Security Directory

M

MikroTik

mt.lv

70

MikroTik is a well-established technology company specializing in networking hardware and software solutions, including routers, switches, and wireless systems. Founded in 1999 and headquartered in Latvia, MikroTik serves a global audience of network engineers, ISPs, and technology integrators. The company offers a comprehensive product catalog, RouterOS operating system, and extensive training and certification programs, positioning itself as a key player in the networking technology industry. Technically, the website employs a modern but stable technology stack including jQuery, Foundation 5, and Modernizr, with good mobile optimization and SEO practices. The site is hosted under a reputable registrar and shows moderate performance. However, some technical improvements could be made, such as enabling DNSSEC and adding security headers to enhance security posture. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. No incident response or vulnerability disclosure information is published, which could be improved to enhance trust and compliance. Overall, MikroTik's website is professional, content-rich, and trustworthy, reflecting the company's strong market position. Strategic improvements in security headers, privacy compliance, and incident response transparency would further strengthen the site’s security posture and regulatory compliance.

P

ProSoft Technology, Inc.

prosoft-technology.com

71

ProSoft Technology, Inc. is a specialized provider of industrial connectivity solutions, focusing on linking diverse automation products with major automation controllers such as Rockwell Automation and Schneider Electric. The company targets industrial automation professionals and enterprises requiring robust IIoT and connectivity solutions. Their product portfolio includes gateways, industrial wireless solutions, and software tailored for industrial automation environments. The website reflects a medium-sized technology business with consistent branding and a professional online presence. Technically, the website is built on the eZ Publish CMS platform and employs modern web technologies including Google Analytics, Google Tag Manager, OneTrust for cookie consent, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility compliance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of a visible privacy policy and terms of service reduces privacy compliance maturity. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the active and professional website. Overall, the website presents a trustworthy and professional front for ProSoft Technology, Inc., but improvements in privacy policy transparency, security header implementation, and WHOIS data clarity are recommended to enhance trust and compliance.

A

A.P. Møller Fonden

apmollerfonde.dk

70

A.P. Møller Fonden is a well-established Danish commercial foundation founded in 1953 by shipowner A.P. Møller. The foundation focuses on supporting projects in education, culture, and climate adaptation, providing significant grant funding to initiatives aligned with its charter. The website reflects a professional and reputable organization with clear branding and comprehensive content aimed at applicants and the general public interested in the foundation's activities. Technically, the site is built on WordPress with modern frameworks such as Bootstrap 5 and uses privacy-conscious analytics via Matomo. The cookie consent mechanism is robust, offering detailed categories and compliance with GDPR requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Overall, the site is trustworthy and professionally maintained, though the absence of WHOIS data reduces domain registration transparency.

STUDIOS MENTHE&CHOCOLAT is a creative media studio established in 2002, specializing in producing and showcasing creative projects primarily for clients in transportation, energy, government, and cultural sectors. The website presents a portfolio of diverse projects, reflecting a niche market position with a focus on quality creative services. The business targets organizations seeking specialized creative media production and project presentation. Technically, the website uses a standard modern stack including Bootstrap, jQuery, and Font Awesome, with moderate performance and good mobile optimization. However, it lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but no security headers or DNSSEC, and the contact form lacks advanced bot protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

N

NuernbergMesse India Pvt Ltd

indiawood.com

50

INDIAWOOD is a well-established international trade fair focused on woodworking and furniture manufacturing technologies, organized by NuernbergMesse India Pvt Ltd. The website reflects a mature business with a strong market position in Asia, targeting industry professionals and exhibitors. The technical infrastructure is based on ASP.NET WebForms with modern frontend libraries and is hosted behind Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS and security headers, though improvements can be made by enabling DNSSEC and adding visible cookie consent mechanisms. Contact information and social media presence are clear, supporting business credibility. Overall, the site is professional, content-rich, and trustworthy.

ا

الاتحاد الدولي للصحفيين

ifj-arabic.org

42

The International Federation of Journalists Arabic site (الاتحاد الدولي للصحفيين) serves as a regional platform for news, campaigns, and programs supporting journalists in the Arab world and Middle East. It operates as a non-profit media organization with a focus on press freedom, journalist safety, and professional ethics. The website is built on TYPO3 CMS and integrates modern web technologies to deliver content primarily in Arabic with links to other language variants. The site demonstrates a good level of content quality, user experience, and mobile optimization, targeting journalists and media professionals in the region. Technically, the site uses a mature CMS platform with several JavaScript libraries for enhanced UI and social media integration. Performance is moderate with good SEO practices but lacks some advanced accessibility features. Security posture is solid with HTTPS enforced, but the absence of security headers and vulnerability disclosure policies indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced transparency around privacy, security policies, and domain registration data. The lack of WHOIS information slightly reduces domain trustworthiness but does not detract significantly from the site's legitimacy given its clear organizational identity and contact information.

I

International Labour Organisation and International Federation of Journalists

migrantnarratives.org

48

Migrant Narratives is a collaborative project by the International Labour Organisation (ILO) and the International Federation of Journalists (IFJ) aimed at promoting ethical journalism on labour migration. The website serves as a resource hub offering tools, best practices, forums, and showcases of exemplary media coverage to support journalists worldwide. It targets media professionals, labor representatives, and policymakers interested in fair and balanced reporting on migrant workers. The platform operates as a non-profit initiative with a clear focus on education and advocacy within the media sector. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Slick Carousel, and Google Analytics for tracking. The site is hosted under a GoDaddy registrar with privacy-protected WHOIS data, reflecting a standard setup for non-profit international projects. The website demonstrates good mobile optimization, clear navigation, and a professional design consistent with its mission. From a security perspective, the site employs HTTPS with a strong SSL configuration but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with accessible privacy and cookie policies and a consent mechanism, though GDPR compliance is not explicitly stated. Contact information is limited to email addresses affiliated with IFJ, with no phone numbers or physical addresses provided. Overall, Migrant Narratives presents a trustworthy, well-maintained platform with a clear business purpose and solid technical foundation. Strategic improvements in security headers, explicit security policies, and enhanced privacy compliance could further strengthen its posture and user trust.

I

iNext

inext.com

67

iNext is a specialized provider of international travel protection plans, focusing on health and emergency assistance for students, groups, families, and sponsoring institutions. The company offers scalable insurance plans with easy online enrollment and 24-hour support, positioning itself as a niche player in the travel insurance market. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to its target audience. Technically, the site uses modern JavaScript libraries, Google Analytics, and Tag Manager for tracking, and serves content over HTTPS with good security practices, although some security headers are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The WHOIS data for the domain is unavailable, which slightly reduces trust, but the association with the parent company CIEE and the professional presentation support legitimacy. Overall, the site demonstrates a solid business and technical foundation with room for improvement in privacy and security transparency.

P

PT GiantFocal Karya Anugerah

giantfocal.com

65

GiantFocal is a professional HubSpot Gold Partner specializing in website design, CRM implementation, marketing automation, and HubSpot theme products, targeting businesses seeking global scale and Indonesian market dominance. The company emphasizes leveraging over 10 years of HubSpot expertise to grow client businesses. The website is well-structured, mobile-optimized, and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. The website lacks direct company contact emails and phone numbers, relying on contact forms instead. Overall, the site presents a professional and trustworthy front but would benefit from improved transparency in domain registration and security policies.

The website w-a-d.in represents the Wood+ In Architecture And Design (WAD) event platform, organized by NürnbergMesse India Pvt Ltd. It serves as a specialized event focusing on the use of wood and mass timber in architecture and design, co-located with the flagship INDIAWOOD event. The platform targets professionals such as architects, engineers, government officials, and manufacturers, providing sessions, networking, and industry insights. The website is professionally designed with consistent branding and clear navigation, supporting a medium-sized event organizer in the manufacturing and real estate sectors in India. Technically, the site is built on ASP.NET WebForms with modern front-end libraries like Bootstrap and OwlCarousel. It uses HTTPS and Google Analytics for tracking but lacks advanced security headers and privacy compliance mechanisms such as cookie consent and privacy policies. The site is mobile optimized and performs moderately well but could improve accessibility and SEO features. From a security perspective, the site enforces HTTPS and does not expose sensitive data, but the absence of security headers and privacy policies indicates room for improvement. No vulnerabilities or malicious content were detected. WHOIS data confirms the legitimacy of the domain and its alignment with the business entity. Overall, the website is a credible and professional event platform with good business credibility but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.

My World of Expo is a technology company specializing in providing comprehensive online solutions for the events industry, including event websites, exhibitor manuals, and management systems. With over 20 years of experience and a strong client base, the company positions itself as a trusted provider in the event technology sector. Their offerings cater primarily to event organizers, associations, and exhibitors, focusing on digital transformation and operational efficiency. Technically, the website employs modern frameworks such as Bootstrap and jQuery, is hosted via Cloudflare, and integrates customer engagement tools like Drift chat. The site is mobile-optimized and SEO-friendly, reflecting a mature digital presence. Security-wise, the company claims ISO 27001:2013 certification and uses HTTPS with domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic, with a privacy and cookie policy present but lacking a consent mechanism. Overall, the website is professional and trustworthy, with room for improvement in security and privacy practices.

WorldSkills Europe is a well-established non-profit organization founded in 2009 that promotes vocational, technical, and service-oriented education and training across Europe. It operates as part of the global WorldSkills movement and organizes major events such as the EuroSkills competitions to showcase and inspire excellence in skills among young people. The organization targets young individuals, educators, governments, and industries to prepare the workforce for future job markets. The website reflects a professional and consistent brand with clear messaging and a strong social media presence.

A

ART SOFT

artsoft.lv

45

ART SOFT is a Latvian small technology company specializing in software and IT services. The website presents basic business information including contact details, company registration, and bank information, targeting business clients in need of IT solutions. The technical infrastructure includes modern web technologies such as Google Analytics, reCAPTCHA, and Google Maps API, although the map integration is currently non-functional due to API key or billing misconfiguration. Security measures include the use of reCAPTCHA on the contact form, but no advanced security headers or policies are evident. The absence of privacy and cookie policies indicates limited privacy compliance. Overall, the website is functional but basic in design and content quality, with moderate technical maturity and business credibility.

É

Élection du Service Client de l'Année

escda.fr

53

Élection du Service Client de l'Année is a French organization that independently evaluates and awards companies and public services for excellence in customer service. Established in 2013, it operates a recognized label and organizes annual events to promote quality in customer relations. The website serves as an information portal for candidates, consumers, and partners, offering news, laureate listings, and international links. Technically, the site uses a modern stack including jQuery, Bootstrap, and Google Analytics, hosted by OVH, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and reCAPTCHA, though lacking advanced security headers and explicit incident response policies. Privacy compliance is basic but includes cookie consent and a privacy policy. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

J

Jānis Roze

janisroze.lv

66

Jānis Roze operates an e-commerce platform primarily targeting Latvian consumers, offering retail products through a Magento-based website. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies and third-party monitoring tools such as New Relic and Facebook Pixel. Despite the lack of WHOIS data due to query limitations, the website's technical infrastructure and content suggest a legitimate business presence in the Latvian retail e-commerce market. However, the absence of explicit privacy, cookie, and terms of service policies, as well as contact information, indicates areas for compliance and trust improvement. Security posture is strong with HTTPS enforcement and monitoring, but could benefit from enhanced security headers and published incident response policies.

A

Arkbauer

arkbauer.com

69

Arkbauer is a Latvia-based full-cycle custom software development company established in 2015, specializing in building custom software applications and web solutions for enterprises. The company positions itself as a reliable partner delivering projects on time and budget, with a portfolio showcasing diverse industry projects and strong client testimonials. Their target audience includes enterprises seeking tailored software solutions to gain competitive advantage. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, optimized for performance and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA v3 on contact forms, and domain transfer protection, though DNSSEC is not enabled and security headers are absent. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website demonstrates a professional and trustworthy digital presence with room for security and privacy enhancements.

Storm International Management Services B.V. is an established international casino operator with over 30 years of experience managing high-end gaming and entertainment facilities primarily in Georgia, Armenia, and Germany. The company emphasizes a branded gaming experience through its Shangri La casinos and proprietary casino management software. The website reflects a professional and consistent brand presence with clear business information and contact details. Technically, the site uses CMS Made Simple and modern JavaScript libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and DNSSEC, indicating room for improvement. Privacy compliance is basic, with no explicit cookie consent or comprehensive privacy policy found. Overall, the website is credible and functional but would benefit from enhanced security and privacy practices.

J

J. Smilgas Tehnoloģiskais birojs

smtb.lv

37

J. Smilgas Tehnoloģiskais birojs (SMTB) is a Latvian technology company specializing in supplying testing and measuring equipment from notable manufacturers such as Tektronix, Keithley, and others. They also provide technological service consultations and participate in Latvian and EU-level projects, positioning themselves as a leading representative firm in Latvia within their sector. The website content is professionally presented with clear navigation and relevant business information targeting telecommunications operators and research organizations in the electronics industry. Technically, the website uses a traditional tech stack including Bootstrap, jQuery, and various JavaScript plugins, but some libraries are outdated, which may pose security risks. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is moderate with no visible security headers and outdated libraries, and there is no evidence of privacy or cookie policies, which impacts GDPR compliance. WHOIS data is unavailable due to query limits, limiting domain trust assessment. Overall, the website is functional and professional but would benefit from security and compliance improvements.

Mobil TV is a Swedish-language digital media blog focused on news, movies, and TV series, primarily targeting Swedish-speaking audiences interested in entertainment content. The website operates on a WordPress platform with a minimalist blog theme, offering articles and reviews related to streaming and TV shows. The business model appears to be content publishing, likely monetized through advertising or affiliate marketing. Technically, the site uses modern web technologies including WordPress 6.8.1, jQuery, Google Fonts, and Font Awesome, providing a moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking advanced security headers and DNSSEC, and no visible privacy or cookie policies, indicating compliance gaps. Overall, the site is functional and content-rich but would benefit from enhanced security and privacy measures to improve trust and compliance.

I

inBudget

inbudget.net

57

inBudget is a personal finance management application focused on helping users organize and plan their finances through customizable budgets, transaction tracking, and social sharing features. The business targets individual users interested in personal finance, including cryptocurrency users and travelers. The app is distributed primarily via the iOS App Store and offers both private and public budgeting capabilities. The website content is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the website uses a moderate technology stack including jQuery 1.11.1, Font Awesome, Google Maps API, and Localytics for analytics. Hosting and DNS are managed through reputable providers, including Cloudflare for DNS. The site is served over HTTPS with a valid SSL configuration, but lacks some modern security headers and uses an outdated jQuery version, which could pose security risks. No CMS was detected, indicating a custom or static site. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks visible security headers, cookie consent mechanisms, and explicit privacy compliance statements, which are important for GDPR and other privacy regulations. No contact information or incident response policies are published, limiting transparency and user trust in security matters. Overall, the website is functional and professional but could improve its privacy compliance and security posture. The presence of unrelated gambling and casino links in the footer may affect trustworthiness. Strategic improvements in security headers, cookie consent, and contact transparency are recommended to enhance user confidence and regulatory compliance.

G

Giraffe360

giraffe360.com

75

Giraffe360 is a technology company specializing in virtual tour and 360-degree camera solutions tailored for real estate agents. Their offerings enable enhanced property marketing through immersive digital experiences. The website demonstrates a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and performance optimizations. The technical infrastructure includes modern libraries and frameworks such as Gravity Forms, Yoast SEO, and Google reCAPTCHA, indicating a mature digital setup. Security posture is strong with HTTPS enforced and security headers present, though the absence of a dedicated security policy and incident response information suggests room for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the lack of WHOIS data raises concerns about domain registration legitimacy, warranting further investigation. Overall, the website is trustworthy and professionally maintained, serving its target audience effectively.

A

ACDI/VOCA

acdivoca.org

56

ACDI/VOCA is a well-established global nonprofit organization focused on economic and social development projects worldwide. Their website reflects a mature digital presence with comprehensive content describing their mission, impact areas, and legacy since 1963. The organization targets global communities and development stakeholders, positioning itself as a trusted partner in fostering food security, economic prosperity, and social inclusion. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress CMS and standard analytics tools like Google Analytics and MonsterInsights. From a technical perspective, the site uses modern web technologies and maintains good performance and accessibility standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security headers and published security policies are absent, and no vulnerability disclosure or incident response contacts are provided, representing areas for improvement. The WHOIS data is unavailable due to a malformed request, but the domain appears privacy protected, which is justified for a nonprofit entity. The website includes clear contact information, social media presence, and recognized trust indicators such as awards for workplace excellence. Overall, the site demonstrates a high level of professionalism and trustworthiness with minor gaps in security transparency. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, adding a vulnerability disclosure mechanism, and enhancing accessibility features to further strengthen the organization's digital security and compliance posture.

S

Skooli

skooli.com

67

Skooli is an established online tutoring platform headquartered in Toronto, Canada, providing instant access to certified and professional educators across a broad range of subjects and grade levels. The platform targets students, parents, schools, and tutors, offering personalized tutoring solutions via a proprietary online classroom. Skooli emphasizes quality by vetting tutors with teaching licenses and advanced degrees, positioning itself as a trusted and industry-recognized service in the education sector. Technically, the website employs modern web technologies including JavaScript frameworks, third-party integrations like Google Tag Manager and Zendesk, and supports mobile responsiveness. The infrastructure supports real-time communication via socket.io and secure payment processing through Stripe. While the site is well-designed and performant, some security headers are missing, and cookie consent mechanisms are not explicitly implemented. From a security perspective, the site enforces HTTPS and includes anti-clickjacking scripts, with secure login and registration forms. However, the absence of visible security headers and lack of published security policies or incident response contacts indicate areas for improvement. The WHOIS data is unavailable, which slightly reduces trust but does not detract significantly given the professional presentation and contact transparency. Overall, Skooli presents a credible, professional, and user-friendly online tutoring service with a solid technical foundation. Strategic enhancements in security headers, privacy compliance, and transparency around incident response would further strengthen its security posture and user trust.

M

Marketingfans

marketingfans.lv

51

Marketingfans is a small marketing and public relations consultancy focused on the Baltic region, offering services such as content creation, PR, and marketing consultations. The company emphasizes localization over translation and has partnerships in Estonia and Lithuania, positioning itself as a regional service provider. The website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and common marketing tools like Google Tag Manager and Facebook Pixel. While the site is professionally designed and SEO optimized, it lacks visible privacy and cookie policies, and no explicit contact emails or phone numbers are provided on the homepage. Security posture is good with HTTPS enabled and no exposed sensitive data, but security headers are missing. WHOIS data could not be retrieved due to query limits, which limits domain trust verification. Overall, the site presents a credible small business with room for improvement in privacy compliance and security best practices.

Gen Re operates as a global reinsurer specializing in Life & Health and Property & Casualty insurance sectors. The website presents a professional and comprehensive overview of their services, including risk transfer solutions, consulting, underwriting, claims management, and educational resources. The company targets insurance professionals and companies seeking reinsurance expertise. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and includes cookie consent mechanisms compliant with GDPR. Security posture is generally good with HTTPS and consented third-party scripts, though explicit security headers and incident response contacts are absent. The lack of WHOIS registration data for the domain is a notable concern, suggesting a need for further verification of domain legitimacy. Overall, the website is well-structured, content-rich, and trustworthy from a user perspective but requires improvements in transparency and security disclosures.

Devellar is an established outsourcing company founded in 2012, offering IT, marketing, consulting, ecommerce, and call center services. The company targets businesses seeking outsourcing solutions and positions itself with a portfolio of client success stories and a professional web presence. The website is built on WordPress, leveraging common technologies such as Bootstrap, jQuery, and Google Analytics, hosted on Amazon AWS infrastructure. The site demonstrates good content quality, clear navigation, and moderate mobile optimization. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in security and privacy compliance areas.

Latina.pe is the official website of Latina Televisión, a prominent Peruvian television channel offering live streaming of its programming including news, sports, and entertainment. The website targets Peruvian viewers seeking online access to traditional TV content. It features a modern technical infrastructure with integration of multiple advertising and analytics platforms such as Google Tag Manager, TikTok Pixel, Facebook Pixel, Hotjar, and Taboola, indicating a mature digital marketing approach. The site is well-branded and provides a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy and terms of service pages, which are recommended for compliance and trust. WHOIS data is unavailable, which slightly reduces transparency but is common for some country code domains. Overall, the site is a credible media platform with room for improvement in privacy and security disclosures.

S

Sabiedrība ar ierobežotu atbildību "TELMS"

telms.lv

45

SIA TELMS is a Latvian company specializing in energy-related construction and electrical installation services. Their offerings include trenchless technologies, general construction, electrical installation design, electromontage, and conference room rentals. The company presents itself as an established local business with over 20 years of experience in the energy construction sector. The website is functional with basic content and navigation but lacks advanced features such as privacy policies or detailed security disclosures. Technically, the site uses common open-source libraries like jQuery and Bootstrap but does not demonstrate advanced security headers or HTTPS enforcement details. The presence of a cookie consent banner indicates some awareness of privacy compliance, though no formal privacy policy is found. Contact information is clearly provided, enhancing business credibility. Overall, the site is moderately professional but could benefit from improved security and privacy practices.

S

SOCAR

socar.az

66

SOCAR is a leading European energy company specializing in the exploration, production, processing, transportation, and marketing of oil and petrochemical products primarily in Azerbaijan and international markets. The website reflects a mature digital presence with professional design, good content quality, and consistent branding. Technical infrastructure includes modern libraries such as jQuery, Font Awesome, Leaflet, and accessibility tools like the UserWay widget, indicating a commitment to usability and accessibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit privacy, cookie, and incident response policies suggests room for improvement in compliance and transparency. Overall, the website supports SOCAR's market position as a major energy player with a trustworthy and professional online presence.

R

RDD USA

rddusa.com

57

RDD USA is a specialized supplier of military tents, gas masks, and military surplus with over 30 years of experience serving governments and private companies worldwide. The company emphasizes quality, authenticity, and competitive pricing, positioning itself as a trusted provider in the military and emergency preparedness sectors. The website is built on WordPress with WooCommerce, leveraging modern web technologies and providing a functional e-commerce platform. While the site is well-structured and content-rich, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but lacking advanced security headers and cookie consent mechanisms. Overall, the site presents a professional business front but would benefit from enhanced security and compliance transparency.

Realcom Technologies Limited is a Nigerian ICT company established in 1999, providing a wide range of technology solutions and services to businesses. Their offerings include PC systems, network infrastructure, security systems, IT outsourcing, and training services. The company positions itself as a reliable and experienced IT partner with a strong client base and partnerships with major technology vendors. The website reflects a professional and consistent brand image with clear service descriptions and client testimonials. Technically, the website is built on WordPress using popular plugins and frameworks such as Visual Composer and Revolution Slider. The site is moderately optimized for performance and mobile responsiveness, though accessibility and SEO could be improved. Security-wise, the site uses HTTPS and appears to employ Wordfence security measures, but lacks visible security headers and cookie consent mechanisms. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. Contact information is clearly provided, enhancing business credibility. Privacy and terms of service pages exist but lack comprehensive GDPR compliance indicators. Overall, Realcom Technologies demonstrates a solid business and technical foundation but should address domain registration transparency, enhance privacy compliance, and improve security headers to strengthen trust and security posture.

B

Bauplan Nord

bauplan-nord.de

55

Bauplan Nord is a small, established real estate development company based in Germany, with a focus on unique projects and spaces since 1994. The website presents a professional image with good content quality and consistent branding, targeting clients interested in real estate projects in Northern Germany. Technically, the site is built on WordPress using the Yoast SEO plugin, hosted on cloudpit servers, and demonstrates moderate performance and good mobile optimization. However, the site lacks explicit privacy and cookie policies, security headers, and visible contact information, which impacts its security posture and privacy compliance. The absence of incident response contacts and vulnerability disclosure mechanisms further limits its security maturity. Overall, the website is functional and credible but would benefit from enhanced security and compliance measures to improve trust and regulatory adherence.

D

DLV Engineers

dlvafrica.co.za

38

DLV Engineers is a South African engineering firm established in 2000, offering a broad range of engineering services including civil, structural, electrical, mechanical, fire protection, and integrated utility systems. The company targets clients requiring comprehensive engineering solutions across infrastructure and building projects. Their website reflects a professional business with clear service offerings and a focus on customer satisfaction. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, and Font Awesome icons, hosted likely via Afrihost, a South African provider. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Security posture is weak due to absence of HTTPS enforcement, missing security headers, and lack of privacy or cookie policies, which poses compliance and trust risks. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is functional and professional but requires significant improvements in security and privacy compliance to meet modern standards.

C

Cargo

thecargoagency.com

63

Cargo operates a professional website focused on cargo and logistics agency services, targeting businesses and individuals in need of transportation solutions. The site is built on WordPress and employs a modern technology stack including jQuery, Font Awesome, Google Tag Manager, and various analytics and tracking tools. The website demonstrates good design quality, mobile optimization, and SEO practices, with structured data implemented for enhanced search engine understanding. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security measures such as HTTPS and reCAPTCHA are in place, but the lack of security headers and explicit privacy and cookie policies indicates room for improvement in security posture and compliance. Overall, the site is functional and professional but requires enhancements in privacy compliance and domain registration transparency to strengthen trust and security.

RDB Industrial Supply is a small industrial supply company founded in 2017, operating primarily in Latvia. The company represents manufacturers such as Adkalis, CHRYSO, and Kurt Obermeier, targeting industrial sector clients with B2B distribution services. The website is built on WordPress with common technologies like Yoast SEO, Bootstrap, and jQuery, hosted on Microsoft Online infrastructure. However, the analyzed URL returns a 404 error, indicating missing content and poor content quality on this page. The site includes a cookie consent banner but lacks privacy policy and terms of service pages, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no incident response or security policy pages are found. Contact information is limited but present in the footer. Overall, the website shows basic technical implementation but requires improvements in content quality, security practices, and privacy compliance to enhance trust and professionalism.

G

g93

grupa93.lv

56

g93 is a Latvian urban design and planning firm specializing in a wide range of services including territorial planning, local and detailed planning, environmental consulting, and public participation. The company targets municipalities, developers, and environmental agencies primarily within Latvia. The website is built on WordPress and employs common plugins for enhanced user experience and team showcasing. It features a professional design with good SEO and mobile optimization but lacks explicit privacy and cookie policies, which impacts compliance scores. Security posture is generally strong with HTTPS enabled and no visible vulnerabilities, though security headers are missing. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site presents a credible small business with room for improvement in privacy and security transparency.

V

VediCard

vedicard.eu

44

VediCard is a specialized consultancy firm operating in the payment and banking sector, providing expert advisory services including project management, feasibility studies, certification support, and strategic business guidance. The company targets financial institutions, payment service providers, and related stakeholders, positioning itself as a trusted partner with over 20 years of industry experience. The website reflects a professional and consistent brand image with clear service offerings and reputable client associations. Technically, the website is built on WordPress with modern plugins such as Visual Composer and MetaSlider, ensuring a responsive and user-friendly experience. The hosting and domain registration are consistent and legitimate, with no signs of privacy protection or suspicious registrations. Performance is moderate with good mobile optimization, though SEO and accessibility could be improved. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and formal policies such as privacy, cookie, and incident response disclosures. No vulnerability disclosures or security.txt files are present, indicating room for improvement in security transparency and compliance. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

G

Greenyard

univeg.com

70

Greenyard is a large, established global supplier specializing in fresh, frozen, and prepared fruit and vegetables. The company positions itself as a key player in the healthy food retail sector with a strong emphasis on sustainability and corporate governance. Their website reflects a professional and consistent brand image with comprehensive business and investor information. Technically, the site uses a mature tech stack including AngularJS and Bootstrap, with Magnolia CMS as the content management system. While the site is mobile optimized and performs moderately well, the use of legacy AngularJS suggests some modernization opportunities. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and dedicated security or incident response pages. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. WHOIS data is unavailable due to privacy protection or malformed response, which is common for corporate domains and justified here given the business scale. Overall, the website is trustworthy, professional, and well-maintained, supporting Greenyard's market position as a leading supplier in the retail fruit and vegetable sector.

L

LFF Group

lff-group.com

48

LFF Group is a well-established global supplier specializing in pipes, fittings, flanges, and valves primarily serving the oil, gas, petrochemical, power, and water industries. With over 40 years of experience and a presence in 15 global locations, the company offers project management, supply chain management, MRO, and system integration services. The website reflects a professional and consistent brand image targeting industry professionals and project managers. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and various plugins to deliver a responsive and visually appealing experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trust. Security posture is moderate with no visible security headers and lack of privacy and cookie policies, which impacts compliance and user trust. Google Analytics is used for user tracking without clear privacy compliance indicators. Overall, the site is functional and professional but requires improvements in security and compliance transparency.

B

Brothers & Sisters

brothersandsisters.co.uk

52

Brothers & Sisters is a UK-based creative agency specializing in high-profile advertising campaigns for notable brands such as webuyanycar, Sky, Center Parcs, and Nike collaborations. The agency also operates ventures like Brothers & Sisters Sports Club and AI Labs, indicating a focus on innovation and community engagement. The website is built on the Squarespace platform, featuring modern design elements including video backgrounds and responsive layouts. While the site demonstrates good technical implementation and a professional appearance, it lacks critical privacy and cookie policies, which impacts its compliance posture. Security practices are basic with HTTPS enabled but missing advanced headers and vulnerability disclosures. Contact information is limited to an email address and social media links, with no phone or physical address provided. Overall, the website presents a credible and professional business presence but would benefit from enhanced privacy compliance and security measures.

L

Latvijas Pašvaldību Mācību Centrs

lpmc.lv

43

Latvijas Pašvaldību Mācību Centrs (LPMC) is an established accredited educational institution in Latvia, providing a broad range of educational programs and seminars primarily targeting municipal employees, social workers, legal professionals, and educators. The organization offers over 400 programs, ranging from short seminars to extended courses, aiming to improve societal knowledge and skills through education. The website is professionally designed using WordPress with modern plugins and technologies, ensuring a good user experience and mobile responsiveness. Security measures include HTTPS and Google reCAPTCHA on forms, though some security headers are missing. Privacy and cookie policies are present and indicate GDPR compliance. Contact information is clearly provided, enhancing business credibility. However, WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website demonstrates a solid digital presence with room for security improvements.

S

SIA Emimar

emimar.lv

46

SIA Emimar is a Latvian company specializing in the supply and installation of sandwich panels and related construction materials for industrial buildings such as hangars, sports halls, and commercial centers. The company partners with leading European manufacturers and offers a broad portfolio including insulation materials, metal profiles, PVC waterproofing membranes, and ventilated facades. Their target audience includes architects, construction firms, entrepreneurs, and private individuals planning construction projects. The website is built on Joomla CMS with modern frontend technologies and integrates multiple analytics and advertising tools. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible privacy compliance mechanisms. The absence of WHOIS data due to query limits limits domain trust verification, but the website content and business information appear professional and credible.

L

Likor

likor.lv

57

Likor is a well-established Latvian optics company operating since 1993, specializing in the manufacturing of eyeglass lenses and wholesale distribution of optical products across the Baltic region. The website reflects a medium-sized business with a clear focus on optical products including contact lenses and protective eyewear. The company maintains partnerships with reputable industry brands such as Shamir and CooperVision, indicating a solid market position. Technically, the website uses common frameworks like Bootstrap and jQuery, providing a responsive and user-friendly experience, though SEO and accessibility could be improved. Security posture is moderate with no visible security headers or explicit policies, and WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Contact information is clearly presented, but privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures.

L

LHouse.eu

rcg-lighthouse.eu

52

LHouse.eu operates as a small business specializing in Lighting as a Service (LaaS), focusing on energy efficiency and environmental sustainability. Their market position is niche, targeting organizations seeking cost-effective and sustainable lighting solutions. The website presents a professional image with clear descriptions of their services and a consistent brand identity. Technically, the site is built on WordPress with standard plugins for SEO, forms, and cookie management, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is good with HTTPS enabled and reCAPTCHA implemented, but lacks comprehensive security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the site is trustworthy but could improve transparency and security documentation.

G

Gourmet Studio Webshop

gourmet-studio.lv

51

Gourmet Studio Webshop is an online retail platform specializing in gourmet spices, fine foods, and related culinary products. The website targets consumers interested in high-quality food ingredients and specialty items, offering a broad range of categories including spices, condiments, international cuisine, chocolates, and gift hampers. The business operates primarily as an e-commerce retailer based in Latvia, with a small-sized market presence. Technically, the website is built on the PrestaShop CMS platform, utilizing modern web technologies such as Google reCAPTCHA for security and Font Awesome for icons. The site demonstrates good mobile optimization and SEO practices, with structured data implemented for enhanced search engine understanding. Security posture is solid with HTTPS enforced and secure form tokens, though some security headers are not explicitly detected and could be improved. Privacy compliance is partial, with a cookie policy and consent mechanism present but lacking a dedicated privacy policy and terms of service pages. Contact information and business legitimacy verification are limited due to absence of WHOIS data and no visible contact details on the site. Overall, the website is functional and professional but would benefit from enhanced transparency and compliance documentation.

A

AKG Gruppe

akg-gruppe.de

51

AKG Gruppe is a globally recognized manufacturer specializing in high-performance coolers and heat exchangers, serving diverse industries including automotive, aviation, rail vehicles, renewable energy, and construction equipment. With a workforce exceeding 3,000 employees, the company emphasizes innovation, sustainability through its AKG Green initiative, and tailored thermal management solutions. The website reflects a professional digital presence built on TYPO3 CMS, featuring comprehensive product and market information, active news updates, and clear contact channels. Technically, the site employs modern web technologies and demonstrates good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS registration data is a notable concern, potentially impacting trust and domain legitimacy verification. Overall, AKG Group presents a credible and professional business front with room for enhanced transparency and security policy disclosures.

L

Legacoop Puglia

legapuglia.it

56

Legacoop Puglia is a regional cooperative association based in Italy's Puglia region, dedicated to supporting cooperative enterprises, promoting ethical and sustainable business practices, and fostering community engagement. The organization provides services including advocacy, training, project management, and digital maturity evaluation for cooperatives. The website reflects a professional and consistent brand presence with clear contact information and active social media channels. Technically, the site is built on WordPress using Elementor and several plugins, with embedded privacy-conscious YouTube videos and GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and some best practices, though explicit security headers and incident response policies are not evident. Overall, the site is trustworthy and well-maintained, serving its target audience effectively.

C

Catch22.eu B.V.

fairtree.nl

29

Dropcatch.nl, operated by Catch22.eu B.V., provides a specialized service for rapid registration of .nl domain names that become available after a quarantine period. The company targets individuals and businesses seeking valuable domain names released from quarantine, offering a bidding and registration platform. The website is professionally designed with clear business information and contact details, supporting its niche market position in the Netherlands. Technically, the site uses established frontend technologies such as Bootstrap 3, jQuery, and Google Fonts, with moderate performance and good mobile optimization. However, the site lacks modern security headers and visible HTTPS enforcement, which are critical for protecting user data and enhancing trust. Privacy compliance is minimal, with no privacy or cookie policies present, and tracking is done via Google Analytics without visible consent mechanisms. Overall, the domain registration details align well with the business model, indicating legitimacy and consistency.

C

ClearAgile Consulting

clearagile.com

45

ClearAgile Consulting is a small technology consulting firm specializing in agile architecture, program management, lean startup methodologies, and technical strategy. Their website presents a professional image with clear service offerings targeted at businesses seeking agile transformation and technical roadmap development. The site is built on WordPress with common plugins and frameworks, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is generally good with HTTPS enabled, but lacks important security headers and visible privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is consistent and professional. Overall, the site demonstrates a functional consulting business presence but requires improvements in compliance and security transparency.

V

Van Genechten Packaging

vangenechten.com

67

Van Genechten Packaging is a well-established packaging company specializing in innovative and sustainable folding carton packaging solutions for diverse markets such as food, pet care, beverages, and more. The company positions itself as a creative and business-impact-driven partner for brands seeking to differentiate their products. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on Drupal 10, hosted with Azure DNS, and employs modern web technologies including Google Tag Manager for analytics and cookie consent management. The site is mobile-optimized and accessible, with good SEO practices and structured data implementation. From a security perspective, the website enforces HTTPS with a strong SSL configuration and domain transfer protection. Cookie consent mechanisms are in place, supporting GDPR compliance. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence with solid security and privacy practices, supporting the credibility of the business. Strategic improvements could include enabling DNSSEC, publishing a security.txt file, and providing explicit security contact information to enhance trust and incident response readiness.