Security Directory

S

Statutární město Brno

damenavas.cz

67

Dáme na vás is an official civic engagement platform operated by the Statutární město Brno (City of Brno), enabling residents to participate in city development through participatory budgeting, civic proposals, and surveys. The platform targets local citizens, students, and businesses, providing tools to influence municipal decision-making. The website is well-branded, consistent with official city identity, and offers multiple engagement channels including social media and newsletter subscription with GDPR-compliant consent. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript libraries such as React and jQuery, and integrates Matomo analytics configured for privacy. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and incident response policies are not visibly published. Overall, the website is trustworthy and professionally maintained, with no signs of malicious activity or suspicious content. The domain registration aligns with the municipal nature and age of the platform, supporting legitimacy. Recommendations include publishing security and incident response policies, enhancing security headers, and adding a vulnerability disclosure mechanism.

J

Jiřetín pod Bukovou

jiretinpb.cz

47

Jiřetín pod Bukovou operates an official municipal website serving residents and visitors with local government information, news, documents, and event calendars. The site positions itself as the authoritative source for municipal services and community engagement in the Czech Republic. The business model is governmental, focusing on public service and transparency. Technically, the website is built on WordPress with a modern theme and plugins, including Google Analytics for tracking and OneSignal for push notifications, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search visibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a notable gap. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

S

Statutární město Brno

brno.cz

66

The website www.brno.cz serves as the official digital presence of the statutory city of Brno, Czech Republic. It provides comprehensive municipal services, administrative information, news, and resources for residents and visitors. The site is well-branded, consistent, and targets a broad audience including citizens, businesses, and tourists. It leverages modern web technologies and a robust CMS platform (Liferay) to deliver a professional and accessible user experience. The site integrates privacy-respecting analytics (Matomo) and maintains a strong social media presence across major platforms. However, the absence of visible cookie consent mechanisms and security policy disclosures suggests areas for compliance improvement. Technically, the site uses a modern tech stack including React, jQuery, and Clay UI components within the Liferay framework. Performance and mobile optimization are good, with accessibility features implemented. Security posture is strong with HTTPS enforced and privacy-conscious analytics configuration, though additional HTTP security headers and published security policies would enhance trust. The WHOIS data is unavailable due to registry privacy, which is common for government domains, but the site content and branding strongly support legitimacy. Overall, the site is a reliable and professional government portal with minor gaps in privacy compliance and security transparency. Strategic recommendations include implementing a cookie consent banner, publishing security and incident response policies, and adding vulnerability disclosure information to strengthen user trust and regulatory adherence.

T

Toplage Immobilien GmbH

toplage-immobilien.de

45

Toplage Immobilien GmbH is a regional real estate brokerage firm based in Kiel, Germany, specializing in property sales, rentals, and related consulting services. The company is part of the larger wankendorfer Unternehmensgruppe, which enhances its market position and resource access. The website is professionally designed using TYPO3 CMS and targets property buyers, sellers, and renters in Schleswig-Holstein with clear service offerings and contact options. Technical infrastructure includes modern JavaScript libraries and privacy-conscious analytics via Matomo with cookies disabled. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website reflects a trustworthy and professional real estate business with strong compliance to GDPR and user privacy.

R

Rada vysokých škol

radavs.cz

59

Rada vysokých škol is a Czech non-profit council representing the interests of higher education institutions. The website serves as an official communication platform providing updates on meetings, resolutions, and organizational information. It targets academic institutions, government bodies, and students within the Czech Republic. The organization is well-established with a domain age since 2001 and affiliation with Charles University, enhancing its credibility. Technically, the website uses modern JavaScript libraries such as jQuery and bxSlider, and integrates Matomo for analytics, reflecting a moderate level of digital maturity. Hosting appears to be managed by Charles University infrastructure, ensuring reliability. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, it lacks visible advanced security headers and does not provide explicit security policies or incident response contacts. No vulnerability disclosure or security.txt files are present, which could be improved to enhance transparency and security posture. Overall, the website is trustworthy and professional, with good content quality and business credibility. Strategic recommendations include enhancing security headers, publishing security and privacy policies, and adding vulnerability disclosure mechanisms to strengthen compliance and user trust.

U

United Front

united-front.info

44

United Front is an international antiimperialist coalition focused on combating fascism, war, and environmental destruction. The organization hosts congresses, webinars, and publishes resolutions to coordinate efforts among over 120 member organizations and individuals worldwide. The website serves as an informational and organizational platform for these activities, targeting activists and political groups globally. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, intl-tel-input, and Summernote for rich text editing. Google Analytics is integrated for visitor tracking. The site is mobile-optimized with a moderate performance profile. However, there is no evidence of a CMS or advanced hosting details. The website lacks explicit privacy and cookie policies, which is a gap in compliance. From a security perspective, the site uses HTTPS and external secure resources but lacks visible security headers and formal security policies. No contact information or incident response channels are provided, limiting transparency. The WHOIS data is unavailable due to registry limitations or privacy protection, which is understandable given the political nature of the organization but reduces trust slightly. Overall, the website is functional and informative but would benefit from improved privacy compliance, enhanced security headers, and clearer contact information to strengthen trust and security posture.

W

Westfunk GmbH & Co. KG

westfunk.de

52

Westfunk GmbH & Co. KG is a regional media service company based in Essen, Germany, specializing in local radio broadcasting and advertising services. As part of the FUNKE MEDIENGRUPPE, it serves as the backbone for twelve independent local radio stations across the Ruhrgebiet, Niederrhein, and Sauerland regions. The company offers technical, marketing, and digital product services to local radio stations and provides advertising sales support through FUNKE MediaSales. The website reflects a strong market position as a regional market leader in several broadcast areas, supported by professional content and clear business messaging. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, ensuring good SEO and user experience. It employs Google Tag Manager for analytics and uses a consent management platform for GDPR-compliant cookie handling. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, indicating a secure and modern infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though some security headers could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and user consent mechanisms. No critical vulnerabilities or suspicious content were detected. Overall, Westfunk's website demonstrates a mature digital presence with strong business credibility, good technical implementation, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving accessibility features to further strengthen the site’s security and user experience.

The website info.mojedatovaschranka.cz serves as an official government portal providing comprehensive information and services related to 'Datové schránky' (Data Mailboxes), a digital communication system between citizens, businesses, and government institutions in the Czech Republic. Operated by Česká pošta, s.p., the portal offers detailed guidance, multiple secure login methods, technical requirements, and up-to-date news, positioning itself as a trusted and authoritative source for electronic communication with the state. From a technical perspective, the site employs modern web technologies including jQuery, Slick Carousel, and a government design system ensuring good mobile optimization, accessibility, and user experience. The integration of a chatbot enhances user support. While performance is moderate, the site is well-structured and SEO optimized, reflecting a mature digital infrastructure. Security-wise, the portal enforces HTTPS and offers multiple secure authentication methods such as mobile keys and citizen identity logins. However, explicit security headers are not detected, and no vulnerability disclosure or incident response contacts are published, indicating areas for improvement. Privacy compliance is strong with a clear privacy policy and GDPR adherence, though cookie consent mechanisms are absent. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility as a government service portal. The lack of WHOIS data for the subdomain is noted but does not detract from legitimacy given the official branding and content. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing vulnerability disclosure information to further strengthen security posture and user trust.

S

Skala

skaladesign.ch

47

Skala is a Zurich-based graphic design and branding studio founded in 2022, specializing in creative services for institutions, brands, and individuals within culture, education, and business sectors. The website showcases a portfolio of diverse projects emphasizing visual identity, branding, and design innovation. The company positions itself as a niche creative agency with a consistent and professional brand image. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Ajaxify, with Google Analytics integrated for user tracking. The site is mobile-optimized and demonstrates good performance and SEO practices. Security-wise, the site uses HTTPS with an excellent SSL configuration but lacks security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. Overall, the website is professional and trustworthy with moderate risk due to missing privacy and security policy disclosures.

L

Lemon Squeezy, LLC

lemonsqueezy.com

70

Lemon Squeezy, LLC operates a comprehensive SaaS platform focused on payments, subscriptions, and tax compliance for software companies and digital creators. Positioned as an all-in-one solution, it offers merchant of record services, fraud prevention, multi-currency support, and marketing tools, serving thousands of customers globally. The platform emphasizes ease of use with no-code checkout forms and developer-friendly APIs. Technically, the website is built on Webflow CMS, uses modern JavaScript libraries like jQuery, and integrates Stripe for payment processing, ensuring PCI compliance. Analytics are handled via privacy-focused services like Fathom and Cloudflare Insights. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though cookie consent mechanisms and explicit security policies could be improved. WHOIS data is unavailable, which slightly impacts trust but is mitigated by strong branding, testimonials, and external trust signals. Overall, Lemon Squeezy presents a professional, secure, and user-friendly platform with a solid market position in the SaaS payments space.

L

Lemon Squeezy, LLC

lmsqueezy.com

70

Lemon Squeezy, LLC operates a professional SaaS platform focused on providing payments, subscription management, global tax compliance, and marketing tools tailored for software companies and digital product creators. The company positions itself as a trusted all-in-one solution, serving thousands of customers globally with a strong emphasis on ease of use and developer friendliness. Their platform integrates with major payment processors like Stripe and supports a wide range of payment methods and currencies. Technically, the website is built using modern web technologies including Webflow CMS, jQuery, and REST APIs with webhook support. Hosting and CDN services appear to be provided via Cloudflare, ensuring fast performance and good mobile optimization. The site demonstrates good SEO and accessibility practices, with comprehensive documentation and developer resources. From a security perspective, the site enforces HTTPS and uses Stripe for secure payment processing. AI-driven fraud prevention is highlighted as a key feature. However, explicit security headers and a published security policy or incident response contacts are not evident. Privacy compliance is partially addressed with a privacy policy and terms of service, but no visible cookie consent mechanism was detected. Overall, the website presents a high level of professionalism and trustworthiness, though the absence of WHOIS data and cookie consent slightly reduce transparency. The platform is well-suited for SaaS businesses seeking a comprehensive payment and subscription solution with integrated marketing and reporting tools.

K

KV GmbH

shopping.eu

47

Shopping.eu operates as a European e-commerce search aggregator, providing users with the ability to search thousands of online stores across multiple European countries. The platform targets a broad audience of European and international online shoppers, offering product suggestions and country-specific portals to enhance the shopping experience. The website is branded consistently and linked to KV GmbH, indicating a medium-sized business with a focus on e-commerce aggregation. Technically, the website employs modern JavaScript libraries such as jQuery, Google Tag Manager, and Matomo analytics, ensuring a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, contributing to a secure and user-friendly experience. However, some accessibility features are basic, and there is room for improvement in SEO and performance optimization. From a security perspective, the site benefits from HTTPS and secure form submissions but lacks visible security headers and explicit privacy or cookie policies. No contact information for security incidents or vulnerability disclosures are present, which could be improved to enhance trust and compliance. The WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains and does not raise immediate concerns. Overall, Shopping.eu presents a legitimate and functional e-commerce aggregator platform with moderate security and privacy compliance. Strategic improvements in privacy policy transparency, security headers, and incident response contact information are recommended to strengthen its security posture and user trust.

M

Matador Network

matadornetwork.com

66

Matador Network is a well-established global media brand focused on modern adventure and travel content. Founded in 2006, it offers a rich portfolio of travel guides, original video series, and lifestyle content targeting modern adventurers and travelers. The website demonstrates a mature digital presence with professional design, clear navigation, and mobile optimization. The business model centers on content publishing and advertising revenue, positioning Matador as a niche leader in travel media. Technically, the site is built on WordPress, uses modern JavaScript libraries like jQuery, and integrates analytics and advertising technologies such as Google Analytics, Google Tag Manager, and Facebook Pixel. Hosting and DNS services involve GoDaddy and Cloudflare, respectively, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced and domain status protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms, but lacks explicit security policies or incident response contacts. Overall, the site is trustworthy, professional, and safe for general audiences.

Snipcabin is a small technology company offering a SaaS platform focused on organizing notes and links online. The service emphasizes ease of use with features such as tagging, nested collections, and one-click copying of notes. The website presents a professional and consistent brand image with clear navigation and mobile optimization. The business targets general users seeking productivity tools for note management and link organization. The company offers a 14-day free trial to attract new users without upfront payment requirements. Technically, the website uses modern front-end technologies including Bootstrap 4.6.2, jQuery 3.6.0, and Font Awesome 6.7.2, with Google Fonts for typography. The site is responsive and performs moderately well, though no CMS or hosting provider details are evident. SEO and accessibility features are basic but functional. No analytics or tracking scripts were detected, indicating a privacy-conscious approach or minimal data collection. From a security perspective, the site lacks explicit security headers and does not provide a security policy or incident response information. HTTPS status is unknown from the provided data but is recommended. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is limited; while a privacy policy and terms of service exist, there is no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to a company email address, with no phone or physical address provided. Overall, Snipcabin presents as a legitimate small tech business with a focused product offering. The website is well designed and user-friendly but could improve in security posture and privacy compliance. Strategic recommendations include implementing security headers, adding cookie consent, and publishing incident response details to enhance trust and compliance.

U

Unyer

unyer.com

50

Unyer is a global organization founded in 2021 that brings together leading independent professional services firms under a Swiss Verein structure. The company focuses on providing seamless international legal and business consulting services by combining global expertise with local insights. Its member firms include well-known entities such as Fidal, KWR, Luther, and Pirola Pennuto Zei & Associati. The website presents a professional image with a modern design and clear navigation, targeting international businesses seeking expert advisory services. Technically, the site is built on WordPress 6.8, utilizing modern libraries like jQuery and Slick Carousel, and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and terms of service pages, though a cookie consent mechanism is present. The lack of WHOIS registration data is a notable concern, suggesting either privacy protection or an unregistered domain, which impacts trustworthiness. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

N

Nasscom Foundation

nasscomfoundation.org

63

Nasscom Foundation is a well-established non-profit organization focused on leveraging technology to drive social impact in India. Their programs span digital literacy, women entrepreneurship, skilling, social innovation, and inclusion, targeting marginalized communities and NGOs. The website reflects a mature digital presence with professional design, clear navigation, and active content updates. Technically, the site uses modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and some security best practices, though additional security headers could be implemented. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site projects high trustworthiness and business credibility despite the absence of WHOIS data due to privacy protection. Strategic recommendations include enhancing security headers, maintaining privacy compliance, and continuing to build trust through transparency and certifications.

A

AGA Service Company

sellallianzpartners.com

72

The website sellallianzpartners.com serves as a digital brochure portal for Allianz Partners insurance agents, enabling them to customize and distribute travel protection plan brochures efficiently. The platform targets insurance agents and agencies, providing a B2B service model that supports Allianz's market presence in the insurance sector. The site is branded consistently with Allianz Partners and operated by AGA Service Company, a known entity within the Allianz group. The domain is relatively new, created in 2022, aligning with the launch of this digital service. Technically, the website employs a WordPress CMS with standard web technologies including jQuery and OneTrust for cookie consent management. Hosting appears to be provided by GoDaddy, with Google Tag Manager integrated for analytics. The site is mobile-optimized and offers a good user experience, though SEO optimization is minimal. Accessibility features are basic but present. From a security perspective, the site uses HTTPS and enforces domain transfer protection. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. The cookie consent mechanism is robust and GDPR compliant, reflecting good privacy practices. No incident response or security policy pages were found, indicating room for improvement in transparency and security governance. Overall, the website is trustworthy and professionally maintained, with moderate technical maturity and a solid privacy compliance posture. Strategic improvements in security headers, DNSSEC, and SEO could elevate the site's security and visibility further.

R

RegFox

regfox.com

69

RegFox is a US-based technology company founded in 2013 that provides a powerful and affordable SaaS event registration platform. It targets event organizers across various sectors including conferences, workshops, camps, and corporate events. The platform offers extensive features such as a drag-and-drop event page builder, branding control, conditional logic, CRM, check-in apps, and integrations with third-party tools. RegFox positions itself as a market leader in affordable event registration software with transparent pricing and strong customer support. Technically, the website is built on Webflow CMS and employs a modern tech stack including jQuery, Google Tag Manager, and multiple analytics and marketing tools. The site is well-optimized for mobile and SEO, with excellent design and user experience. Security posture is good with HTTPS and modern captcha, though explicit security headers and policies could be improved. The WHOIS data is not publicly available, which slightly reduces trust but the business presence and customer reviews support legitimacy. Overall, RegFox demonstrates a mature digital infrastructure and a strong market position in the event registration space.

F

FanaticZine

fanaticzine.com

45

FanaticZine is a Sri Lanka-based digital agency specializing in web design, web development, mobile app development, and social media marketing. Established in 2008, the company emphasizes commitment and long-term client relationships, offering a range of services including software architecture, UI design, and full stack development. Their website reflects a professional and consistent brand image targeting businesses seeking digital transformation solutions. Technically, the site is built on WordPress with modern plugins and libraries, providing a moderate performance and good mobile optimization. Security measures include HTTPS and Google reCAPTCHA, but lack advanced DNS security and security headers. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

S

SAARC Energy Centre (SEC)

saarcenergy.org

37

SAARC Energy Centre (SEC) is a regional organization established in 2005 under the SAARC framework to promote energy cooperation among South Asian countries. The website serves as an information and collaboration platform offering research publications, webinars, and resources focused on renewable energy, energy trade, and efficiency improvements. Technically, the site is built on WordPress with common plugins and moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy or security policies. WHOIS data is unavailable due to privacy or registry restrictions, slightly impacting trust. Overall, the site is professional and trustworthy with room for security and privacy improvements.

C

CSC

cscdbs.com

84

CSC Digital Brand Services is a leading enterprise-focused provider specializing in securing corporate digital assets, including domain management, brand protection, and fraud prevention. The company targets large organizations and Fortune 500 clients, offering comprehensive cybersecurity and domain security solutions. Their market position is strong, supported by professional branding, extensive service offerings, and a global presence. Technically, the website is built on Joomla CMS with modern libraries such as jQuery and Materialize CSS, hosted partly on Microsoft Azure Blob Storage. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. WHOIS data is missing, which raises transparency concerns but does not detract from the overall legitimacy indicated by the website content and external references. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, CSC presents a professional and trustworthy digital presence with room for minor security and transparency enhancements.

F

FazWaz Property Group

fazwazgroup.com

60

FazWaz Property Group operates a technology-driven real estate platform focused on Southeast Asia and global markets, providing property search, brokerage, and investment services. Founded in 2015, the company leverages integrated market data and digital tools to simplify property transactions for buyers, renters, and investors. Their market position is strengthened by multiple localized brands and a professional team with clear leadership. Technically, the website uses modern web technologies including jQuery, Google Analytics, and reCAPTCHA, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS implied and reCAPTCHA implemented, but lacks explicit security headers and incident response information. Privacy and cookie policies are comprehensive and GDPR compliant, hosted on a partner domain. The domain WHOIS data is missing, which raises concerns about registration transparency but does not detract significantly from the professional presentation and trust signals on the site. Overall, the website is well-designed, content-rich, and trustworthy for general audiences.

S

Stamul, LLC

userecho.com

74

UserEcho is a SaaS provider specializing in customer support solutions including feedback forums, helpdesk ticketing, knowledge bases, and live chat. The company positions itself as a leader in small-business help desk solutions, supported by over 27,000 customers and positive testimonials. The website is professionally designed, mobile-optimized, and uses modern web technologies and analytics tools such as Bootstrap, jQuery, PostHog, and Microsoft Clarity. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy and cookie policies are present and GDPR compliance is indicated. No direct contact emails or phone numbers are publicly listed, and no explicit security or incident response policies are found. Overall, the website is trustworthy, business-focused, and safe for general audiences.

J

JERA GmbH

jera-software.de

63

JERA GmbH is a specialized software company based in Germany focusing on developing interfaces for financial accounting systems tailored for e-commerce and multichannel businesses. They also provide ERP software licensing and support, particularly for mesonic WinLine. The company has a strong market position in the German-speaking region and was recently acquired by JTL-Software GmbH, enhancing its portfolio and market reach. Their website reflects a professional and active business with up-to-date news and partnerships. Technically, the site is built on WordPress with modern plugins and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the website is trustworthy, GDPR compliant, and provides clear contact information and business details.

A

AFC Capital Partners

afccapital.org

64

AFC Capital Partners is a specialized investment firm focusing on sustainable and climate-resilient infrastructure projects across Africa. Leveraging the expertise and network of its parent company, Africa Finance Corporation (AFC), it mobilizes institutional capital through ESG-centric strategies to address Africa's infrastructure needs. The website reflects a mature digital presence with professional design, multi-language support, and comprehensive policy disclosures. Technically, the site uses modern libraries and frameworks, is hosted on AWS infrastructure, and implements key security headers and HTTPS. Security posture is strong with room for improvement in additional headers and incident response transparency. Overall, the site is trustworthy and aligns well with the business's professional image.

I

International Railway Industry Standard (IRIS)

iris-rail.org

63

The IRIS Portal website represents the International Railway Industry Standard, a globally recognized certification system for rail sector companies. The organization provides certification, audit, and training services aligned with ISO/TS 22163 standards. The website targets rail industry companies and certification bodies, offering resources such as certificate searches, news updates, and membership applications. The business is well-established, with a domain age dating back to 2005, indicating a mature presence in the railway certification market. Technically, the website employs a custom CMS with a technology stack including HTML5, CSS3, JavaScript, jQuery, and Google Maps API. The site is hosted via Hostbasket and uses HTTPS with a good SSL configuration. Performance and mobile optimization are moderate, with room for improvement in accessibility and modern framework adoption. The site includes interactive elements such as charts and maps, enhancing user engagement. From a security perspective, the website demonstrates basic best practices including HTTPS enforcement and CAPTCHA on login forms. However, DNSSEC is not enabled, and no explicit security headers were detected, representing areas for enhancement. No incident response or security policy pages are present, which could improve transparency and trust. No vulnerabilities or exposed sensitive data were found in the content. Overall, the website is professional, trustworthy, and focused on its niche market. It scores well on content quality and business credibility but could improve technical implementation and security posture. Strategic recommendations include enabling DNSSEC, adding security headers, updating libraries regularly, and publishing security and incident response policies to strengthen compliance and user trust.

R

Roima Intelligence

roimaint.com

65

Roima Intelligence is a professional B2B software company specializing in supply chain, manufacturing, and logistics digitalization solutions. The company offers a broad portfolio of products and expert services aimed at optimizing operations and sustainability. Their market position is strong with a global reach and recognized certifications such as ISO 9001:2015. Technically, the website employs modern JavaScript libraries, analytics tools, and a custom CMS platform, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the lack of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, but domain registration inconsistencies should be investigated further.

R

Roima Intelligence

parttrap.com

65

Roima Intelligence is a professional B2B software and consulting company specializing in supply chain, manufacturing, and logistics digitalization solutions. The company offers a broad portfolio of products and expert services aimed at optimizing supply chain planning, automation, and smart factory systems with a strong emphasis on sustainability. Their market position is that of a leading provider with global reach and best-of-breed technology. The website is well-structured, multilingual, and designed to serve business clients in manufacturing and logistics sectors. Technically, the site uses modern JavaScript libraries, analytics tools, and a custom CMS, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a minor concern but does not detract significantly from the overall trustworthiness given the professional presentation and certifications. Overall, the website reflects a mature digital presence suitable for a medium-sized enterprise in the manufacturing technology sector.

E

Elvaco AB

elvaco.com

80

Elvaco AB is a Swedish company specializing in smart metering solutions for utilities and real estate sectors, offering a comprehensive portfolio of hardware and software products including remote meter reading, submetering, and indoor climate control. The company has a strong market presence with over 30 years of experience and more than ten million metering devices integrated globally. Their website demonstrates a mature digital infrastructure with modern JavaScript libraries, multi-language support, and embedded multimedia content. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but does not detract from the professional presentation and business credibility. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, making it a trustworthy digital presence for the company.

A

Armanino LLP

armanino.com

68

Armanino LLP is a large, well-established professional services firm specializing in accounting, business consulting, and technology solutions. Positioned among the top 25 largest firms in the U.S., Armanino offers a broad range of services including advisory, audit, tax, digital transformation, and software consulting. Their target audience includes businesses across multiple industries such as technology, healthcare, manufacturing, and finance. The website reflects a mature digital presence with comprehensive content, client case studies, and a strong brand identity emphasizing AI and innovation. Technically, the website is built on the Sitecore CMS platform and leverages modern JavaScript libraries such as jQuery and Slick Carousel, along with Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and secure form handling, but lacks explicit security headers and a public incident response policy. The WHOIS data is unavailable or missing, which is unusual for a business of this scale and reduces domain trustworthiness from a registration perspective. However, the website content, certifications, and social media presence strongly support the legitimacy of the business. Privacy and cookie policies are comprehensive and GDPR compliant, indicating good privacy compliance. Overall, Armanino LLP presents a professional and trustworthy online presence with room for improvement in security transparency and domain registration clarity.

TwojaFlota.pl is a professional fleet management service platform operated by Volkswagen Group Polska sp. z o.o., offering a comprehensive service program for managing vehicle fleets, primarily targeting companies with multiple vehicles. The website is well-branded with Volkswagen Group affiliations and provides clear information about the program, including downloadable documents, a contact form, and detailed privacy and cookie policies. The technical infrastructure uses modern web technologies including jQuery, js-cookie, Google Analytics, and Google Tag Manager, hosted via home.pl S.A., a reputable Polish hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS implied, cookie consent implemented, and no exposed sensitive data, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the website demonstrates a solid business credibility and privacy compliance, with no signs of malicious or adult content.

I

IT-Recht Kanzlei

it-recht-kanzlei.de

47

IT-Recht Kanzlei is a specialized German legal service provider focusing on IT law, offering comprehensive legal text packages and digital tools tailored for online shops and businesses. Recognized as a top economic law firm in 2024, it holds a strong market position as the largest legally organized trader support in IT law in Germany. The company provides subscription-based legal services, including GDPR-compliant documents, trademark registration, and legal consulting, supported by a mature digital infrastructure. Technically, the website is built on a custom CMS with modern JavaScript libraries and privacy-conscious analytics (Matomo), hosted by a reputable German provider. Security posture is solid with HTTPS and some best practices, though explicit security headers and policies are not publicly detailed. Privacy compliance is partial, lacking visible privacy and cookie policies in the provided content. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

VetFolio is a professional online education platform specializing in veterinary continuing education and certifications. It serves a broad audience of veterinary professionals including veterinarians, nurses, technicians, and practice managers. The platform offers a variety of RACE-approved courses in multiple formats such as videos, webinars, podcasts, and live virtual events, positioning itself as a respected resource in the veterinary education market. The business model is subscription-based with additional paid certifications and premium content offerings. The website demonstrates a high level of digital maturity, leveraging modern web technologies including Ember.js, Google Analytics, Microsoft Clarity, and Stripe for payment processing. The site is well-optimized for mobile devices and provides a seamless user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be explicitly confirmed or improved. Privacy compliance is evident with a comprehensive privacy policy and cookie banner. However, the absence of WHOIS data for the domain www.vetfolio.com introduces some uncertainty regarding domain registration transparency, which slightly impacts the overall trust assessment. Overall, VetFolio presents as a credible and professional educational service with solid technical and security foundations.

K

KfW Entwicklungsbank

kfw-entwicklungsbank.de

66

KfW Entwicklungsbank is a German development bank operating under the KfW Bankengruppe, focusing on international development financing and cooperation with governmental and EU institutions. The website reflects a mature, professional organization with a strong emphasis on transparency, sustainability, and global development impact. The digital infrastructure employs modern technologies including responsive design, consent management, and analytics, supporting a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. Overall, the site is trustworthy, well-maintained, and aligned with the organization's public mission.

D

DEG - Deutsche Investitions- und Entwicklungsgesellschaft

deginvest.de

63

DEG - Deutsche Investitions- und Entwicklungsgesellschaft is a large German finance institution specializing in financing, promoting, and advising private companies investing in developing and emerging markets. It operates as a subsidiary of the KfW Bankengruppe, offering tailored financial solutions including loans, equity investments, and advisory services with a strong focus on impact and climate-related projects. The website reflects a professional and well-structured digital presence with comprehensive content targeting German companies, financial institutions, and investors interested in sustainable development and international investments. Technically, the site employs modern JavaScript libraries, analytics tools, and a consent management platform, ensuring good performance, mobile optimization, and privacy compliance. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, DEG demonstrates a credible and trustworthy online presence aligned with its business objectives and regulatory requirements.

K

KfW IPEX-Bank

kfw-ipex-bank.de

63

KfW IPEX-Bank is a specialized financial institution within the KfW Bankengruppe, focusing on international project and export financing primarily for the German and European markets. The bank offers tailored financing solutions including project financing, export credits, and structured trade finance, positioning itself as a key player in supporting sustainable economic growth and infrastructure development. The website reflects a professional and corporate image with clear branding and a focus on sustainability and innovation in financing solutions. Technically, the website employs modern JavaScript libraries, responsive design, and integrates advanced analytics and consent management tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website demonstrates high business credibility and trustworthiness, suitable for its target audience of corporate and institutional clients.

K

KfW Bankengruppe

kfw.de

56

KfW Bankengruppe is a prominent German promotional bank dedicated to supporting sustainable development and innovation both domestically and internationally. The website reflects a mature digital presence with comprehensive information on funding programs for private individuals, companies, and public institutions. It also highlights KfW's subsidiaries and international financing activities, positioning it as a key player in the finance and government sectors. The site is well-branded, professionally designed, and optimized for accessibility and mobile use. Technically, the website employs modern JavaScript frameworks, responsive design, and integrates advanced analytics and consent management tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced and secure form handling, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is robust, with clear privacy and cookie policies and a consent mechanism in place. Overall, the security posture is solid with no evident vulnerabilities or suspicious content. The domain registration aligns with the organization's identity, reinforcing trustworthiness. The site serves as a reliable resource for stakeholders seeking financial support and information about KfW's services and initiatives.

I

id Verlag

ibr-online.de

65

ibr-online is a specialized German legal information portal operated by id Verlag, focusing on construction, architects, and real estate law. It provides comprehensive legal databases, case law, commentaries, seminars, and practical tools tailored for legal professionals and industry experts. The website demonstrates a consistent and professional brand presence with a clear target audience in the legal and construction sectors. Technically, the site uses a basic but functional tech stack including jQuery and custom scripts, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and published security policies. Privacy compliance is partially met with a comprehensive privacy policy and terms of service, though no cookie consent mechanism is evident. Overall, the site is trustworthy and well-positioned in its niche market.

T

Tapad, Inc.

tapad.com

67

Tapad, Inc. is an established enterprise technology company founded in 2002, specializing in digital cross-device identity graph solutions that enable brands, agencies, and platforms to connect with consumers across multiple devices. Their flagship offering, The Tapad Graph, supports programmatic targeting, media measurement, attribution, and personalization at scale. The company maintains a strong market position as a leading provider in the digital marketing technology space, supported by a robust partner ecosystem and comprehensive service portfolio including Switchboard, Hashed Email, and IP Onboarding. Technically, the website demonstrates a mature digital infrastructure leveraging modern JavaScript libraries such as jQuery, GSAP, ScrollMagic, and Font Awesome, hosted on AWS infrastructure. The site is mobile-optimized with good SEO and accessibility practices, though some improvements in accessibility and security headers could be made. Tracking and marketing tools are implemented with user consent mechanisms, reflecting a good privacy compliance posture. From a security perspective, Tapad employs HTTPS with strong SSL configuration and integrates cookie consent to comply with privacy regulations. However, explicit security policies and incident response information are not publicly available, and DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content, confirming legitimacy and long-term domain ownership. Overall, Tapad's website and business demonstrate high professionalism, trustworthiness, and compliance with privacy standards. The company is well-positioned in the technology sector with a clear focus on data-driven marketing solutions. Strategic recommendations include enhancing security headers, publishing security policies, enabling DNSSEC, and adding vulnerability disclosure mechanisms to further strengthen security posture and trust.

B

Bayerische Staatsregierung

bayern.de

56

The website www.bayern.de serves as the official digital portal for the Bavarian State Government, providing comprehensive information on government activities, citizen services, press releases, and political topics relevant to the Free State of Bavaria. It targets citizens, media, and stakeholders interested in Bavarian governance and public affairs. The portal is well-positioned as a trusted government source with a large audience and extensive content offerings. Technically, the site is built on WordPress 6.8.2, leveraging modern front-end libraries such as Bootstrap, jQuery, and Owl Carousel for responsive and interactive user experience. It integrates Matomo Analytics with explicit user consent, ensuring privacy compliance. Accessibility features such as easy language, sign language support, and read-aloud functionality demonstrate a commitment to inclusivity. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, it lacks visible security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website exhibits a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its audience. Strategic improvements in security headers and incident response transparency would further strengthen its security stance.

A

Acuity Scheduling

acuityscheduling.com

74

Acuity Scheduling is a well-established SaaS company specializing in online appointment scheduling software. The platform offers a comprehensive suite of scheduling automation, client management, payment processing, and calendar management tools tailored for businesses and professionals across various sectors. As a subsidiary of Squarespace, Acuity benefits from strong market positioning and integration capabilities, serving over 250,000 customers globally. The website reflects a mature digital presence with excellent design, clear navigation, and mobile optimization. Technically, it leverages modern JavaScript libraries, analytics tools like Amplitude, and consent management via TrustArc, indicating a high level of digital maturity. Security posture is solid with HTTPS enforcement and privacy compliance mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

H

Hans im Glück - Spieleverlag für Brettspiel Freunde

hans-im-glueck.de

48

Hans im Glück is a German board game publisher established in 1983, specializing in family and expert board games, including the well-known Carcassonne series. The company has a medium-sized team and a strong market presence in the board game industry, with multiple prestigious awards such as Spiel des Jahres and Deutscher Spielepreis. Their business model focuses on publishing, selling games through a partner webshop (cundco.de), and providing game-related content and support. The website reflects a professional and consistent brand image targeting board game enthusiasts and families. Technically, the website is built on WordPress with modern plugins for SEO, cookie consent, and user interaction. It uses HTTPS with good SSL configuration and integrates push notifications via WonderPush. The site is moderately performant and mobile-optimized, with good SEO practices implemented. However, accessibility features are basic, and some technical improvements could enhance user experience further. From a security perspective, the site employs HTTPS and cookie consent mechanisms but lacks published security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates a standard commercial domain setup without privacy protection, consistent with the business's digital presence. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

A

adesso SE

adesso.de

54

adesso SE is a leading IT service provider in the German-speaking region, specializing in IT consulting and software development to support digital transformation initiatives. The company serves a broad range of industries including automotive, banking, energy, healthcare, manufacturing, and public administration. Their business model focuses on delivering technologically advanced solutions that ensure long-term competitive advantages for their clients. The website reflects a mature digital presence with comprehensive service descriptions, client references, and active engagement through social media and events. Technically, the site employs modern web technologies such as Web Components, Piwik PRO analytics, and responsive design, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and privacy consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

V

Verlag C.H.BECK

chbeck.de

66

Verlag C.H.BECK operates as a prominent German publishing house specializing in literature, academic books, and scientific works. The website serves as a platform to showcase their extensive catalog, author information, and related publishing services, targeting readers and academic audiences interested in history, philosophy, social sciences, and literature. The company maintains a strong market position in Germany with a focus on quality content and accessibility. Technically, the website employs modern JavaScript libraries such as jQuery and Moment.js, integrates Google Tag Manager for analytics, and uses Usercentrics for GDPR-compliant cookie consent management. The hosting infrastructure is linked to Deutsche Telekom, indicating a reliable hosting environment. Security posture is moderate with HTTPS usage and consent management but lacks explicit security headers and published security policies. Accessibility is a key strength, with an advanced accessibility tool embedded to support users with disabilities. Overall, the website is professional, well-structured, and trustworthy, though it would benefit from publishing explicit privacy and security policies and contact information to enhance compliance and user trust.

STRATO GmbH operates a professional web hosting and cloud services platform primarily serving customers in Germany. The analyzed page is a customer login portal providing access to various services including webmail, server login, and cloud storage (HiDrive). The company maintains a strong market position in the German hosting industry with a subscription-based business model. The website content is well-structured, professionally designed, and optimized for mobile and accessibility standards. Technically, the site uses modern frontend technologies such as jQuery 3.6.0, Bootstrap 5, and FontAwesome icons. The presence of cookie consent modals and GDPR-compliant privacy policies indicates a mature digital compliance posture. Performance is moderate with good SEO and accessibility features. Security posture is solid with HTTPS enforced and secure login forms including captcha. However, the absence of explicit security headers and published security policies or incident response contacts suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, safe, and professionally maintained with a good balance of privacy compliance and user experience. Strategic recommendations include enhancing security headers, publishing security policies, and providing clear incident response contacts to further strengthen trust and compliance.

R

Roto Frank AG

roto-frank.com

56

Roto Frank AG is a leading manufacturer specializing in innovative roof windows, window, and door technologies, serving both professional and consumer markets globally. The company positions itself as an innovator with a strong focus on liveable living spaces and professional service. Their website reflects a mature digital presence built on the HubSpot CMS platform, integrating modern marketing and analytics tools such as Google Tag Manager and Cookiebot for GDPR compliance. Security posture is solid with HTTPS enforcement and standard security headers, though the absence of a public security policy and incident response details suggests room for improvement. The lack of WHOIS data slightly impacts domain trust but does not detract significantly from the overall professional presentation. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility features to further strengthen trust and compliance.

P

Proteinbolaget

proteinbolaget.se

56

Proteinbolaget is a Swedish e-commerce retailer specializing in health and fitness products including dietary supplements, drinks, food, and training apparel. The company targets health-conscious consumers primarily in Sweden and the Nordic region, offering well-known brands at competitive prices. The website is professionally designed with clear navigation and localized content, supporting a positive user experience. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper, integrates multiple marketing and analytics tools, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site presents a trustworthy and professional online retail presence with good compliance and technical maturity.

I

Irish Rugby Football Union

irishrugby.ie

54

The Irish Rugby Football Union operates the official website for Irish rugby, providing comprehensive coverage of Ireland's rugby teams, provincial games, and community rugby activities. The site serves a large audience of rugby fans and stakeholders in Ireland, offering news, fixtures, ticketing, and merchandise services. The organization is well-established with a domain age dating back to 2001, reflecting its longstanding presence in the sports sector. Technically, the website leverages a modern technology stack including WordPress CMS, Bootstrap, Vue.js, and various JavaScript libraries to deliver a responsive and engaging user experience. Hosting and content delivery utilize Gandi as registrar and Cloudfront CDN for media assets, ensuring reliable performance. SEO and mobile optimization are well addressed, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No privacy or cookie policies were detected in the provided content, indicating potential compliance gaps with GDPR and related regulations. Social media presence is strong, supporting community engagement. Overall, the website is professional and trustworthy with good business credibility. However, improvements in privacy compliance and security hardening are advised to mitigate risks and enhance user trust.

T

TAK OnlineAkademie

tak-onlineakademie.de

59

TAK OnlineAkademie operates as a specialized online learning platform focused on technical automotive (Kfz) education, offering interactive courses for official exam preparation and continuing education. The business targets professionals and trainees in the automotive sector within Germany, positioning itself as a niche educational provider. The website is built on a modern technology stack including jQuery and Bootstrap, hosted on reputable German servers (Hetzner), and incorporates a GDPR-compliant cookie consent mechanism via Usercentrics. Security measures include CSRF tokens and secure login forms, though HTTP security headers are not explicitly detected. Overall, the site is accessible, professionally designed, and provides relevant content for its audience.

S

Spitex Schweiz

spitex.ch

62

Spitex Schweiz is the national umbrella organization for Spitex cantonal associations and other professional home care providers in Switzerland. The organization focuses on coordinating professional home care and support services, advocacy, education, and providing information to clients and caregivers. The website reflects a well-established, large non-profit entity with a clear mission and strong market position within the Swiss healthcare sector. Technically, the site uses modern JavaScript libraries such as jQuery and integrates Sentry for error tracking, indicating a mature digital infrastructure. The cookie consent mechanism is implemented with granular user controls, supporting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.