Security Directory

G

GDPR CENTRUM

gdprcentrum.cz

58

GDPR CENTRUM is a Czech-based small business collective of IT and legal professionals specializing in GDPR certification, implementation, consultancy, and software development. The company targets small businesses, sole proprietors, and online merchants, offering affordable and free GDPR compliance tools including a documentation generator. The website is professionally designed with clear navigation and comprehensive content in Czech, reflecting a strong focus on GDPR education and practical compliance support. Technically, the site uses a modern but somewhat dated tech stack including Bootstrap and jQuery 1.12.4, with good mobile optimization but lacking some modern security headers and explicit privacy/cookie policies. Security posture is moderate with HTTPS usage but missing advanced security configurations and incident response details. WHOIS data is unavailable, which reduces domain trustworthiness, but the detailed content and contact information support legitimacy. Overall, the site provides valuable GDPR compliance resources with room for improvement in privacy transparency and security best practices.

T

TigerHostings

tigerhostings.com

44

TigerHostings is a small technology company specializing in WordPress hosting services, offering multiple subscription plans tailored for various customer needs worldwide. The company emphasizes speed, security, and customer support, positioning itself as a reliable hosting provider recommended by WordPress.com. The website is built on WordPress with modern plugins and technologies, providing a good user experience with clear navigation and responsive design. However, the site lacks explicit privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS enabled and reCAPTCHA integration, but missing DNSSEC and security headers reduce overall security maturity. The domain registration is consistent with the business age and claims, registered through a reputable registrar without privacy protection, enhancing trustworthiness.

E

Eberspächer Gruppe GmbH & Co. KG

eberspaecher.com

69

Eberspächer Gruppe GmbH & Co. KG is a well-established German automotive supplier specializing in exhaust technology, climate control systems, and automotive electronics. With a history spanning over 160 years, the company positions itself as a key player in clean and smart mobility solutions for the automotive industry. Their website reflects a professional and comprehensive corporate presence targeting automotive industry professionals and partners worldwide. The business model focuses on manufacturing and supplying components and systems to automotive OEMs and related sectors. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Bootstrap for responsive design and user experience. The site incorporates consent management via Usercentrics and Google Tag Manager for analytics and marketing. Performance and accessibility are good, with mobile optimization and SEO best practices implemented. However, some security headers are missing, and no explicit security policy or incident response information is publicly available. From a security perspective, the site enforces HTTPS and uses consent management, indicating a good baseline for privacy compliance. The absence of WHOIS data transparency is a notable concern, although the website content and branding strongly support legitimacy. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is solid but could be improved with additional headers and published policies. The overall risk assessment is moderate-low, with recommendations to enhance domain registration transparency, publish security policies, and implement a vulnerability disclosure program. These steps would strengthen trust and compliance, aligning with the company's professional image and industry standards.

F

Foire du Dauphiné

foire-dauphine.com

56

Foire du Dauphiné is a well-established regional event organizer hosting one of France's leading fairs in Romans-sur-Isère, Rhône-Alpes. The website presents comprehensive information about the event, including exhibitors, programming, ticketing, and a professional Club Pro membership offering. The site targets both the general public and professional exhibitors, providing a rich user experience with clear navigation and up-to-date content. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, analytics, and user interaction. Security posture is adequate with HTTPS and reCAPTCHA integration, though explicit security headers are not detected, and no visible security or incident response policies are published. The absence of WHOIS data for the domain reduces trust slightly, but the website's professional presentation and consistent branding support its legitimacy. Overall, the site is a reliable digital presence for the event, with room for improvement in security transparency and compliance documentation.

C

Caen Événements

caen-evenements.com

55

Caen Événements operates as the manager of the Centre de Congrès and Parc des Expositions in Caen, Normandy, producing both professional and public events such as congresses, gala evenings, and festivals. The website positions the company as a regional leader in event management within Normandy, targeting event organizers and attendees. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses various JavaScript libraries to enhance user experience. SEO and mobile optimization are well implemented, though accessibility could be improved. Security posture is solid with HTTPS and security headers in place, but lacks explicit privacy and terms of service documentation. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trustworthiness. Strategic recommendations include adding comprehensive privacy and terms policies, improving contact transparency, and verifying domain registration details to enhance credibility and compliance.

E

Enasis

lmsenasis.com

42

Enasis is a French digital learning platform dedicated to fire and rescue services, providing an educational environment tailored to emergency service personnel. The platform is built on Moodle and offers training resources and consortium collaboration tools. The website is professionally designed with consistent branding and targets a specialized audience within the public safety sector. Technically, the site uses a modern tech stack including Moodle, YUI, jQuery, and Matomo analytics, hosted by OVH, a reputable provider. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is solid with HTTPS and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is good, with GDPR-aligned policies and cookie mechanisms in place. Overall, the site is trustworthy and well-maintained, with no signs of malicious content or vulnerabilities.

P

Peppa Pig Live Česko

peppapiglive.cz

57

Peppa Pig Live Česko is a localized entertainment website promoting live theatrical performances of the popular children's character Peppa Pig in the Czech Republic. The site targets families and children, offering ticket sales and multimedia content related to the live shows. The business operates on a small scale, focusing on event promotion and audience engagement through social media and online presence. Technically, the website is built on WordPress with modern front-end frameworks like Bootstrap and jQuery, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The domain registration is recent but consistent with the business localization and branding, indicating legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, suitable for its family-friendly entertainment purpose.

The Macedonian Stock Exchange (Македонска Берза АД Скопје) operates as the primary regulated securities market in North Macedonia, providing official listings, trading platforms, market data, indices, and regulatory information. The website targets investors, listed companies, brokers, and financial professionals, offering comprehensive market insights and educational resources. The business model centers on facilitating capital market operations and compliance within the Macedonian financial sector. Technically, the website employs a modern web stack including jQuery, Bootstrap, and C3.js for interactive charts, hosted on a local provider (uhost.mk). The site is mobile-optimized with good SEO and accessibility basics, though some enhancements could improve accessibility compliance. The infrastructure supports dynamic market data updates and user interaction via search and contact forms. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is good with a clear privacy policy and cookie banner aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for a financial institution, with moderate technical maturity and compliance. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen the platform.

P

Purem GmbH

purem.com

69

Purem GmbH, a subsidiary of the Eberspächer Group, specializes in exhaust gas cleaning and acoustic systems aimed at enabling clean and quiet mobility for passenger cars and commercial vehicles. The company positions itself as a key player in the automotive supplier sector, focusing on innovative solutions to improve air quality and reduce noise emissions globally. The website reflects a professional and consistent brand image aligned with its parent company, targeting automotive industry stakeholders and environmentally conscious customers. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes consent management tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and incident response information are absent. The missing WHOIS data for the domain is a notable concern but is mitigated by the strong brand presence and external references to the reputable parent company. Overall, the site demonstrates good business credibility and technical implementation with room for improvement in transparency and security disclosures.

G

Gilston Digital SA

miru.digital

49

Miru.digital is a Swiss-based SaaS platform operated by Gilston Digital SA, specializing in PDF document archiving, consultation, and distribution with advanced full-text search capabilities. The company positions itself as a Swiss-made, secure, and easy-to-use solution targeting businesses and organizations requiring efficient document management. The website reflects a professional and consistent brand image with clear pricing tiers and client references, indicating an established niche presence in the document management technology sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes essential security features such as HTTPS and cookie consent management. However, it lacks explicit privacy and terms of service documentation, which are critical for compliance and user trust. Security posture is generally good, with use of Google reCAPTCHA and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and professionally maintained, though it would benefit from enhanced privacy and security disclosures to align with best practices.

JSB realitní is a small Czech Republic-based real estate company specializing in brokerage services for residential and commercial properties, including sales, rentals, and problematic property solutions such as debt and foreclosure management. The company also operates a related construction business for property renovations. The website is professionally designed with clear navigation and relevant content targeting local clients in Prague and surrounding areas. However, the absence of WHOIS data and security policies reduces trustworthiness. Technically, the site uses common web technologies like jQuery and Bootstrap but lacks visible HTTPS and security headers, which are critical for secure operations. No privacy or cookie policies are present, indicating compliance gaps. Overall, the business appears legitimate but would benefit from improved security and compliance measures.

Č

Česká gymnastická federace

gymfed.cz

49

Česká gymnastická federace is the official national governing body for gymnastics sports in the Czech Republic, providing comprehensive information, event calendars, results, and resources for multiple gymnastics disciplines including artistic gymnastics, TeamGym, aerobics, acrobatic gymnastics, trampoline, parkour, and more. The website targets athletes, coaches, referees, clubs, and gymnastics enthusiasts, offering news updates, directories, and an e-shop for gymnastics equipment. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, Flickity, and Google Analytics, with good mobile optimization and accessibility features. However, the absence of explicit privacy and cookie policies and lack of security headers indicate areas for improvement in privacy compliance and security posture. The WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of official contact details and social media links supports the site's credibility. Overall, the site is professional, content-rich, and trustworthy within its domain.

C

CancanIT

cancanit.com

63

CancanIT is a specialized online certification provider focused on professional web developers. Established in 2010, it offers a broad range of certification exams covering front-end and back-end web technologies, including HTML5, CSS3, JavaScript, PHP, MySQL, and more. The company targets freelance workers, job seekers, and career starters aiming to validate their skills and improve marketability. The website is well-structured with clear navigation and professional branding, supporting a positive user experience and trustworthiness. Technically, the site employs modern web technologies such as Bootstrap, Font Awesome, and jQuery, hosted likely via GoDaddy infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain locks in place, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with visible privacy and cookie policies and a consent banner, but no detailed GDPR compliance indicators or data protection officer information. Overall, the security posture is adequate for the business type, with no critical vulnerabilities detected. The domain WHOIS data is consistent and supports legitimacy with a long registration history and no privacy protection. The site does not employ tracking or advertising technologies, indicating a privacy-conscious approach. The content is safe for general audiences, focused on education and certification without any adult or questionable material. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing incident response contacts, and improving privacy compliance transparency to strengthen trust and security culture.

E

eEducation Austria

eeducation.at

64

eEducation Austria is a well-established non-profit organization dedicated to advancing digital education across Austrian schools. The website serves as a comprehensive platform offering digital competence models, educational resources, tools, and community networking to support educators and institutions in their digital transformation journey. The organization targets schools and educators primarily within Austria, positioning itself as a key player in the national digital education landscape. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, providing a responsive and user-friendly experience. While the site is well-structured and content-rich, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security-wise, HTTPS is enforced, but additional security headers are not evident, and no explicit incident response or security policies are published. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

P

Pädagogische Hochschule Oberösterreich

europaschule-linz.at

70

Europaschule Linz is an educational institution affiliated with the Pädagogische Hochschule Oberösterreich, serving students and educators in the Linz region. The website provides comprehensive information about the school, its services, projects, and contact details, targeting students, parents, and educational professionals. The institution holds a stable regional position as a pedagogical school with a medium-sized operational scale. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and jQuery, and integrates Google Analytics for visitor insights. The site is mobile-optimized and implements a detailed cookie consent mechanism compliant with GDPR requirements. Hosting and domain registration are managed by reputable providers, ensuring stable infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage user privacy. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No critical vulnerabilities or suspicious activities were detected, and the site maintains good privacy compliance. Overall, Europaschule Linz presents a professional, trustworthy, and user-friendly web presence aligned with its educational mission. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

H

HSH Soft- und Hardware Vertriebs GmbH

hsh-berlin.com

71

HSH Soft- und Hardware Vertriebs GmbH is a medium-sized German company specializing in software and hardware solutions for public administration, particularly in the government sector. Their offerings include a range of specialized software products such as MESO, GESO, AUSO, and biometric solutions like Biometric Go®, positioning them as a market leader in municipal resident registration software in Germany. The company actively participates in federal IT modernization initiatives, demonstrating a strong presence in the eGovernment domain. Technically, the website employs a modern but standard technology stack including jQuery and Bootstrap, with a custom CMS backend. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, performance is moderate and accessibility features are basic. Privacy and cookie policies are implemented with GDPR compliance, but no direct contact emails or phone numbers are visible on the homepage. From a security perspective, the site lacks explicit security headers and there is no information about HTTPS or SSL configuration in the provided data. The presence of BSI-certified biometric software indicates some level of security awareness. The absence of WHOIS data for the domain is a concern, as it is inconsistent with the active and professional website presence, reducing overall trustworthiness. Overall, the website is professional and content-rich, serving a specialized government software market. The main risks relate to domain registration transparency and security header implementation. Strategic improvements in these areas would enhance trust and security posture significantly.

I

INOBAT

inobat.ch

66

INOBAT is a Swiss organization responsible for collecting and managing advance disposal fees related to batteries and accumulators. It serves as a key player in Switzerland's battery recycling ecosystem, providing information, education, and support to consumers, manufacturers, importers, and recycling partners. The website is well-structured, professionally designed, and offers comprehensive content relevant to its mission. Technically, the site uses modern web technologies including Bootstrap and JavaScript frameworks, with a cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the organization's claims, indicating legitimacy and trustworthiness.

C

CFL

cfl.lu

19

CFL is the national railway company of Luxembourg, providing passenger and freight transport services along with mobility solutions such as carsharing, bicycles, tram, and funicular. The website serves as a comprehensive travel portal offering timetable searches, ticket bookings (both national and international), travel packages, and customer services. The company holds a strong market position in Luxembourg's transportation sector with a large operational scale and multiple subsidiaries. Technically, the website employs modern frameworks like Bootstrap and FontAwesome, integrates Google Tag Manager and Matomo for analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. Privacy compliance is good with privacy and cookie policies and consent mechanisms in place. Overall, the website is professional, trustworthy, and user-friendly, though the lack of WHOIS data slightly reduces trustworthiness from a domain registration perspective.

S

Star Casino Group

cecpraha.cz

64

Star Casino Group is a prominent operator of casino and gaming venues in the Czech Republic, boasting over 50 physical locations and an online casino platform. The company emphasizes fair play and has a long operational history exceeding 25 years. Their target audience is adults interested in gambling and casino entertainment. The website is professionally designed with good navigation and mobile optimization, leveraging modern JavaScript libraries and Google Maps integration for location services. Security-wise, the site enforces HTTPS, includes age verification, and manages cookie consent in compliance with GDPR. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS registration data, slightly detracts from overall trustworthiness. The company provides clear contact information and an ethical whistleblower program, indicating a commitment to compliance and corporate governance.

B

BJELOVARSKO-BILOGORSKA ŽUPANIJA

bbz.hr

48

Bjelovarsko-Bilogorska Županija (BBŽ) is the official regional government authority for the Bjelovarsko-Bilogorska County in Croatia. The website serves as a public information portal providing news, administrative details, public calls, and legal forms relevant to residents and stakeholders of the county. It positions itself as a key regional government entity with a focus on agricultural and economic development, public administration, and community engagement. The site targets local citizens, businesses, and government officials, offering structured navigation and official announcements in Croatian with English language support.

S

Sisačko-moslavačka županija

smz.hr

59

Sisačko-moslavačka županija operates an official regional government website providing comprehensive information about county administration, public projects, news, tenders, and contact details. The site targets residents, businesses, and public officials within the Sisak-Moslavina County in Croatia. The website is built on Joomla CMS with Helix Ultimate framework and uses modern web technologies including Bootstrap and jQuery. It features good mobile optimization and accessibility tools, including an accessibility menu and cookie consent mechanisms compliant with GDPR. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and well-aligned with its government function.

Z

Zadarska županija

zadarska-zupanija.hr

47

Zadarska županija is the official regional government website for the Zadar County in Croatia, providing public administration and citizen services. The website serves as an information portal targeting residents and visitors of the region. It is built on Joomla CMS with the Helix Ultimate framework, utilizing modern web technologies such as Bootstrap, jQuery, and Font Awesome, ensuring a responsive and accessible user experience. The site demonstrates good technical maturity with HTTPS enforced and security headers implemented, reflecting a solid security posture. However, it lacks critical compliance documents such as a privacy policy and terms of service, which are essential for GDPR compliance and user trust. No contact emails or phone numbers were explicitly found, which may hinder user communication. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and compliance transparency.

S

Splitsko-dalmatinska županija

dalmacija.hr

56

Splitsko-dalmatinska županija operates as the official regional government authority for the Split-Dalmatia County in Croatia, providing public administration, regional development, tourism promotion, and social services. The website serves as a comprehensive portal for citizens and stakeholders, offering news, public procurement information, official documents, and contact avenues. The organization maintains a consistent brand presence and leverages social media channels to engage with the public. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, Bootstrap, and modern JavaScript libraries such as Swiper.js and Mmenu.js. It integrates Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or scripts. The domain WHOIS data aligns with the official government entity, confirming legitimacy. Overall, the website presents a professional, trustworthy, and functional digital presence for the regional government, with room for improvement in security header implementation and incident response transparency.

Š

Šibensko-kninska županija

sibensko-kninska-zupanija.hr

65

Šibensko-kninska županija operates as the official regional government authority for the Šibenik-Knin County in Croatia, providing a comprehensive digital platform for citizens, investors, and tourists. The website offers news, public tenders, administrative documents, and information about the county's organizational structure and services. The site is well-structured and professionally designed, reflecting its role as a government entity with a focus on transparency and public service.

R

RMCE BUSINESS s.r.o.

lightdata.cz

37

LightData, operated by RMCE BUSINESS s.r.o., is a Czech Republic-based B2B data service providing extensive databases of Czech companies and managerial contacts. The platform targets businesses seeking detailed company and contact information to enhance their business operations. The website offers registration and login functionalities, with demo credentials available for trial. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and integrates third-party marketing and analytics tools such as Smartsupp Live Chat and Piwik/Matomo. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, while HTTPS is assumed, explicit security headers are missing, and privacy compliance is weak due to absent privacy and cookie policies. WHOIS data is unavailable, which raises some concerns about domain legitimacy, though the website content and contact details suggest a legitimate business presence.

A

ALSENTA s.r.o.

seeky.cz

36

Seeky.cz is a Czech-based B2B service operated by ALSENTA s.r.o. that specializes in identifying and converting website visitors into potential customers. The company targets businesses seeking to enhance their lead generation and sales conversion through visitor monitoring, targeted offers, and direct customer engagement. The website demonstrates a professional presence with a clear value proposition, client testimonials, and a multi-country reach across 40 countries with over 2000 users. Technically, the site employs modern web technologies including Bootstrap, jQuery, and multiple analytics tools such as Google Analytics and Matomo, alongside live chat support for customer engagement. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, indicating room for compliance improvement. WHOIS data is unavailable, which slightly impacts trust but does not detract from the overall professional presentation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and regulatory adherence.

H

Hrvatski ragbijaški savez

rugby.hr

42

The website rugby.hr serves as the official online presence of the Croatian Rugby Union (Hrvatski ragbijaški savez), providing comprehensive information about rugby competitions, national teams, news, and archival data. It targets rugby players, fans, and the broader sports community in Croatia, positioning itself as the national governing body for rugby. The business model is non-profit, focusing on sports promotion and organization. The site is well-branded and consistent with trust indicators such as official social media links and sponsorships. Technically, the site is built on Joomla CMS with common JavaScript libraries like jQuery and Bootstrap, hosted by CARNET, a reputable Croatian academic network. Performance and mobile optimization are basic but functional. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided data, and there is a lack of privacy and cookie policies, indicating compliance gaps. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced security and privacy compliance measures.

P

Posit

quarto.org

58

Quarto.org is the official website for Quarto, an open source scientific and technical publishing system that supports multiple programming languages including Python, R, Julia, and JavaScript. The platform enables users to author and publish high-quality, reproducible documents such as articles, books, websites, and presentations in various formats. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It targets data scientists, researchers, and technical authors seeking advanced publishing tools integrated with popular data science languages. The business is backed by Posit, a reputable company in the data science ecosystem, indicating a solid market position and credibility. Technically, the website employs modern web technologies including Bootstrap for responsive design, Algolia for search functionality, and various JavaScript libraries for enhanced user experience. It integrates with platforms like Jupyter and RStudio, reflecting a mature and well-supported technical infrastructure. Performance and mobile optimization are excellent, and SEO practices are well implemented. Hosting and domain registration are stable and consistent with the business identity. From a security perspective, the site uses HTTPS with a good SSL configuration and domain-level protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and security headers are not visibly implemented, which could be improved. There is no explicit security policy or incident response information publicly available. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, Quarto.org presents a trustworthy, professional, and technically sound web presence for a specialized technical publishing product. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and security posture further.

Barclays Investment Bank operates as a global financial institution providing a comprehensive range of strategic advisory, financing, and risk management solutions to corporate, government, and institutional clients. The website reflects a mature enterprise with consistent branding and professional content tailored to its target audience. The business model centers on investment banking services, positioning Barclays as a key player in the finance sector with a strong market presence. Technically, the site leverages modern technologies including Adobe Experience Manager CMS, jQuery, Bootstrap, and integrates advanced analytics and marketing tools such as Google Tag Manager and Adobe DTM. The site is mobile optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. WHOIS data is privacy protected, which is typical for large financial institutions, and no suspicious patterns were detected. Overall, the site is trustworthy, professional, and compliant with privacy regulations, serving as a credible digital presence for Barclays Investment Bank.

ALSENTA s.r.o. is a Czech Republic based technology company founded in 2008, specializing in providing digital tools and services to enhance business efficiency. Their offerings include B2B identification tools (Seeky.cz), supplier engagement and reverse auction platforms (Alsenta.com), comprehensive business data services (LightData.cz), and outsourcing of procurement activities. The company also manages several related projects such as B2Bpoptavka.CZ and iFirmy.cz, positioning itself as a multifaceted service provider in the B2B and business intelligence space. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence.

D

Deutsche Stiftung Kranke Neugeborene

dskn.org

56

Deutsche Stiftung Kranke Neugeborene is a German non-profit foundation dedicated to supporting sick newborns and their families through funding, education, and specialized projects. The organization maintains a professional web presence with clear navigation, relevant content, and compliance with GDPR and cookie consent regulations. The website is built on Joomla CMS with modern frontend libraries and integrates Google Analytics for user tracking. Security posture is generally good with HTTPS enforced and cookie consent implemented, though improvements in security headers and incident response transparency are recommended. WHOIS data is incomplete, limiting domain trust verification, but the overall digital footprint and partner affiliations support legitimacy.

B

British Medical Ultrasound Society

bmus.org

59

The British Medical Ultrasound Society (BMUS) is a UK-based non-profit professional organization dedicated to promoting ultrasound technology and education among healthcare professionals. The society serves a multidisciplinary audience including medical practitioners, sonographers, physicists, and students. BMUS offers membership benefits, organizes scientific meetings and study days, publishes professional journals, and provides clinical guidance and educational resources. The website reflects a well-established entity with a clear focus on healthcare ultrasound advancement and professional development. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Typekit fonts, delivering a responsive and user-friendly experience. The site is moderately optimized for performance and accessibility, with clear navigation and professional design. However, some improvements could be made in accessibility and explicit CMS identification. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, indicating basic security hygiene. However, no explicit security headers were detected, and there is no published security or incident response policy. Privacy compliance is partially addressed with a privacy policy present, but cookie consent mechanisms are absent. No WHOIS registrant data is available, likely due to privacy protection, but the site’s legitimacy is supported by charity registration and professional content. Overall, BMUS presents a credible and professional online presence with moderate technical maturity and a solid business foundation. Security and privacy practices could be enhanced to align with best practices and regulatory requirements.

E

EuSEN asbl

eusencongress.org

6

The website eusencongress.org represents the EuSEN Nursing Congress 2025, organized by EuSEN asbl, a European society focused on emergency nursing. The site currently displays a notice that the congress has been cancelled for reasons beyond the organizers' control. The business operates as a small non-profit entity targeting healthcare professionals in emergency nursing, providing congress events and professional networking opportunities. The website content is minimal and primarily serves as an informational placeholder with contact email and social media links to official EuSEN pages. Technically, the website is built on WordPress and uses common front-end libraries such as jQuery, Bootstrap, and Font Awesome. The hosting provider is OVH sas. The site is currently offline using a site-offline plugin, with no active forms or data collection mechanisms. Mobile optimization and SEO are basic, and no advanced accessibility features are detected. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which reduces its security posture. No privacy, cookie, or terms of service policies are present, indicating poor privacy compliance. The WHOIS data is consistent with the website's purpose and timeline, showing a legitimate registration with no suspicious patterns. Overall, the site has a moderate trustworthiness level but requires improvements in security and privacy compliance. The overall risk is low given the limited functionality and content, but the lack of privacy policies and security headers should be addressed to improve compliance and trust. Strategic recommendations include enabling DNSSEC, implementing security headers, adding privacy and cookie policies, and enhancing the site's technical and content quality to better serve its audience.

D

Dekores

dekores.eu

10

Dekores is a Polish brand under the Grupa REJS umbrella specializing in decorative and furniture materials such as Solid Surface (Krion), HPL laminates (Abet Laminati), wood panels (Panmar Wood), and acrylic boards (AGT). The company targets professionals like carpenters, designers, architects, and interior enthusiasts, offering both products and inspirational content. Their market position is solid within the manufacturing sector for interior materials in Poland. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools effectively. Security posture is good with HTTPS and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence.

S

Domov | Sparklond

sparklond.sk

42

Sparklond.sk is a Slovak-based educational website specializing in professional welding training and certification. The business offers a variety of welding courses, including beginner to expert levels, with a focus on practical skills and coaching. The website features testimonials and video references to build trust and demonstrate effectiveness. The domain is relatively new, created in 2022, and uses DNSSEC with a valid registrar and hosting provider, indicating legitimacy. Technically, the site uses modern front-end libraries such as Bootstrap, Owl Carousel, and integrates third-party services like Google Tag Manager and Smartsupp Live Chat. Security measures include HTTPS and a Content-Security-Policy header, though the CSP is permissive and could be hardened. Privacy compliance is weak, with no visible privacy or cookie policies, which is a notable gap. Overall, the website is professionally designed, mobile-optimized, and provides clear contact information, but should improve privacy disclosures and tighten security headers.

T

TESTIMA, spol. s r.o.

testima.cz

44

Testima, spol. s r.o. is a Czech company specializing in nondestructive testing equipment and services, including sales, training, calibration, and servicing. With over 30 years of experience and ISO 9001 certification, it holds a stable market position serving industrial clients. The website is professionally designed, mobile-optimized, and provides clear contact and GDPR compliance information. Technically, it uses modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA to secure user interactions. Security posture is good with HTTPS and CSRF protections, though some security headers and policies could be improved. Overall, the site is trustworthy, compliant, and well-maintained.

G

Growio

growio.sk

52

Growio is a professional services company specializing in leadership development, business coaching, and organizational growth programs. Founded in 2021 and headquartered in Slovakia with an Asia-Pacific office in India, Growio targets leaders and organizations seeking to navigate disruption and build resilient, high-performing teams. The company emphasizes future-ready workforce development and offers tailored executive coaching and development programs. Their market position is supported by partnerships with recognized companies and membership in the International Coaching Federation (ICF). Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, hosted on Websupport infrastructure with DNSSEC enabled. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, though terms of service and explicit security policies are absent. Security posture is solid with HTTPS enforced and DNSSEC enabled, but could be improved by adding security headers and publishing incident response contacts or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence aligned with the company's business goals. Strategically, Growio should enhance its security transparency and compliance documentation to strengthen trust and meet evolving regulatory requirements. Continued monitoring of third-party libraries and performance optimization will support sustained digital maturity.

I

Izzy Trading, s.r.o.

sprava-servisov.sk

41

FOXii is a Slovak-based software company specializing in cloud-based service management solutions tailored for field service companies. Their platform enables digitalization of service processes including scheduling, protocol creation, and technician monitoring, targeting small to medium-sized service firms. The website reflects a professional and consistent brand presence with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS and DNSSEC enabled, use of Google reCAPTCHA, and a cookie consent mechanism, though it lacks explicit security headers and a published security policy. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

C

Congrex Switzerland

congrex.com

50

Congrex Switzerland is a well-established Professional Conference Organiser specializing in medical and scientific association conferences across Europe and internationally. The company offers a comprehensive suite of services including conference organisation, registration, hotel accommodation, association management, and strategic marketing and communication. Their website reflects a mature business with a medium-sized team and a strong market position in the hospitality sector. Technically, the website is built on WordPress using the Divi theme and several professional plugins, supporting multilingual content and modern web standards. Performance and mobile optimization are good, though accessibility could be improved. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could enhance transparency and security practices.

The website www.barlifeevents.cz operates as an online magazine primarily targeting Slovak-speaking audiences with content focused on household topics, energy, gardening, investment, and related services. The site uses WordPress CMS with a standard set of plugins and themes, providing a moderate level of technical sophistication and a generally good user experience. SEO metadata and structured data are implemented, enhancing search engine visibility. However, the absence of contact information, privacy policies, and cookie consent mechanisms indicates gaps in compliance and user trust facilitation. The WHOIS data for the domain is unavailable, which raises concerns about the domain's registration legitimacy and reduces overall trustworthiness. Security posture is basic, with no advanced security headers detected, though HTTPS is implied by canonical URLs. Overall, the site is functional and content-rich but requires improvements in privacy compliance, security best practices, and transparency to enhance credibility and user trust.

W

Webgaleria.sk

webgaleria.sk

42

Webgaleria.sk is a Slovak-based company specializing in custom web development, e-commerce solutions, and software programming. With over 150 successful projects across diverse sectors such as medicine, gastronomy, and manufacturing, they position themselves as a reliable provider of tailored digital services. Their offerings include website and e-shop creation, software applications, SEO services, professional photography, and corporate identity design. The website demonstrates a solid technical infrastructure utilizing modern frameworks like Bootstrap and jQuery, with responsive design and moderate performance. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and formal privacy policies. Contact information is clearly presented, enhancing business credibility. Overall, the site reflects a professional small business with a moderate market presence in Slovakia.

Ř

Řízení letového provozu České republiky, s. p.

rlp.cz

61

Řízení letového provozu České republiky, s. p. is a state enterprise responsible for providing air traffic management services in the Czech Republic. The organization offers a broad range of services including aeronautical information management, drone safety information, free route airspace management, ATM training through CANI, flight inspection services, and pilot training via the Czech Aviation Training Centre (CATC). The website serves as a comprehensive portal for information, news, career opportunities, and service offerings targeted at aviation professionals, airspace users, and the general public interested in Czech aviation. The company holds recognized certifications such as EFQM and maintains partnerships with key European and international aviation organizations.

S

SAHM

sahm-glass.cz

53

SAHM is a Czech-based company specializing in the decoration of beverage glassware, providing customized branding solutions primarily for the beverage industry including beer, wine, spirits, and non-alcoholic drinks. The company operates an e-commerce platform offering a variety of decorated glass products and related services such as laser engraving and screen printing. Their market position is that of an established medium-sized manufacturer serving B2B clients in the Czech Republic and potentially neighboring markets. Technically, the website employs a range of modern JavaScript libraries including jQuery, Bootstrap, and Google Analytics for tracking and user engagement. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be improved. The CMS appears to be a proprietary or specialized platform, possibly MagnetPro, tailored for e-commerce and product customization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating compliance with GDPR. However, the absence of visible security headers and missing WHOIS domain registration data are concerns that reduce overall trustworthiness. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional and trustworthy front for SAHM's business, but the lack of WHOIS transparency and some security header omissions suggest areas for improvement. Strategic recommendations include enhancing domain registration transparency, implementing comprehensive security headers, and publishing explicit security and incident response policies.

F

Flowee s.r.o.

flowee.cz

51

Flowee.cz is a Czech online magazine focused on healthy lifestyle topics including psychology, relationships, health, culture, society, education, and personal development. The site is professionally designed and targets a general audience interested in wellness and lifestyle content. It operates primarily as a media publishing platform monetized through advertising and sponsored content. Technically, the website is built on Joomla CMS and incorporates modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and multiple advertising and tracking services. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit security policies. The absence of WHOIS data is a notable concern for domain legitimacy verification, though the website content and presentation suggest a legitimate business. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is a well-established media outlet with moderate technical maturity and a good security posture, but could improve transparency and security practices.

A

ACOVENE

acovene.org

46

ACOVENE is a small healthcare and lifestyle content website focused on providing educational articles and information related to medical topics, health, lifestyle, and learning. The website targets a general audience interested in healthcare improvements and lifestyle enhancements. It operates on a WordPress platform with a modern tech stack including Bootstrap and popular plugins such as Yoast SEO and Contact Form 7. The site demonstrates good SEO practices and mobile optimization, with clear navigation and consistent branding. Contact information including email, phone, and physical address is clearly presented, enhancing business credibility. Technically, the website is hosted with a registrar DomainPicking LLC and uses cloudns.net for DNS. It employs HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers, which are recommended for improved security posture. The site uses Fathom Analytics for minimal user tracking and does not implement cookie consent mechanisms, indicating partial privacy compliance. No terms of service or security policies are published, and no incident response contacts or vulnerability disclosure mechanisms are found. Security-wise, the website is generally secure with no visible vulnerabilities or exposed sensitive data. However, improvements such as enabling DNSSEC, adding security headers, and publishing security policies would strengthen its security posture. The domain registration data is consistent and transparent, with no suspicious patterns, supporting the legitimacy of the website. Overall, ACOVENE presents a professional and trustworthy informational platform with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas will improve user trust and regulatory adherence.

The European Specialist Nurses Organisation (ESNO) operates as a non-profit entity focused on advancing the role and sustainability of specialist nurses across Europe. Their website serves as a central hub for information on their congresses and events, targeting healthcare professionals, policymakers, and partners. The organization positions itself as a key influencer in European healthcare policy through knowledge exchange and advocacy. Technically, the website employs a modern but straightforward tech stack including Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. Security-wise, the site uses HTTPS and avoids collecting sensitive data via forms, but lacks advanced security headers and a cookie consent mechanism, which are areas for improvement. Overall, the site is professional, trustworthy, and well-aligned with its mission, though it could enhance privacy compliance and security posture.

E

eSestra.sk – Akreditované online vzdelávanie

esestra.sk

43

eSestra.sk is an accredited online education platform targeting nurses and healthcare professionals primarily in Slovakia. The platform offers a variety of professional courses with flexible access, including credit packages and free courses for registered nurses. The website demonstrates a consistent and professional brand presence with a focus on user-friendly navigation and relevant content for its target audience. Technically, the site is built on WordPress with Elementor and incorporates modern web technologies such as jQuery, Bootstrap, and Swiper.js. Hosting is provided by Websupport, with DNSSEC enabled and HTTPS enforced, indicating a good baseline security posture. However, some advanced security headers and formal security policies are absent, which could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Overall, the site is trustworthy, well-maintained, and serves a niche educational market effectively.

Č

ČMAPM

cmapm.cz

51

ČMAPM (Českomoravská asociace podnikatelek a manažerek) is a Czech non-profit association established in 1995 that supports women entrepreneurs and managers through networking, education, mentoring, and various projects. The organization has a strong presence in the Czech Republic with regional clubs and international community links. Their website is built on WordPress using modern tools like Elementor and Yoast SEO, providing a professional and content-rich experience. Security posture is good with HTTPS enabled and secure forms, but lacks some security headers and formal privacy/cookie policies. WHOIS data is unavailable, which limits domain trust verification but the website content and partnerships indicate legitimacy.

S

SPIRIT MEDICAL spol. s r.o.

spiritmedical.cz

54

SPIRIT MEDICAL spol. s r.o. is a specialized healthcare company focused on the distribution and servicing of micro-surgical medical products, primarily for ophthalmology. The company targets medical professionals and ophthalmology specialists, offering a niche portfolio of products and services. Their market position is that of a specialized supplier with a professional online presence and active social media engagement. The website is well-structured, professionally designed, and optimized for SEO, reflecting a mature digital presence. Technically, the website is built on WordPress with WooCommerce, leveraging modern libraries such as Bootstrap, jQuery, and various plugins for SEO, analytics, and GDPR compliance. The site is mobile-optimized and performs moderately well, with good accessibility and SEO features. Analytics are implemented via Google Analytics and MonsterInsights, with a cookie consent mechanism in place. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks visible security headers and a published privacy policy, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, though the website content and business information appear legitimate. Overall, the website presents a professional and trustworthy front for a small healthcare business, with room for improvement in privacy policy publication and security header implementation to enhance compliance and security posture.

R

RIBBON, s.r.o.

ribbon.cz

51

RIBBON, s.r.o. is a well-established Czech company specializing in the sales, rental, and servicing of office technology products including multifunction printers, copiers, projectors, and security systems. With over 31 years in the market, the company holds authorized partnerships with major brands such as DEVELOP, TOSHIBA, KONICA-MINOLTA, and KYOCERA, serving a broad B2B customer base across the Czech Republic. The website reflects a professional and consistent brand image, providing clear contact information and legal compliance pages such as GDPR and terms of service. Technically, the site is built on ASP.NET WebForms with modern front-end libraries like jQuery and Bootstrap, and integrates Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content.