Security Directory

P

PERSKIMEDIA Szymon Perski

chb14.pl

56

CHB14 is a modern office building located in Kraków, Poland, offering high-standard office spaces with flexible layouts across five floors. The business targets companies seeking premium office rental spaces with amenities such as 24/7 security, underground parking, and energy-efficient solutions. The website reflects a professional real estate leasing business with a clear market position in the Kraków commercial property sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools such as Yoast SEO and Google Analytics. Security posture is good with HTTPS and reCAPTCHA usage, though improvements in DNSSEC and security headers are recommended. Privacy compliance is strong with comprehensive cookie and privacy policies and a consent mechanism. Overall, the website is trustworthy, well-designed, and suitable for its business purpose.

H

HUSS-VERLAG GmbH

logistik-heute.de

54

LOGISTIK HEUTE is a well-established German logistics magazine operated by HUSS-VERLAG GmbH, targeting decision-makers in industry, trade, and logistics services. The website offers comprehensive logistics news, expert articles, event information, and industry guides, positioning itself as a key media player in the German transportation and supply chain sector. The business model revolves around media publishing, advertising, and event hosting, supported by a professional and consistent brand presence. Technically, the site is built on Drupal 9, leveraging modern web technologies including Google reCAPTCHA, Matomo analytics, and a robust consent management system to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience.

H

HUSS-VERLAG GmbH

logistra.de

54

LOGISTRA is a specialized German logistics industry magazine operated by HUSS-VERLAG GmbH, targeting logistics, warehouse, and fleet management professionals. The website offers news, expert articles, event information, product recommendations, and job listings, positioning itself as a reputable media source in the transportation and logistics sector. The digital infrastructure is built on Drupal 9, integrating modern web technologies including Google reCAPTCHA, Google Publisher Tags for advertising, and a GDPR-compliant consent management platform. Analytics are handled via Matomo, ensuring moderate user tracking with privacy considerations. Security posture is solid with HTTPS enforced and anti-bot measures in place, though explicit security headers and policies are not fully documented. The absence of a visible privacy policy and terms of service is a notable gap. Overall, the site is professional, content-rich, and well-branded, serving a medium-sized enterprise audience in Germany.

H

HUSS VERLAG GmbH

transport-online.de

55

Transport-online.de is a professional German-language media portal operated by HUSS VERLAG GmbH, specializing in transport and logistics industry news, analysis, and resources. The website targets transport entrepreneurs, freight forwarders, and logistics service providers, offering biweekly publications, newsletters, job listings, and event information. The platform holds a strong market position within its niche, supported by a consistent brand presence and comprehensive industry coverage. Technically, the website is built on Drupal 9 CMS, utilizing modern web technologies including Matomo analytics for privacy-conscious tracking, Google reCAPTCHA for form security, and a Consent Management Platform to comply with GDPR. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs standard security measures but lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is moderate due to the absence of a clearly accessible privacy policy and terms of service pages. Overall, the website is trustworthy and professional with a solid business model and technical foundation. Strategic improvements in privacy transparency, security headers, and contact information would enhance compliance and user trust.

B

BetterHealthcare

betterhealthcare.co

58

BetterHealthcare operates a digital patient access platform called BetterAccess, designed to improve patient scheduling, engagement, and operational efficiency for healthcare organizations. The company targets healthcare providers seeking to enhance patient acquisition and retention through a scalable, interoperable SaaS platform. The website presents a professional and consistent brand image with clear messaging and customer testimonials, positioning BetterHealthcare as a trusted partner in healthcare technology. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile optimized and performs moderately well, though accessibility features are basic. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and published security policies. Privacy and cookie policies are absent, indicating gaps in compliance with GDPR and related regulations. WHOIS data is privacy protected, which is justified for this business type, and no suspicious patterns were detected. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

P

PROFI CREDIT Slovakia, s.r.o.

proficredit.sk

43

PROFI CREDIT Slovakia, s.r.o. operates a professional and well-structured website offering consumer loan services primarily targeting employees and citizens in Slovakia. The company is positioned as a significant provider of credit services with a clear business model focused on online and offline loan applications. The website demonstrates a mature digital infrastructure leveraging WordPress CMS, modern JavaScript libraries, and integrated analytics and marketing tools. Security posture is generally good with HTTPS and reCAPTCHA protections, although minor PHP warnings and lack of explicit security headers suggest room for improvement. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website reflects a trustworthy financial service provider with transparent business information and customer testimonials.

E

EP Energy Trading

epet.sk

51

EP Energy Trading operates as a medium-sized energy supplier focused on providing electricity and gas services primarily in Slovakia and the Czech Republic. The company is part of the larger EPH energy group, which lends it stability and market credibility. Their website emphasizes reliable energy delivery, customer satisfaction, and ease of switching suppliers, targeting both residential and business customers. The digital presence is professional and well-structured, supporting their business goals effectively. Technically, the website employs modern web technologies including Google Tag Manager, jQuery, and Google reCAPTCHA, ensuring a functional and moderately optimized user experience. The site is mobile-friendly and includes SEO best practices such as meta tags and structured data. However, some improvements could be made in accessibility and security headers to enhance overall robustness. From a security perspective, the site uses HTTPS and implements bot protection via reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through the presence of a privacy policy and cookie consent mechanism, though terms of service and incident response information are absent. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website presents a trustworthy and professional front for EP Energy Trading, with moderate technical sophistication and good security hygiene. Strategic enhancements in security policies and accessibility could further strengthen their posture.

G

Grünbeck AG

gruenbeck.de

66

Grünbeck AG is a well-established German company specializing in water treatment solutions for over 75 years, serving both private households and industrial clients. The company holds a leading market position in the energy sector focused on water quality and hygiene. Their website reflects a mature digital presence with comprehensive product offerings, including water softening, filtration, disinfection, and related services. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Google services for analytics and tag management with GDPR-compliant consent mechanisms. Security measures include HTTPS enforcement and Google reCaptcha for form protection. The domain registration data aligns well with the company's history and legitimacy, showing no suspicious patterns. Overall, Grünbeck demonstrates a strong security posture, good privacy compliance, and professional business credibility.

E

Ernst Krebs GmbH aus Gauting bei München

ekrebs.de

62

Ernst Krebs GmbH is a well-established family-owned business based in Gauting near Munich, Germany, specializing in heating, sanitary, bathroom, and electrical installation services. Founded in 1910, the company has over 115 years of experience and operates as a master craftsman business serving residential and commercial clients. Their website reflects a professional and consistent brand image, targeting customers seeking high-quality home and building technology solutions. Technically, the website is built on WordPress using the Avada theme, incorporating modern plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance. The site is mobile-optimized and provides clear navigation and contact information, including email and phone contacts, as well as social media links on Facebook and Instagram. Security-wise, the site uses HTTPS and includes bot protection via Google reCAPTCHA and tracking via Facebook Pixel, with a cookie consent mechanism in place. However, it lacks explicit security headers and published security or incident response policies. Overall, the website is safe, professional, and compliant with basic privacy requirements, though it could improve by adding a privacy policy page and security disclosures.

N

Novibra s.r.o.

novibrajobs.cz

42

Novibra s.r.o. is a medium-sized manufacturing company specializing in high-speed spindles for the textile industry, operating as part of the Rieter group. The website serves as a career and corporate information portal targeting job seekers and industry professionals in the Czech Republic. It presents company culture, leadership, production insights, and job openings with a professional and consistent brand image. Technically, the site is built on WordPress using Elementor and Smart Slider 3, hosted by Wedos, and incorporates modern web technologies and Google Analytics for user tracking. Security posture is adequate with HTTPS and reCAPTCHA but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but could improve compliance and security transparency.

R

Restaurace Aquarium Relax

aquariumrelax.cz

45

Restaurace Aquarium Relax is a small hospitality business operating a restaurant in the Czech Republic. The website presents basic information about the restaurant with a focus on local clientele. The technical infrastructure is based on WordPress using the Divi theme, with integration of Google Tag Manager and Google reCAPTCHA for analytics and bot protection. The site is secured with HTTPS and implements a cookie consent mechanism, though it lacks a visible privacy policy and detailed contact information. Security posture is moderate with room for improvement in security headers and compliance documentation. Overall, the website is functional and professional but could enhance trust and compliance by adding privacy and contact details.

C

CENTROPEN, a.s.

jak-spravne-psat.cz

44

The website www.jak-spravne-psat.cz is an educational platform dedicated to supporting proper handwriting skills in children, primarily targeting parents and educators in the Czech Republic. It is backed by CENTROPEN, a.s., a company that appears to support the project both financially and organizationally. The site offers practical advice, instructional content, and an online advisory service to help children develop correct writing habits. Technically, the website uses modern web fonts, Google services such as reCAPTCHA and YouTube embeds, and implements a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of visible privacy and terms of service pages suggest gaps in transparency and compliance. Security posture is generally good with HTTPS and reCAPTCHA usage, but the lack of security headers and formal policies reduces the overall security maturity. Overall, the website is trustworthy and professional in content and design but would benefit from enhanced compliance documentation and improved security headers to strengthen user trust and regulatory adherence.

C

CENTROPEN, a.s.

foukaci-fixy.cz

42

CENTROPEN, a.s. operates the website foukaci-fixy.cz to promote and provide information about their AIRPENS product line, which are special blowing markers designed for children. The company has a strong market position as a Czech manufacturer with a long history dating back to 1940, emphasizing product safety, local production, and compliance with European toy safety standards. The website targets parents and children interested in creative and safe drawing tools. Technically, the site uses modern web technologies including Google reCAPTCHA, Facebook Pixel, and Google Analytics, hosted via WEDOS, and built likely on the Nette Framework. The site is mobile optimized and provides a good user experience with clear navigation and multimedia content such as video tutorials and galleries. Security posture is solid with HTTPS enforced and anti-bot measures on forms, though it lacks some security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the website is professional and trustworthy, with room for improvement in privacy transparency and security documentation.

A

AFS

afs.cz

46

AFS Česká Republika is a well-established non-profit organization focused on intercultural education and exchange programs. The website presents a professional and comprehensive digital presence, offering detailed information about study abroad programs, hosting foreign students, volunteering, and scholarships. The organization targets students, parents, volunteers, and educational institutions, positioning itself as a key player in intercultural educational services within the Czech Republic and globally through the AFS network. Technically, the site is built on WordPress with modern SEO and analytics integrations, including Google Analytics, Hotjar, and Facebook Pixel, supported by a CDN for performance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers could be enhanced. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the organization's transparency and social proof. Overall, the site is safe, user-friendly, and compliant with GDPR, reflecting a mature digital strategy for a non-profit educational entity.

G

Glamour Guardian s.r.o.

vseprovlasy.cz

55

Glamour Guardian s.r.o., operating the website vseprovlasy.cz, is a well-established Czech retail business specializing in professional hair cosmetics and hairdressing equipment. With over 27 years of experience, the company serves both professional hairdressers and end customers, offering a wide range of products, expert seminars, and personalized services including free regional delivery and loyalty discounts. The website reflects a mature e-commerce platform with a clear focus on the hair care industry and a strong local market presence. Technically, the website is built on the FastCentrik e-shop platform using ASP.NET technologies, enhanced with modern JavaScript libraries such as Owl Carousel and Google reCAPTCHA for security. The site is mobile-optimized, accessible, and incorporates SEO best practices, ensuring a good user experience. Privacy and cookie consent mechanisms are well implemented, demonstrating compliance with GDPR requirements. From a security perspective, the site uses HTTPS and includes anti-spam measures like Google reCAPTCHA. While explicit security headers are not fully confirmed, the site shows no signs of vulnerabilities or exposed sensitive data. However, the absence of a public WHOIS record suggests domain privacy protection, which is common and justified for this business type but limits domain age verification. Overall, the website presents a professional, trustworthy, and compliant online presence with moderate to good technical and security posture. Strategic recommendations include enhancing security headers, publishing a security.txt file for vulnerability disclosure, and providing incident response contact information to further strengthen trust and security readiness.

P

PPush

ppush.eu

54

PPush is a German-based technology service offering a free push notification app designed for organizations such as clubs, municipalities, and local businesses to send regional news and updates without requiring a dedicated app. The service emphasizes GDPR compliance and privacy by enabling anonymous message reception without collecting personal data like email or phone numbers. The website is professionally designed, multilingual, and provides comprehensive information about the service, including FAQs, testimonials, and API integration options. Technically, the site is built on WordPress with modern plugins for security, multilingual support, and cookie consent management. Security posture is strong with HTTPS, Wordfence protection, and Google reCAPTCHA integration. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Overall, the site presents a trustworthy and professional digital presence for a niche technology service focused on privacy and regional communication.

Jablotron Alarms a.s. is a well-established Czech company specializing in security and smart home systems. The company offers a broad range of products including alarm systems, cameras, and home automation solutions targeting both residential and commercial customers. Their market position is strong within Europe, supported by ISO certifications and a comprehensive product portfolio. The website reflects a mature digital presence with modern technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security measures are robust, including HTTPS enforcement and security headers, though the absence of public vulnerability disclosure and incident response contacts suggests room for improvement. Overall, the company demonstrates a high level of professionalism and trustworthiness, though the lack of WHOIS data slightly impacts domain trust. Strategic recommendations include enhancing transparency around security incident response and establishing a formal vulnerability disclosure policy.

Jablotron Alarmsysteme s.r.o. is a medium-sized technology company specializing in the development and manufacture of security systems and smart home solutions. The company targets both residential and commercial customers, offering alarm systems, smart home automation, and security monitoring services. The website reflects a professional and consistent brand image with comprehensive privacy and cookie policies, indicating compliance with GDPR regulations. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and security headers in place. However, the absence of publicly available WHOIS data limits the ability to fully verify domain legitimacy. Security posture is solid with HTTPS enforcement and security best practices, though the lack of a dedicated security policy or vulnerability disclosure page suggests room for improvement. Overall, the website is safe, trustworthy, and well-structured, serving its business purpose effectively.

D

DiVan

divan.hr

56

DiVan is a Croatian media platform focused on providing comprehensive information about events, places, and cultural activities in Zagreb. It serves a local audience interested in concerts, festivals, gastronomy, and social happenings, positioning itself as a niche event guide with a strong community presence. The platform offers additional services such as newsletters and mobile applications to enhance user engagement. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, Google Analytics, and GDPR-compliant cookie management, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and CAPTCHA protections, although some security headers could be improved. The website demonstrates good privacy compliance and transparent user consent mechanisms. Overall, DiVan presents a professional and trustworthy online presence with moderate technical performance and solid business credibility.

T

Teatar EXIT

teatarexit.hr

41

Teatar EXIT is a well-established Croatian theatre company founded in 2003, specializing in provocative and innovative theatrical performances. The website serves as a digital platform to showcase their program, ticket sales, and festival events, targeting a general audience interested in cultural arts. The company maintains a consistent brand presence with active social media channels and a mobile app offering, indicating a moderate level of digital maturity. Technically, the site is built on WordPress with modern libraries and frameworks such as Bootstrap and jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS, GDPR-compliant consent mechanisms, and Google reCAPTCHA on forms, although there is room for improvement in implementing security headers and explicit incident response policies. Overall, the website is professional, secure, and compliant, with a high trustworthiness rating and no detected malicious content.

M

Marina Flensburg GmbH & Co. KG

marinaflensburg.de

48

Marina Flensburg GmbH & Co. KG operates a marina located in Flensburg, Germany, providing essential yachting services such as berth rental, winter storage, boat fueling, crane access, and harbor amenities. The website positions itself as a local, customer-focused marina with a strong emphasis on comfort and convenience for boat owners. The target audience includes yachting enthusiasts and visitors to the Flensburg harbor area. The business model revolves around providing marina infrastructure and services to boat owners and seasonal residents. Technically, the website is built on Joomla CMS with Yootheme Pro and UIkit frameworks, leveraging Leaflet.js for interactive maps and Google reCAPTCHA for form security. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate, with modern technologies and proper meta tags implemented. From a security perspective, the site enforces HTTPS, includes security headers, and uses reCAPTCHA to protect forms from spam. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy and cookie consent mechanism. However, explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-maintained, reflecting a legitimate and customer-oriented business. Strategic recommendations include adding explicit security and incident response policies, publishing a vulnerability disclosure statement, and providing data protection officer contact details if applicable.

C

CompanyWall business

companywall.com

47

CompanyWall business operates a financial assistant platform providing innovative classification and analysis of business and financial data to empower companies in multiple European countries. The company offers credit ratings, credit reports, and custom financial data services, supported by regional and local platforms and a Web API for data access. The business is positioned as a trusted regional player with over a decade of experience and multiple offices across Europe. Technically, the website is built on WordPress with Elementor, uses HTTPS and Google reCAPTCHA for security, and demonstrates good mobile optimization and SEO practices. Security posture is solid but could be improved with additional security headers and cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

W

World Patients Alliance

worldpatientsalliance.org

10

World Patients Alliance is a global non-profit umbrella organization advocating for patient rights, safety, and access to quality healthcare worldwide. The organization hosts educational events, webinars, and campaigns to empower patients and patient organizations globally. Their website reflects a professional digital presence built on WordPress, leveraging modern plugins and SEO tools to engage their audience effectively. The technical infrastructure is solid with HTTPS, domain locking, and integration of analytics and event management tools. Security posture is good but could be improved by enabling DNSSEC and adding advanced security headers. Privacy compliance is basic, lacking cookie consent mechanisms and explicit terms of service. Overall, the website is trustworthy, well-branded, and serves its mission effectively.

D

Digestive Cancers Europe

digestivecancers.eu

40

Digestive Cancers Europe (DiCE) is a European non-profit umbrella organization dedicated to uniting patient organizations and stakeholders focused on digestive cancers. The organization provides advocacy, research support, awareness campaigns, and patient resources to improve survival and quality of life for affected individuals across Europe. The website serves as a comprehensive platform for patients, carers, and healthcare professionals, offering educational materials, clinical trial databases, and policy advocacy information. DiCE maintains a strong presence through multiple social media channels and provides clear contact information and privacy compliance mechanisms. Technically, the website is built on WordPress with modern technologies including React, jQuery, and Stripe for payment processing. It employs performance optimizations such as deferred scripts and Autoptimize. The site is mobile-optimized, accessible, and SEO-friendly, with structured data markup enhancing search visibility. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and secure payment integration, although some security headers could be improved. The security posture is solid with no critical vulnerabilities detected in the content. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the site lacks explicit security policies and incident response information. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for a healthcare non-profit organization. Strategically, DiCE should enhance its security headers, publish a formal security policy, and consider adding vulnerability disclosure information to further strengthen trust and compliance. Regular security audits and updates are recommended to maintain a robust security posture.

C

Cyklus Trails

cyklustrails.com

42

Cyklus Trails is a small, specialized travel agency offering self-guided and guided cycling tours primarily in the Czech Republic and neighboring countries. Established in 2002, it targets active travelers seeking authentic outdoor adventure experiences along well-known bike paths and cultural sites. The website is built on Drupal 7 and incorporates common web technologies such as jQuery, Google Analytics, and Facebook SDK for social integration and tracking. While the site is accessible and professionally presented, it lacks critical privacy and cookie policies, which impacts compliance with GDPR and other privacy regulations. Security measures include the use of Google reCAPTCHA on contact forms, but the absence of security headers and use of outdated libraries present potential vulnerabilities. The WHOIS data for the domain is missing, raising concerns about domain registration legitimacy, although the website content and contact details appear genuine. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

V

VR Coaster GmbH & Co. KG

vrcoaster.com

57

VR Coaster GmbH & Co. KG is a leading provider of virtual reality solutions for real ride attractions and location-based entertainment worldwide. As part of the Mack Group, it leverages strong partnerships with industry leaders such as Mack Rides and Europa-Park to deliver advanced VR experiences integrated into theme parks and entertainment venues. The company has established a strong market position since its founding in 2014, serving a global clientele including Universal Studios and Six Flags. The website reflects a professional and modern digital presence, showcasing their VR platforms, content offerings, and client portfolio. Technically, the website is built on WordPress with modern web technologies including video backgrounds, SVG graphics, and Google reCAPTCHA for form security. The site is mobile optimized, accessible, and SEO friendly, although performance is moderate. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and a cookie consent mechanism. The contact form collects user data securely with reCAPTCHA protection. From a security and compliance perspective, the site demonstrates good practices but could improve by adding explicit security policies, incident response information, and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain is unusual and reduces trust slightly, though the strong business branding and partner ecosystem mitigate concerns. Overall, the site is trustworthy and professional with minor areas for security and privacy enhancement. Strategically, VR Coaster should focus on improving transparency around security and privacy, implement cookie consent to comply fully with GDPR, and monitor domain registration status to ensure legitimacy. Enhancing security headers and publishing a vulnerability disclosure policy would further strengthen their security posture and trustworthiness.

O

Owasco Careers

owascocareers.ca

51

Owasco Careers operates a professional, family-owned automotive dealership group in Canada, focusing on recruitment and career opportunities within their dealerships. The website presents a clear business description emphasizing culture and growth, targeting job seekers interested in automotive retail careers. The technical infrastructure is based on WordPress with modern analytics and monitoring tools such as Google Analytics, Microsoft Clarity, and New Relic, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with reCAPTCHA for form security, reflecting a good security posture. However, the absence of publicly available WHOIS data and lack of privacy and cookie policies indicate gaps in transparency and privacy compliance. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security headers to improve trust and compliance.

C

Cambra de Comerç de Terrassa

cambraterrassa.org

10

Cambra de Comerç de Terrassa is a regional chamber of commerce focused on supporting economic development and business growth in the Terrassa region of Spain. The website presents a professional and consistent brand image, offering business support services and entrepreneurial development initiatives. The target audience primarily includes local businesses and entrepreneurs seeking economic development assistance. The business model revolves around providing services and support to foster regional economic growth. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by WooCommerce for e-commerce capabilities. It integrates several analytics and marketing tools including Matomo, Google Tag Manager, Hotjar, and LinkedIn Insight. The site is hosted by Entorno Digital, S.A., with a domain registered since 2005, indicating a mature and stable online presence. Performance and mobile optimization are good, with basic accessibility and SEO optimizations in place. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, alongside a GDPR-compliant cookie consent mechanism. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is trustworthy and professional, with a solid business credibility score. The main risks relate to the absence of explicit security policies and limited contact information. Strategic recommendations include enhancing security headers, publishing a security and privacy policy, and providing clear contact channels for security incidents to improve trust and compliance.

C

Cambra de Comerç de Barcelona

cambrabcn.org

10

Cambra de Comerç de Barcelona is a well-established chamber of commerce serving the business community in Barcelona and Catalonia. Founded in 2001, it operates as a non-profit organization providing business support, training, networking, and advocacy services. The website reflects a professional and consistent brand image targeting local businesses and entrepreneurs. The organization maintains a strong market position as a key regional business entity. Technically, the website is built on WordPress with modern plugins such as Gravity Forms, WooCommerce, and Yoast SEO, indicating a mature digital infrastructure. The site is moderately performant, mobile-optimized, and includes standard SEO and accessibility features. Hosting is provided by Nominalia Internet SL, a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA to protect forms. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security transparency and DNS security. The domain registration data supports the legitimacy and long-standing presence of the organization.

S

Spoutible

spoutible.com

7

Spoutible.com appears to be a relatively new online platform, likely a social media or communication service given the site title and some UI hints. The domain was registered in late 2022 and is hosted behind Cloudflare DNS services. The website uses common Google services such as Google Tag Manager, Google Adsense, and Google reCAPTCHA, indicating some level of digital maturity. However, the site lacks critical compliance documents such as privacy policies, cookie policies, and terms of service, which are essential for user trust and regulatory compliance. The absence of contact information and security headers further reduces the security posture and business credibility. Overall, the site presents a basic web presence with moderate technical implementation but requires significant improvements in privacy, security, and business transparency to enhance trustworthiness and compliance.

L

Litea Solution s.r.o.

usbmedia.cz

60

USB Media, operated by Litea Solution s.r.o., is a Czech-based company specializing in the custom manufacturing and sale of promotional USB flash drives and IT-related corporate gifts. Established in 2010, the company offers a range of services including laser engraving, printing on flash drives, and production of IT gadgets such as Bluetooth speakers and wireless chargers. Their market position is that of a specialized provider catering primarily to business clients seeking unique promotional items. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Analytics, Google reCAPTCHA, and Owl Carousel. It uses Google Fonts and integrates Google Maps API for location services. Performance is moderate with good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on its contact form, which helps mitigate spam and abuse. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak due to the absence of a privacy policy and cookie consent mechanism, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and legitimate, supported by consistent WHOIS data showing domain registration since 2010. Contact details are transparent with dedicated customer service representatives. The site does not contain any adult or questionable content and targets a general business audience. Strategic improvements in privacy compliance and security headers would enhance the site's security posture and regulatory adherence.

O

Obecní úřad Velké Popovice

velkepopovice.cz

47

Velké Popovice's official municipal website serves as a comprehensive portal for local residents and visitors, providing essential information such as public notices, contact details, event calendars, and citizen services. The site is positioned as a trusted local government resource with a clear focus on community engagement and transparency. Technically, the website employs a modern CMS (vismo), uses HTTPS, integrates Google Analytics with consent management, and includes accessibility and mobile optimization features. Security measures include the use of Google reCAPTCHA on forms and cookie consent banners, though explicit security policies and headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website's content and contact information strongly indicate legitimacy. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations, making it a reliable digital presence for the municipality.

S

Statutární město Děčín

mmdecin.cz

51

The website www.mmdecin.cz serves as the official web portal for the statutory city of Děčín in the Czech Republic. It provides municipal information, public service announcements, and downloadable documents for residents and visitors. The site is positioned as a government entity portal with a focus on local governance and community services. The target audience primarily includes city residents and stakeholders interested in municipal affairs. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Font Awesome. It incorporates Google reCAPTCHA for form security and implements a cookie consent mechanism, indicating awareness of privacy regulations such as GDPR. The site demonstrates moderate performance and good mobile optimization, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks visible security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data is likely due to privacy protection, which is common and justifiable for government domains. Overall, the website presents a professional and trustworthy front for the city government, with room for improvement in privacy policy transparency, security header implementation, and accessibility compliance. The risk level is low, but strategic enhancements in security posture and compliance documentation are recommended.

H

Hochschülerinnen- und Hochschülerschaft an der TU Graz GmbH

printkultur.at

47

Printkultur is a well-established printing and study supply service provider based in Graz, Austria, primarily serving the academic community, especially TU Graz students and staff. Founded in 1977, the company offers a broad range of services including digital printing, copying, plotting, scanning, and binding, alongside retail of study materials and promotional items. Their market position is that of a trusted local partner with strong ties to educational institutions, supported by visible partnerships and consistent branding. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, integrating modern tools such as Google reCAPTCHA and Borlabs Cookie for privacy compliance. The site demonstrates good SEO practices and mobile optimization, although some legacy libraries like an older jQuery version present minor security concerns. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, explicit security policies and incident response contacts are absent, and some security headers are not clearly present. No critical vulnerabilities or exposed sensitive data were found, but updating libraries and adding security documentation would enhance posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its niche audience effectively. Strategic improvements in security policy transparency and technical updates would further strengthen its risk profile and operational resilience.

E

Event management system - Conference Manager

conferencemanager.dk

67

Conference Manager is a well-established Danish company founded in 2006, providing a leading event registration and management system across Europe. Their SaaS platform simplifies planning and execution of various event types, including physical and online events. The website reflects a mature digital presence with professional design, SEO optimization, and integration of modern web technologies such as WordPress, Elementor, and Cookiebot for GDPR compliance. The company maintains active social media profiles on Facebook, Instagram, and LinkedIn, enhancing their market visibility. Technically, the website leverages a robust WordPress CMS with Elementor page builder and Yoast SEO plugin, supported by Google Tag Manager and Apollo tracking for analytics. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, alongside a cookie consent mechanism via Cookiebot. However, the absence of explicit security headers and privacy policy pages suggests areas for improvement in security posture and compliance transparency. Overall, the security posture is solid but could benefit from enhanced HTTP security headers and published security policies. The domain WHOIS data is consistent with the business claims, indicating legitimacy and long-term operation. No WAF or blocking mechanisms were detected, allowing full content accessibility and analysis.

T

Terapeutické centrum EPIMELEIA

teracentrum.cz

39

Terapeutické centrum EPIMELEIA is a small healthcare service provider based in the Czech Republic, offering psychological and psychotherapeutic counseling, coaching, and self-development services primarily in Prague and Olomouc. The website presents a professional and consistent brand image, targeting individuals, couples, and children seeking mental health support, including online therapy options. The business model focuses on direct service provision with an emphasis on accessibility and client support. Technically, the website is built on WordPress using Elementor and Jet plugins, integrating Google Analytics and Google Tag Manager for user tracking. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks security headers and explicit privacy or cookie policies. WHOIS data is unavailable, limiting domain trust assessment, but the website content and presentation suggest legitimacy. Overall, the site scores moderately well in content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices.

Michael Gross Art is a small-scale artist portfolio website showcasing the works of Michael Gross, including paintings, prints, and works on paper. The site targets art collectors, galleries, and enthusiasts, providing detailed galleries and information about exhibitions and the artist's background. The business model centers on promoting the artist's work and facilitating contact for inquiries. Technically, the website is built on WordPress and uses common web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security-wise, the site benefits from HTTPS and uses Google reCAPTCHA for form protection; however, it lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Overall, the website is functional and professional but would benefit from improvements in security and privacy compliance to enhance trust and regulatory adherence.

Č

Česká golfová federace

bavsegolfem.cz

41

Bav se golfem is a Czech Republic-based golf information platform operated in association with the Czech Golf Federation. It serves as a comprehensive resource for golf enthusiasts, providing location-based golf course listings, beginner guides, event information, and blog content. The platform targets a broad audience ranging from beginners to advanced players, promoting golf as a healthy and enjoyable leisure activity. The website is well-positioned nationally as a trusted source for golf-related information in the Czech Republic. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, Facebook SDK, Google reCAPTCHA, and Mapy.cz API for mapping services. The site is hosted on Czech infrastructure with Active24 as the inferred hosting provider. The website demonstrates good mobile optimization, SEO practices, and user experience, although accessibility features are basic. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms to prevent automated abuse. However, explicit security headers are not evident, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy front for its business purpose. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture. The domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

K

KAISER GmbH & Co. KG

kaiser-elektro.de

65

KAISER GmbH & Co. KG operates a professional website focused on electrical installation products and systems, targeting business customers primarily in Germany and internationally. The company offers a broad portfolio including boxes, housings, cable glands, and specialized installation solutions emphasizing energy efficiency and fire protection. The website reflects a mature B2B business model with a consistent brand presence and a well-structured product catalog. Technically, the website is built on the Shopware e-commerce platform, utilizing modern web technologies such as JavaScript, CSS, and HTML5. It integrates third-party services like Signalize for marketing and eTracker for analytics, alongside Google reCAPTCHA for bot protection. The site is mobile-optimized with good SEO and basic accessibility features, hosted on servers associated with internet1.de. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. Security headers are likely present, and no critical vulnerabilities or exposed sensitive data were detected in the analyzed content. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic enhancements in security transparency and contact availability would further strengthen trust and operational resilience.

A

Albert Leuchten

albert-leuchten.de

50

Albert Leuchten is a German-based manufacturer specializing in high-quality outdoor luminaires, including LED lighting solutions designed for environmental harmony and safety. The company targets both consumers and businesses seeking durable, weatherproof outdoor lighting products. Their market position is that of an established medium-sized enterprise with a focus on innovation and quality. The website reflects a mature digital presence built on WordPress with WooCommerce, integrating modern technologies such as Google Tag Manager and ConsentManager for privacy compliance. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, well-structured, and GDPR compliant, with clear contact channels and business information. No critical security or content safety issues were detected.

A

AdgravityGroup S.L

neural.one

65

Neural.ONE is a small technology company based in Spain, operated by AdgravityGroup S.L, specializing in AI-powered marketing attribution solutions. Their website presents a professional and consistent brand image focused on delivering real-time marketing insights to optimize campaign ROI. The company targets marketing professionals and businesses seeking advanced attribution analytics. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Google reCAPTCHA for bot protection and Google Fonts for typography. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is strong with HTTPS and HSTS enabled, though DNSSEC is not configured. Privacy compliance is basic, with a cookie policy and consent mechanism present but lacking a published privacy policy or terms of service. No direct contact information or incident response details are publicly available, which limits transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Město Milovice

mesto-milovice.cz

48

Město Milovice operates an official municipal website serving residents and visitors with comprehensive local government information, including news, public notices, contacts, and event calendars. The site is positioned as the authoritative source for municipal services in Milovice, Czech Republic, and targets local citizens and stakeholders. The business model is a government service portal focused on transparency and community engagement. Technically, the website uses a modern CMS platform (Vismo), employs HTTPS for secure communications, integrates Google reCAPTCHA for form security, and offers multilingual support via Google Translate. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are missing. From a security perspective, the site maintains a solid posture with encrypted connections and anti-bot measures but lacks explicit incident response contacts and advanced security headers. No vulnerabilities or suspicious content were detected. Privacy compliance is basic but present, with GDPR-related information and cookie policy available. Overall, the website is trustworthy, professional, and well-maintained, with a strong legitimacy score based on domain age and WHOIS data. Strategic improvements could enhance security headers and incident response transparency to further strengthen trust and compliance.

O

Obec Psáry

psary.cz

45

The website psary.cz serves as the official online presence for the municipality of Psáry and Dolní Jirčany in the Czech Republic. It provides residents and visitors with comprehensive local government information, including news, events, public notices, waste management, and contact details. The site targets local citizens and community members, offering a centralized platform for municipal services and community engagement. Technically, the website is built on WordPress CMS, utilizing common web technologies such as jQuery and Bootstrap for responsive design and user interface components. It integrates Google reCAPTCHA to protect forms from spam and abuse. The site is hosted likely by Active24, the domain registrar, and employs HTTPS for secure communications. Mobile optimization and SEO practices are adequately implemented, though some accessibility features could be enhanced. From a security perspective, the website demonstrates a moderate security posture with HTTPS enabled and reCAPTCHA integration. However, it lacks explicit security headers and a vulnerability disclosure policy, which are recommended best practices. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Contact information is clearly provided, enhancing trust and transparency. Overall, psary.cz is a well-maintained municipal website with good content quality and user experience. Strategic improvements in security headers, privacy compliance, and incident response policies would further strengthen its security posture and regulatory adherence.

O

Obec Nučice

nucice.eu

45

The website nucice.eu serves as the official digital presence of the municipality of Nučice in the Czech Republic. It provides residents and visitors with essential local government information, including official announcements, event calendars, public documents, and contact details. The site targets local citizens and stakeholders interested in municipal affairs and community events. The business model is that of a governmental public service portal, focusing on transparency and community engagement. The website maintains a consistent brand identity aligned with municipal standards and offers good content quality and navigation.

M

Město Rokycany

rokycany.cz

48

The website rokycany.cz serves as the official digital presence of the city of Rokycany, Czech Republic. It provides comprehensive information about municipal services, local news, cultural and sports events, public notices, and online services for residents and visitors. The site is well-established, with a domain age dating back to 1997, reflecting a mature and stable online presence. The content is primarily in Czech and targets local citizens, businesses, and tourists. The business model is centered on public administration and community engagement, offering transparent access to city governance and services. Technically, the website employs a proprietary CMS (vismo) common among Czech municipalities, leveraging modern web technologies such as HTML5, CSS3, JavaScript, Google reCAPTCHA for form security, and Google Translate for multilingual support. The site is mobile-optimized and features a clear navigation structure, although accessibility features are basic. Performance is moderate, with external dependencies on Google fonts and CDN-hosted libraries. From a security standpoint, the site uses HTTPS and integrates Google reCAPTCHA to protect forms from abuse. However, it lacks explicit security headers and a dedicated security or incident response policy page, which are areas for improvement. Privacy compliance is addressed with a privacy policy and cookie policy, but no active cookie consent mechanism is implemented. Contact information is clearly provided, enhancing trust and transparency. Overall, rokycany.cz is a trustworthy and professional municipal website with good content quality and business credibility. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing detailed security and incident response policies to strengthen compliance and user trust.

M

Městský úřad Spálené Poříčí

spaleneporici.cz

50

The website spaleneporici.cz serves as the official digital presence of the municipal office of Spálené Poříčí, a town in the Czech Republic. It provides residents and visitors with comprehensive information about the town, including local news, official documents, event calendars, and tourism-related content. The site targets local citizens, tourists, and stakeholders interested in municipal services and community activities. The business model is government/public service oriented, focusing on transparency and community engagement. The domain is well-established since 2001, reinforcing its credibility and trustworthiness. Technically, the website employs a modern tech stack including HTML5, CSS, JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate. It uses the vismo CMS platform, which is common for Czech municipal websites. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting and domain registration are consistent with Czech providers, supporting local presence. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA to protect forms, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could be enhanced by adding security headers and formal policies. Overall, the website is a trustworthy, well-maintained municipal portal with good content quality and user experience. It demonstrates compliance with privacy regulations and employs standard security practices. Strategic improvements in transparency around security policies and incident handling would further strengthen its posture.

G

Gesellschaft für Energie und Klimaschutz Schleswig-Holstein

eksh.org

54

Gesellschaft für Energie und Klimaschutz Schleswig-Holstein (EKSH) is a German non-profit organization dedicated to promoting projects in energy and climate protection. The organization supports scientific research, education, and community initiatives focused on sustainable mobility, renewable energy, sector coupling, and energy efficiency. EKSH positions itself as a regional leader in Schleswig-Holstein, providing approximately 2 million euros annually for pilot projects and programs. The website is professionally designed, well-structured, and provides comprehensive information about its themes, projects, and news updates. Technically, the site is built on TYPO3 CMS, uses HTTPS, and includes modern web technologies such as Google reCAPTCHA for form security. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the WHOIS data for the domain is unavailable, which limits domain registration trust verification. Despite this, the website's content quality, contact transparency, and social media presence support its legitimacy.

I

Intercontinental Exchange

theice.com

66

Intercontinental Exchange (ICE) operates a comprehensive digital platform offering global exchanges, clearing services, market data, and technology solutions primarily in the energy and financial sectors. The website demonstrates a strong market position with a focus on innovation and digitization of traditional markets. Technically, the site uses modern web technologies including React and various JavaScript libraries, delivering a professional and responsive user experience. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers and explicit privacy policies are missing. The absence of WHOIS data is notable but likely due to privacy or registry restrictions rather than malicious intent. Overall, the site is professional, trustworthy, and business-focused.

V

Vleeko

vleeko.com

49

Vleeko is a well-established digital marketing agency based in Mexico, with a strong presence in major cities such as CDMX, Puebla, Hermosillo, and Guadalajara. The company offers a comprehensive suite of digital marketing services including brand design, web design, Google Ads, Facebook Ads campaigns, social media management, and digital strategies. With over 20 years of experience and multiple certifications from Google, AMIPCI, HubSpot, and others, Vleeko positions itself as a trusted partner for businesses seeking to enhance their digital footprint. The website reflects a professional and consistent brand image, supported by good content quality and clear navigation.

G

GLAJ-Vaud

glaj-vaud.ch

48

GLAJ-Vaud is a Swiss non-profit umbrella organization coordinating youth activities in the canton of Vaud. It provides services such as training (FORJE), platforms for youth engagement, and project management for youth-related initiatives. The website is built on WordPress with WooCommerce and uses modern SEO and performance tools. The technical infrastructure is solid with HTTPS and security best practices, though some security headers could be improved. Privacy compliance is basic, lacking explicit privacy and cookie policies. Contact is available via a member login and a contact page. Overall, the site is professional and trustworthy but could enhance privacy and security transparency.