs modern web technologies including HTTPS and Google Fonts. The site is mobile optimized and SEO friendly with structured data implemented. Security posture is good with HTTPS and cookie consent mechanisms in place, though some security headers and DNSSEC are missing. Privacy compliance is partial due to the absence of a visible privacy policy page. Overall, the website is trustworthy and professional, with minor improvements recommended in privacy and security disclosures.

K

Karl-May-Spiele Bad Segeberg

karl-may-spiele.de

52

Karl-May-Spiele Bad Segeberg is a well-established cultural event organizer specializing in live outdoor theater performances based on Karl May's works. The website serves as a comprehensive platform for ticket sales, fan merchandise, and visitor information, targeting families and fans of western-themed entertainment. The business has a strong market position in Germany with a history dating back to 1952. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by Yoast SEO and Borlabs Cookie for privacy compliance. The site demonstrates good digital maturity with modern technologies, responsive design, and SEO optimization, although some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not present, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a safe and user-friendly experience. Strategic recommendations include adding security headers, publishing a security policy, and enhancing accessibility features to further strengthen the security posture and user trust.

U

Univention GmbH

univention-summit.de

52

Univention GmbH organizes the Univention Summit, a prominent open source event in Germany focused on digital sovereignty, IT trends, and community networking. The summit attracts IT service providers, software manufacturers, public sector officials, and educators from Germany and Europe. The website presents a professional, well-branded platform with detailed information about the event, speakers, partners, and registration. Technically, the site is built on WordPress with modern plugins and uses Matomo for privacy-conscious analytics. Security posture is good with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy and cookie policies are clearly stated with consent mechanisms, indicating GDPR compliance. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

S

Salesiánská asociace Dona Boska

sadba.org

44

Salesiánská asociace Dona Boska (SADBA) is a Czech non-profit organization dedicated to supporting disadvantaged children and youth worldwide through volunteer missions and educational initiatives. The organization focuses on training and sending volunteers abroad, supporting salesian missions, and fostering development cooperation. Their website reflects a professional and well-structured digital presence, targeting volunteers, donors, and supporters primarily in the Czech Republic. The site offers detailed project descriptions, news updates, and partner affiliations, reinforcing its credibility in the non-profit sector. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution. It employs Google Analytics and Google Tag Manager for tracking and analytics, and includes a cookie consent mechanism compliant with EU regulations. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Security-wise, HTTPS is enforced, and reCAPTCHA is used for form protection; however, additional security headers are recommended to enhance protection. The security posture is solid but could benefit from implementing more comprehensive HTTP security headers and regular plugin updates to mitigate vulnerabilities. The absence of a visible privacy policy and terms of service pages is a compliance gap that should be addressed to meet GDPR and other privacy regulations fully. WHOIS data is unavailable due to a malformed response, which slightly reduces trustworthiness, but the website content and partner endorsements support legitimacy. Overall, SADBA presents a trustworthy and professional online presence suitable for its non-profit mission. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and conducting periodic security audits to maintain a robust security posture.

E

ETOA - European Tourism Association

etoa.org

59

ETOA is a well-established European tourism trade association focused on enhancing tourism business opportunities across Europe. It serves a diverse membership base including tourism suppliers, destinations, buyers, and tour guides. The organization offers a range of services such as membership benefits, industry events, advocacy, and sustainability resources, positioning itself as a key player in the European tourism sector. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its B2B audience. Technically, the site is built on WordPress with modern plugins and tracking technologies, ensuring good SEO and user experience across devices. Security posture is strong with HTTPS, security headers, and secure login mechanisms, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. Overall, the website and business present a credible and trustworthy profile with no critical security or content safety concerns.

A

All Traffic Solutions

alltrafficsolutions.com

68

All Traffic Solutions is a specialized provider of traffic management solutions, focusing on portable radar speed signs, variable message signs, and cloud-based traffic data management software. The company positions itself as a leading provider in the transportation sector, serving a diverse audience including public institutions, municipalities, law enforcement, and private entities. Their products emphasize durability, remote management, and data collection capabilities, supported by a strong warranty and made in the USA branding. Technically, the website is built on WordPress with a modern tech stack including LayerSlider, Yoast SEO, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and professional but would benefit from improved transparency and security documentation.

O

Olomoucká Jízdárna s.r.o.

olomouckajizdarna.cz

37

Olomoucká Jízdárna s.r.o. operates a restaurant and event venue located in Olomouc, Czech Republic, specializing in Czech and international cuisine with a focus on quality ingredients and fresh food. The business targets local residents and event organizers, offering services such as dining, birthday celebrations, weddings, and corporate parties. The website is built on WordPress with modern plugins like LayerSlider and Slider Revolution, hosted likely by Webglobe. The site is well-designed, mobile-optimized, and provides clear contact information and social media links, supporting moderate trustworthiness. However, it lacks privacy and cookie policies, which impacts GDPR compliance and privacy posture.

L

LIV by Neher

livbyneher.de

52

LIV by Neher operates an e-commerce website focused on selling humane insect catchers and complementary home products such as candles, candle holders, flower seeds, and vases. The website targets consumers interested in gentle and environmentally friendly insect removal solutions, primarily in Germany and the EU. The business model is retail e-commerce with a niche market positioning emphasizing humane treatment of insects and stylish home decor. The site is professionally designed with consistent branding and good content quality, including product descriptions and customer ratings.

F

Fondazione Toscana Life Sciences

toscanalifesciences.org

45

Fondazione Toscana Life Sciences is a well-established non-profit research foundation based in Siena, Italy, focused on advancing life sciences and healthcare innovation. The organization operates as a research entity, business incubator, and ecosystem facilitator, supporting biotechnology startups and scientific research groups. Their website reflects a professional and comprehensive digital presence, with clear navigation, multilingual support, and rich content about their activities and services. The foundation maintains active social media channels and provides detailed privacy and cookie policies, demonstrating compliance with GDPR and user privacy standards. Technically, the site is built on WordPress with modern plugins and technologies, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent management, though some security headers could be improved. The WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the website presents a trustworthy and credible digital front for the foundation.

U

Univention GmbH

univention-summit.com

56

Univention GmbH organizes the Univention Summit, a prominent open source event focused on digital sovereignty in government, education, and business sectors. The summit attracts IT service providers, software vendors, and users primarily from Germany and Europe, offering keynotes, panels, workshops, and an exhibition with numerous IT partners. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and uses Matomo analytics with user consent, indicating a good level of digital maturity. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. The absence of WHOIS data is a notable anomaly but does not detract from the overall professionalism and trustworthiness of the site. Strategic recommendations include publishing security and incident response policies and verifying domain registration status.

U

Univention GmbH

univention.de

57

Univention GmbH is a well-established German technology company specializing in open source Identity and Access Management (IAM) solutions, primarily targeting the education sector and public administration. With over 20 years of experience and managing 35 million identities, the company offers scalable, secure, and integrated IAM products such as Nubus, UCS@school, and UCS. Their business model focuses on providing software solutions, support, training, and integration services to organizations seeking digital sovereignty and efficient IT management. The website reflects a mature market position with strong trust signals and a professional presentation. Technically, the website is built on WordPress with modern plugins and tools including WPBakery Page Builder, Gravity Forms, and Matomo for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive metadata and structured data enhancing discoverability. Privacy compliance is robust, featuring a cookie consent mechanism and a detailed privacy policy. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response page and does not provide a vulnerability disclosure or security.txt file. These gaps represent opportunities for improvement in transparency and readiness. Overall, the security posture is strong with no evident vulnerabilities or risks. The domain WHOIS data aligns well with the company's profile, showing consistent registration details and domain age appropriate for the business history. No privacy protection is used in WHOIS, which supports transparency. The website is fully accessible without WAF or blocking mechanisms, enabling thorough analysis. Strategic recommendations include publishing explicit security and incident response policies, establishing a vulnerability disclosure process, and providing data protection officer contact details to enhance compliance and trust. These steps will strengthen the company's security culture and customer confidence while maintaining its leadership in open source IAM solutions.

G

GAINDE 2000

gainde2000.com

51

GAINDE 2000 is a Senegal-based technology company specializing in comprehensive digital transformation solutions for enterprises and public administrations across Africa. The company positions itself as a pioneer in African digital solutions, offering services such as sector expertise, partnerships, and international presence. Their website reflects a professional and consistent brand image with clear service offerings and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some security headers and formal privacy/cookie policies. WHOIS data is missing, which raises concerns about domain registration legitimacy, though the website content and social presence suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security practices.

D

Dolák s.r.o.

toyotadolak.cz

44

Toyota Dolák is a large, authorized Toyota dealership and service provider operating in the Czech Republic. It holds the position as the largest Toyota sales and service partner in the country, offering a comprehensive range of services including new and used vehicle sales, vehicle buyback, leasing, rental, and authorized servicing. The company operates multiple branches across key Czech cities, enhancing accessibility and customer reach. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to consumers and businesses interested in Toyota vehicles and related services. From a technical perspective, the website is built on WordPress with a modern technology stack including jQuery, Google Tag Manager, and various UI libraries. It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a mature approach to privacy and regulatory compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a security.txt file suggests room for improvement in security best practices. The lack of WHOIS data reduces domain trustworthiness somewhat, but the professional presentation and detailed business information mitigate concerns. Overall, Toyota Dolák presents a trustworthy and professional online presence with strong business credibility and good technical implementation. Strategic improvements in security policies and domain transparency would further enhance trust and compliance.

B

Belle Main

bellemain.org

54

Belle Main is a French non-profit foundation dedicated to the conservation of movable heritage and the preservation of artisanal craftsmanship. Founded in 2015 and affiliated with the Fondation du patrimoine, it provides financial support for restoration projects and artisan training. The website presents a professional and consistent brand image, targeting proprietors of antique furniture and artisans. Technically, the site is built on WordPress with a moderate performance profile, employing common plugins for SEO, forms, and cookie compliance. Security posture is adequate with HTTPS enforced and reCAPTCHA on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy and well-maintained, with no critical security or content safety issues detected.

G

Groupe Télégramme

groupe-telegramme.com

10

Groupe Télégramme is a French media and services group engaged in three main sectors: Media & Communication, Employment, Recruitment & Training, and Sports & Culture. The website presents a professional image with clear branding and structured content targeting a general audience interested in these sectors. The business model focuses on providing media content, recruitment services, and cultural/sports event organization, positioning itself as a regional leader in these areas. Technically, the website is built on WordPress, leveraging modern plugins such as Slider Revolution and WPBakery Page Builder, and integrates analytics tools like Piano Analytics and Google Tag Manager. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, indicating a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and includes standard security headers, but lacks publicly available security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected, suggesting a moderate security posture. Overall, the website is trustworthy and professionally maintained, with room for improvement in privacy transparency and security documentation. Strategic recommendations include publishing clear privacy and security policies, establishing incident response contacts, and implementing a vulnerability disclosure policy to enhance trust and compliance.

U

Univention GmbH

univention.com

59

Univention GmbH is a German-based company specializing in open source Identity and Access Management (IAM) solutions primarily targeting the education sector and public administration. With over 20 years of experience and managing 35 million identities, Univention offers scalable, secure, and user-friendly IAM products such as Nubus, UCS@school, and UCS. Their business model focuses on providing software solutions, integration packages, and support services to organizations seeking digital sovereignty and efficient IT management. The company maintains a strong market position with a medium-sized footprint and a clear focus on open source transparency and reliability. Technically, the website is built on WordPress CMS with modern plugins like WPBakery Page Builder, Matomo Analytics for privacy-respecting tracking, and Borlabs Cookie for consent management. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security best practices are observed with HTTPS enforcement, security headers, and no visible vulnerabilities. However, explicit security policies and incident response information are not publicly disclosed. The security posture is strong with good SSL configuration and privacy compliance, including GDPR-aligned privacy and cookie policies. Contact information is available via phone and contact forms, enhancing business credibility. The absence of WHOIS data for the domain reduces trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and consistent branding. Overall, Univention GmbH presents a trustworthy and professional online presence with a focus on secure, open source IAM solutions for institutional clients. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure mechanisms to further enhance trust and compliance.

N

Notre aluminium

notrealuminium.ca

58

Notre aluminium is a Quebec-based industry platform promoting the region's aluminium sector, emphasizing its low-carbon footprint and critical role in North America's energy transition. The website positions Quebec as a global leader in aluminium production, highlighting historical milestones and industry achievements. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good SEO and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and contact details. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

A

Apiherbal Ltd.

apiherbal.com

52

Apiherbal Ltd. is a Croatian company specializing in the development, certification, registration, distribution, and marketing of natural herbal-based medical devices and cosmetic products. The company holds a CE ISO 13485 certification, indicating compliance with medical device quality management standards. Their product portfolio targets uro-genital diseases, chronic wounds, inflammatory skin diseases, and menopausal issues, positioning them as a niche player in the healthcare sector focused on natural remedies. The website is professionally designed, mobile-optimized, and provides comprehensive contact information and legal policies, supporting a trustworthy online presence. Technically, the website runs on WordPress with popular plugins such as WPBakery Page Builder and Slider Revolution. It integrates Google Analytics and Google reCAPTCHA for analytics and security, respectively. The site uses HTTPS with a good SSL configuration but lacks some security headers and DNSSEC, which are recommended for enhanced security. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CAPTCHA protection on forms, and cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The WHOIS data is transparent and consistent with the business profile, enhancing trustworthiness. No critical vulnerabilities or suspicious content were detected. Overall, Apiherbal Ltd. presents a credible and professional online presence with a solid foundation in security and privacy compliance. Strategic improvements in security headers, DNSSEC, and explicit security policies would further strengthen their posture and trust with customers and partners.

Nabium, d. o. o., is a Slovenian small business specializing in consulting, education, fairy tale production, marketing services, and creative writing. The company positions itself as a provider of strategic, innovative, and cost-effective marketing and communication solutions tailored to client needs. The website reflects a professional and consistent brand image with clear contact information and a focus on client service. Technically, the site is built on WordPress using WPBakery Page Builder and standard web technologies, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security transparency.

I

IRDO – Inštitut za razvoj družbene odgovornosti

irdo.si

38

IRDO – Inštitut za razvoj družbene odgovornosti is a Slovenian non-profit institute dedicated to promoting social responsibility and sustainable development. The organization offers a range of services including conferences, training, consultation, awards, research, and publishing. It holds a national partnership with CSR Europe, positioning itself as a key player in the social responsibility sector within Slovenia and the broader EU region. The website targets managers and professionals interested in integrating social responsibility into their organizations. Technically, the website is built on WordPress with modern plugins and libraries such as WPBakery Page Builder and Ultimate VC Addons, providing a good user experience with mobile optimization and clear navigation. However, there is room for improvement in accessibility and SEO features.

T

Türkische Gemeinde Deutschland

tgd.de

65

Türkische Gemeinde Deutschland (TGD) is a German non-profit umbrella organization representing the interests of people with Turkish migration backgrounds. The website provides comprehensive information about their projects, member associations, and societal topics such as participation, equality, and diversity. The organization targets migrants and stakeholders interested in integration and social inclusion. Technically, the website is built on WordPress using WPBakery Page Builder and several plugins, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers are not explicitly detected. Privacy compliance is strong with detailed GDPR-compliant policies and consent management. Overall, the site is professional, trustworthy, and well-structured, supporting the organization's mission effectively.

I

IRDO – Institute for the Development of Social Responsibility

horus.si

41

The website www.horus.si represents the Slovenian Award for Social Responsibility HORUS, managed by IRDO, a non-profit institute focused on promoting social responsibility and sustainable development. The site serves as an information hub for award calls, laureates, workshops, and news updates, targeting organizations and individuals interested in social responsibility within Slovenia. The business model is non-profit, centered on recognition and promotion rather than commercial sales. The domain age and content history support a credible and established presence in this niche. Technically, the site is built on WordPress with popular plugins like Slider Revolution and WPBakery Page Builder, ensuring a modern and responsive design. The site loads moderately fast and is mobile-optimized, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with a good SSL configuration. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No vulnerabilities or malicious content were detected, and contact information is clearly provided, enhancing credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security hardening. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure policy to enhance user trust and regulatory compliance.

S

Swiss Athletics

swiss-athletics.ch

57

Swiss Athletics is the official national federation for athletics in Switzerland, focusing on promoting elite sports, youth development, and broad participation. The organization operates a comprehensive website offering event registration, licensing, athlete support, coaching education, and competition results. The site targets athletes, coaches, officials, and athletics enthusiasts within Switzerland. Technically, the website is built on WordPress with modern plugins and integrates Google advertising and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are lacking. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use, supporting the federation's mission effectively.

W

Wirtschaftskammer Liechtenstein

wirtschaftskammer.li

56

Wirtschaftskammer Liechtenstein serves as the official chamber of commerce for Liechtenstein, providing advocacy, support, and services to local businesses and entrepreneurs. The organization holds a strong market position as the primary business representative body in the country, focusing on business development, training, and member services. The website reflects a professional and consistent brand image targeting business stakeholders within Liechtenstein. Technically, the website is built on WordPress with a modern technology stack including Bootstrap, FontAwesome, and privacy-focused Matomo analytics. The site demonstrates good mobile optimization and moderate performance, with standard SEO and accessibility features. Security posture is solid with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the security posture is mature with no critical vulnerabilities detected. Privacy compliance is strong, with comprehensive GDPR-aligned privacy and cookie policies and a consent mechanism in place. Contact information is transparent and complete, enhancing trustworthiness. The site is free from adult or questionable content, making it safe for general audiences. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure mechanisms, enhancing accessibility, and maintaining up-to-date software to mitigate risks. These steps will further strengthen the organization's digital trust and security culture.

D

Designsensor AG

designsensor.ch

52

Designsensor AG is a Swiss-based creative studio specializing in brand experience design, strategic design, and digital product design. The company positions itself as a strategic partner for businesses seeking to enhance their brand presence and customer engagement through human-centered and innovative design solutions. Their market position is that of a specialized boutique agency with a focus on measurable business impact through design. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and WPBakery Page Builder, incorporating Google Analytics and reCAPTCHA for analytics and security respectively. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features could be improved. Security posture is solid with HTTPS and reCAPTCHA usage, but lacks explicit security headers and documented security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies, which is a notable gap. Overall, the website is professional, trustworthy, and well-structured, but could benefit from enhanced privacy and security disclosures.

A

ADAC Stiftung

verkehrshelden.com

65

The ADAC Stiftung website focuses on mobility education and traffic safety, targeting children, families, and educators. It offers various educational programs and materials to promote safe behavior in traffic. The foundation is well-established in Germany, supported by regional ADAC clubs, and maintains a professional online presence with clear branding and comprehensive content. Technically, the site is built on WordPress with modern plugins like WPBakery and Yoast SEO, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS and consent management, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

Welterbezentrum Gartenreich Dessau-Wörlitz gGmbH operates an official tourism information website dedicated to the UNESCO World Heritage site Gartenreich Dessau-Wörlitz in Germany. The site provides comprehensive visitor information including event details, accommodation, dining options, and interactive maps, targeting tourists interested in cultural heritage and natural beauty. The business model focuses on tourism promotion and visitor engagement within a small-sized regional context. Technically, the website is built on WordPress with a modern plugin ecosystem supporting multilingual content, event management, and e-commerce capabilities. The site is hosted on servers associated with Kasserver and uses HTTPS with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and uses some legacy JavaScript libraries. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. Contact information is clearly provided, including official emails and phone numbers, enhancing business credibility. Overall, the website is professional, trustworthy, and well-positioned for its niche, though improvements in security and privacy documentation are recommended.

F

FS-Medizintechnik GmbH

fs-medizintechnik.at

52

FS-Medizintechnik GmbH operates a specialized e-commerce platform focused on medical technology, emergency medicine, and care products primarily serving the Austrian healthcare and emergency services market. The company offers a broad portfolio targeting rescue services, hospitals, fire departments, doctors, and paramedics, positioning itself as a trusted supplier with a strong local presence since 2015. Their website reflects a professional and consistent brand image with comprehensive product listings and clear business information. Technically, the website is built on a modern WordPress CMS with WooCommerce for e-commerce functionality, enhanced by popular plugins such as WPBakery Page Builder and Slider Revolution. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site enforces HTTPS and employs GDPR-compliant cookie consent mechanisms, reflecting a solid privacy posture. However, there is an opportunity to strengthen security by adding missing HTTP security headers and formalizing incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, FS-Medizintechnik GmbH presents a low-risk profile with a well-maintained digital presence aligned with its business objectives. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and considering a dedicated security policy page to further build trust and compliance.