Security Directory

I

International Data Spaces Association

internationaldataspaces.org

58

The International Data Spaces Association (IDSA) operates as a professional association dedicated to fostering a secure and sovereign system of data exchange to empower participants in the global digital economy. Their core mission revolves around enabling smart services and innovative cross-industry business processes while ensuring data sovereignty remains with data owners. The association is well-positioned as a recognized entity in the technology sector, focusing on data security and digital economy standards. The website reflects a medium-sized organization founded in 2018, with consistent branding and a clear business focus on technology and data exchange standards. Technically, the website is built on WordPress using the Divi theme, supplemented by plugins for SEO, event management, cookie consent, and carousel displays. The infrastructure includes modern JavaScript libraries and integrates Google Analytics and Tag Manager for analytics and marketing. Performance and mobile optimization are good, though accessibility is basic. Security practices include HTTPS enforcement and cookie consent mechanisms, but the absence of DNSSEC and security headers suggests room for improvement. From a security perspective, the site demonstrates a solid baseline with HTTPS and domain transfer protections. However, the lack of explicit privacy policies, terms of service, and incident response information limits transparency and compliance visibility. No vulnerabilities or malware indicators were detected, and the content is safe for general audiences. The domain registration is consistent and trustworthy, supporting the legitimacy of the association. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include enabling DNSSEC, publishing privacy and security policies, adding security headers, and providing clear contact channels for security incidents.

CFWA (Coalizione per il Fixed Wireless Access) is an Italian telecommunications industry coalition established in 2016, representing approximately 60 economic operators focused on Fixed Wireless Access technology. The coalition aims to overcome the digital divide and promote broadband and ultra-broadband connectivity as a complementary solution to fiber optics. The website presents a professional and consistent brand image, targeting industry stakeholders and government institutions. Technically, the site is built on WordPress with common plugins and uses HTTPS and Google Analytics. However, the WordPress version is outdated, and security headers are minimal, indicating room for security improvements. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website is trustworthy and functional but would benefit from enhanced security and privacy practices.

A

AIIP - Associazione Italiana Internet Provider

aiip.it

59

AIIP is a well-established Italian association representing small and medium Internet providers, advocating for high standards, regulatory support, and institutional relations to foster the growth of Italy's Internet market. The website is built on a modern WordPress infrastructure with common plugins and technologies, providing a professional and user-friendly experience. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a credible and trustworthy organization with consistent WHOIS data and clear contact information.

AICEP is a Portuguese-based international association representing the communications sector of Portuguese-speaking countries, including postal services, telecommunications, media, and regulatory bodies. It provides a platform for cooperation, training, and advocacy to promote sustainable development and convergence in the Lusophone communications ecosystem. The website is professionally designed using WordPress and Elementor, featuring rich content, multimedia, and social media integration. The technical infrastructure includes modern plugins and Google Analytics for tracking. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain reduces trustworthiness and should be investigated. Overall, the site is safe, well-structured, and serves its target audience effectively.

E

EthicPoint

ethicpoint.eu

47

EthicPoint is an Italian company specializing in certified whistleblowing services based on international ISO standards. Their offerings include whistleblowing system activation, report management, independent audits, privacy compliance support, customized solutions, and training. The company targets Italian organizations needing compliance with whistleblowing regulations and privacy laws. The website is professionally designed, mobile-optimized, and content-rich, reflecting a niche leader position in the Italian market. Technically, the site runs on WordPress with modern plugins and libraries, providing moderate performance and good SEO. Security posture is strong with HTTPS and secure forms, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are published. Privacy compliance is well addressed with clear policies and consent mechanisms. Contact information is comprehensive, including email, phone, and a detailed contact form. The domain registration is consistent with the business profile, enhancing trustworthiness.

W

Webwerk

webwerk.ch

52

Webwerk is a small Swiss technology service provider specializing in professional Apple Mac support, web design, and internet services. The company targets Apple users and clients seeking web presence solutions, operating primarily in Schaffhausen, Switzerland. Their website reflects a focused business model offering a range of services including Macintosh support, emergency services, private training, remote support, and web hosting. The site is professionally designed with clear navigation and German language content, supporting their local market position. Technically, the website is built on WordPress CMS using popular plugins such as Yoast SEO, Contact Form 7, Complianz GDPR, and LayerSlider. The infrastructure includes modern JavaScript libraries and Google Maps integration. Performance is moderate with good mobile optimization and basic accessibility features. However, some PHP warnings visible in the HTML source indicate minor backend issues that should be addressed. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR. While no critical vulnerabilities are evident, the absence of explicit security headers and incident response policies suggests room for improvement. The domain registration is privacy protected but consistent with the business age and profile, indicating legitimacy. Overall, Webwerk presents a trustworthy and professional online presence suitable for its niche market. Strategic improvements in backend error handling, security header implementation, and publishing security policies would enhance their security posture and compliance maturity.

Q

Quadriga Communication GmbH

quadriga-communication.de

49

Quadriga Communication GmbH is a specialized PR agency focused on the finance and publishing sectors, offering services such as communication strategies, corporate publishing, event management, and product communication. The company positions itself as a trusted partner for financial institutions and publishers, leveraging a broad network and expertise to enhance client reputation and product sales. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress using the Avada theme and several plugins for enhanced UI and multimedia content. The site is mobile-optimized and SEO-friendly but lacks some privacy and security policy disclosures. Security posture is generally good with HTTPS enabled and secure forms, but missing security headers and incident response information are noted. Overall, the site is trustworthy and professionally maintained but would benefit from improved privacy compliance and security transparency.

O

OpNet S.p.A.

opnet.it

66

OpNet S.p.A. is a medium-sized Italian telecommunications company specializing in wholesale fiber and 5G network services. With over 20 years of experience in building and managing public networks, OpNet positions itself as a national wholesale operator serving telecommunications providers and wholesale clients. The website reflects a professional business model focused on network infrastructure solutions. Technically, the site is built on WordPress using the Divi theme and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and ActiveCampaign. The site is well-optimized for SEO and mobile devices, with good content quality and clear navigation. Security posture is strong with HTTPS, DNSSEC, and security headers implemented, although no explicit security policy or incident response information is published. Privacy compliance is robust, featuring a comprehensive privacy and cookie policy with consent mechanisms. Overall, the website and domain registration data indicate a legitimate and trustworthy business presence in the telecommunications sector.

F

FMF-WWF Werkzeug- und Prototypenbau GmbH

fmf-wwf.de

40

FMF-WWF Werkzeug- und Prototypenbau GmbH is a medium-sized German manufacturing company specializing in automotive prototyping, tooling, and mechanical processing. The company serves automotive manufacturers with a range of services including development, construction, prototype and tool building, model and fixture construction, and quality assurance. Their market position is that of an established partner in the automotive supply chain, emphasizing precision and quality. Technically, the website is built on WordPress with Bootstrap and jQuery, featuring responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy with clear contact information and partner references.

A

Acri

acri.it

60

Acri is a well-established Italian non-profit organization representing banking foundations and savings banks, with a history dating back to 1912. It coordinates significant social, cultural, and economic development initiatives funded by its members, managing substantial assets and disbursing billions of euros over the years. The website reflects a professional and consistent brand presence, targeting stakeholders in the finance and non-profit sectors. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics platforms, demonstrating a moderate to good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and partner links.

O

Only Stage

onlystage.co.uk

60

Only Stage is a UK-based arts management and production company specializing in representing artists, organizing tours, and producing shows, recordings, documentaries, and competitions. The company also offers consulting and communication services within the performing arts sector. Their website demonstrates a professional and consistent brand presence, targeting performing arts professionals and cultural institutions. Technically, the site is built on WordPress with a modern plugin ecosystem, including event calendars and portfolio management tools, and integrates Iubenda for privacy and cookie compliance. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Overall, the website is well-structured, accessible, and compliant with GDPR, reflecting a mature digital presence. The WHOIS lookup failed due to querying an invalid subdomain, but the domain itself appears legitimate and established. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility.

O

Onetrend

onetrend.pl

51

Onetrend is a digital marketing agency based in Warsaw, Poland, founded in 2019. The company focuses on integrated marketing solutions including SEO, content preparation, and website development. The website is professionally designed using WordPress and modern web technologies, targeting businesses seeking digital marketing services. The technical infrastructure includes WordPress CMS, Google Tag Manager, Cookiebot for consent management, and various JavaScript libraries. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and advanced security headers. Privacy compliance is partial due to absence of explicit privacy and terms of service pages. Overall, the website presents a credible and professional business presence with room for improvement in security and compliance documentation.

A

A-A-Hébergement

a-a-hebergement.com

61

A-A-Hébergement is a French web hosting and domain registration company offering a wide range of hosting solutions including shared hosting, VPS with cPanel/WHM, WordPress optimized hosting, and ASP.NET hosting with Plesk. The company emphasizes quality, reliability, and ease of use, targeting individuals and businesses seeking professional web hosting services. Their market position is supported by over 20 years of experience and a large customer base exceeding 680,000 hosted sites worldwide. The website features customer testimonials, a money-back guarantee, and a comprehensive service portfolio, reinforcing their credibility in the hosting market. Technically, the website is built on WordPress using popular plugins and frameworks such as Visual Composer, Slider Revolution, and Bootstrap. It employs modern web technologies including HTTPS with Let's Encrypt SSL certificates, Google Tag Manager, and Microsoft Clarity for analytics. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some security best practices like HTTP security headers are not visibly implemented, representing an area for improvement. From a security perspective, the site benefits from HTTPS encryption, regular backups with RAID 10 SSD, and a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contacts is noted. The WHOIS data for the domain is missing, which reduces trustworthiness from a domain registration perspective, although the website content and customer reviews suggest a legitimate business. Overall, the website presents a professional and trustworthy front for a mid-sized hosting provider with solid technical infrastructure and compliance posture. Strategic recommendations include enhancing security headers, publishing explicit security policies, and resolving the WHOIS data gap to improve domain trust and transparency.

O

Office de Tourisme de Roubaix

roubaixtourisme.com

43

The website www.roubaixtourisme.com serves as the official tourism office for Roubaix, France, offering a comprehensive range of visitor services including cultural experiences, event bookings, group visits, and local information. It positions itself as a unique tourism hub emphasizing art, heritage, and local experiences. The site is well-structured, professionally designed, and targets tourists and visitors interested in exploring Roubaix's cultural and industrial heritage. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several popular plugins such as Slider Revolution and Yoast SEO. It employs HTTPS with Google reCAPTCHA for form security and integrates Google Analytics and Tag Manager for tracking. Security posture is generally good with encrypted connections and no visible vulnerabilities, though explicit HTTP security headers are not detected. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and active social media presence. Overall, the site is a credible and functional tourism portal but would benefit from clarifying domain registration status and enhancing security headers.

W

wer denkt was GmbH

werdenktwas.de

10

Wer denkt was GmbH operates a professional digital platform focused on facilitating citizen participation and engagement for municipalities and government entities in Germany. The company offers software tools, consulting, and facilitation services to enable effective public dialogue and participation in local governance. The website is well-structured, with clear navigation and relevant content targeting its audience. The business is positioned as an established provider in the government sector with a focus on digital engagement solutions. Technically, the website is built on WordPress CMS with modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, indicating a mature digital infrastructure. The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms, reflecting good digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS and uses privacy plugins but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency would further enhance its security posture.

E

ESSI

niszczeniedokumentow.eu

10

The website niszczeniedokumentow.eu represents ESSI, a professional Polish company specializing in secure document destruction and data carrier disposal services compliant with RODO and other legal standards. The company operates multiple regional offices and offers a comprehensive range of services including mobile document destruction, equipment sales, and secure storage solutions. The website is well-structured, content-rich, and targets business clients in Poland seeking compliant and secure document disposal solutions. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate performance and good SEO practices. Security posture is adequate with HTTPS and consent management but shows minor technical issues such as PHP warnings and lacks explicit security policies or incident response information. Overall, the domain registration is consistent and trustworthy, with no privacy protection masking ownership, supporting the legitimacy of the business. Strategic recommendations include fixing technical warnings, enhancing security headers, and publishing clear security and incident response policies to improve trust and compliance.

4

47Design Werbeagentur

47design.de

64

47Design Werbeagentur is a small, full-service advertising agency based in Krefeld, Germany, specializing in web design, media design, SEO, and marketing services. The company targets local businesses and startups, offering tailored marketing solutions including social media management and corporate design. Their website demonstrates a professional digital presence with modern WordPress infrastructure and a focus on clear communication and user experience. Technically, the site uses popular plugins such as Elementor and Slider Revolution, with GDPR-compliant cookie consent implemented via Borlabs Cookie. Security posture is solid with HTTPS and no visible vulnerabilities, though additional security headers and policies could enhance protection. Overall, the website is well-structured, trustworthy, and compliant with privacy regulations, though explicit privacy and terms of service pages were not found in the provided content.

P

Perinfo

perinfo.eu

56

Perinfo is a French company specializing in software solutions for passenger transport professionals and public transport authorities, with over 36 years of experience. Their offerings include integrated management software for interurban, urban, and technical maintenance activities, complemented by consulting, training, and support services. The company positions itself as a trusted partner in the transportation sector, targeting transport operators and public entities. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, incorporating modern tools such as Slider Revolution and Google Analytics for performance and user tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and uses standard analytics scripts but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in compliance and security posture. The absence of public WHOIS data is consistent with EURid privacy policies for .eu domains and does not raise immediate concerns. Overall, the website reflects a professional and credible business with a solid digital presence, though enhancements in security headers and privacy compliance would strengthen its trustworthiness and regulatory adherence.

A

AW Solutions

awsolutions.fr

58

AW Solutions is a French platform specializing in the dematerialization of public procurement processes, serving both public buyers and private companies. It operates under the Groupe Achat Solutions, a well-established entity in the public procurement sector since 1989. The platform offers a comprehensive suite of services including call for tenders dissemination, buyer profiling, sourcing, and business intelligence, positioning itself as a leader in the French government procurement market. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, Yoast SEO, and Matomo analytics, ensuring a professional and functional digital presence. Security measures such as HTTPS, Google reCAPTCHA, and Keycloak SSO are implemented, though there is room for improvement in HTTP security headers and explicit security policies. Privacy compliance is basic with cookie consent mechanisms and privacy policies present but lacking detailed GDPR compliance indicators. Overall, the website is trustworthy, professional, and well-aligned with its business objectives.

X

XABA SAS

xaba.fr

58

XABA SAS operates as a French B2B digital marketing and web services provider specializing in website editing, lead generation, and growth hacking strategies. The company targets businesses seeking to enhance their online presence and customer acquisition through tailored marketing solutions. The website reflects a professional and consistent brand image, supported by a domain registered since 2012, indicating established market presence. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted with Cloudflare DNS services. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO optimizations in place. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though additional security headers and policies could enhance the security posture. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contacts suggests room for improvement in transparency and preparedness. Privacy compliance is well addressed with a GDPR-compliant cookie consent mechanism and a privacy policy in French. Overall, the website presents a moderate risk profile with a solid foundation in business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to strengthen trust and compliance.

I

Instituto de Estudios Cajasol

institutocajasol.com

56

Instituto de Estudios Cajasol is a well-established business school based in Sevilla, Spain, offering professional master’s degrees, postgraduate courses, and corporate training primarily targeting professionals and students in Andalucía. The institution has a strong regional presence with a domain registered since 2006, reflecting its longevity and market position. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a positive user experience and strong SEO performance. Technically, the site leverages WordPress with popular plugins and integrates multiple marketing and analytics tools, including Google Tag Manager and Outbrain, indicating a mature digital marketing strategy. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. Overall, the website demonstrates high business credibility and trustworthiness with clear contact information and consistent branding.

M

Museum Kampa

museumkampa.cz

44

Museum Kampa is a well-established modern art museum located in Prague, Czech Republic, focusing on Central European modern art and preserving the collection of Jan and Meda Mládková. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on WordPress with modern plugins and frameworks, showing moderate performance and good mobile optimization. Security posture is strong with HTTPS enabled and no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive GDPR policy and cookie consent mechanism. Overall, the site is trustworthy and serves its audience effectively.

T

TemplatesNext

templatesnext.org

54

TemplatesNext is a small startup media development studio specializing in WordPress themes and plugins. The company emphasizes handcrafted design and clean code, targeting WordPress users and developers seeking quality themes and plugins. Their business model revolves around offering both free and premium WordPress products with lifetime support. The website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder, indicating a modern and maintainable technical infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is moderate with HTTPS enabled and spam protection on forms, but lacks advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy, though WHOIS data is unavailable, which slightly reduces transparency.

P

Piedmont HealthCare

webbsantiquemall.com

60

Piedmont HealthCare is a large, physician-owned multi-specialty healthcare group operating primarily in North Carolina and the Southeast United States. The website presents a professional and comprehensive overview of their services, including telehealth, patient portals, and specialty care. The business targets patients seeking primary and specialty healthcare services, positioning itself as a trusted regional healthcare provider. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and various plugins for enhanced functionality. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enabled and no immediate vulnerabilities detected, though security headers and explicit privacy policies are lacking. The absence of WHOIS data for the domain analyzed raises concerns about domain legitimacy, suggesting a mismatch between the domain and the website content. Overall, the website is professional and trustworthy from a business perspective but would benefit from improved privacy compliance and clearer domain registration transparency.

M

Mad Color | Graphisme & Web

madcolor.fr

48

Mad Color is a small French business specializing in graphic design, artisanal screen printing, and web development services. The company targets local clients seeking creative and digital solutions such as logos, flyers, websites, and print media. The website serves as a portfolio and contact point, showcasing various projects and emphasizing artisanal craftsmanship. Technically, the site is built on WordPress using popular themes and plugins like Bridge, Elementor, and Slider Revolution, indicating a moderate level of digital maturity. The site is mobile-optimized and includes SEO best practices but lacks some accessibility features and security headers. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and ensuring plugin updates. The absence of WHOIS data and privacy/cookie policies indicates compliance and trust gaps. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

C

Citizen Conservation Foundation

citizen-conservation.org

53

Citizen Conservation Foundation operates a German-based non-profit network dedicated to species conservation through coordinated breeding programs involving both institutional and private animal keepers. The organization leverages community engagement, scientific collaboration, and educational outreach to combat species extinction. The website reflects a well-established entity founded in 2017, with a clear mission and active social media presence. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is strong, with comprehensive policies and GDPR-aligned consent management. Overall, the website is professional, trustworthy, and serves its niche audience effectively.

G

Goyer

groupegoyer.ch

58

Groupe Goyer is a well-established Swiss company specializing in the design, manufacturing, and installation of custom façades since 1931. The company operates an industrial process covering conception to installation, ensuring quality, timely delivery, and safety. Their market position is strong within the European construction and manufacturing sectors, supported by certifications such as ISO 45001 and ISO 14001. The website reflects a professional and consistent brand image with multilingual support, targeting construction professionals and industrial clients. Technically, the site is built on WordPress with modern plugins and SEO tools, delivering good performance and accessibility. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response information are lacking. Privacy compliance is basic with a privacy policy present but no explicit GDPR confirmation. Overall, the site is trustworthy and professionally maintained.

G

GOYER

groupegoyer.com

56

GOYER is a well-established French manufacturing company specializing in panelised façades and bespoke building envelope solutions since 1931. The company serves a European B2B market including architects, construction firms, and developers, offering high-performance aluminium and hybrid timber-aluminium façades. Their website reflects a mature digital presence with multilingual support and detailed business information. Technically, the site is built on WordPress with modern plugins and accessibility features, hosted by OVH sas, a reputable French provider. Security posture is solid with HTTPS, domain locking, and certifications displayed, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and business-focused with no signs of malicious activity or content safety concerns.

M

Mairie de Saint-Hilaire-de-Brethmas

shb-bota.fr

52

The website shb-rando.fr serves as an informational and community resource for the commune of Saint-Hilaire-de-Brethmas in France, focusing on heritage, sports, biodiversity, and geology trails. It targets families, hikers, cyclists, and nature enthusiasts, providing detailed trail information, interactive maps, and local cultural content. The site is positioned as a local government or community service platform, supported by municipal and regional partners. Technically, the site is built on WordPress with common plugins such as WooCommerce, Yoast SEO, and WPBakery, hosted by OVH. It uses modern web technologies and is mobile-optimized with embedded OpenStreetMap maps for enhanced user experience. Security posture is moderate with HTTPS enabled and domain transfer protections, but lacks explicit security headers and privacy/cookie policies, which are compliance gaps. Analytics usage includes Google Analytics via Site Kit, with moderate user tracking. Overall, the site is professional, trustworthy, and serves its community well but should improve privacy compliance and security headers to enhance trust and regulatory adherence.

L

La Kunsthalle, Centre d’Art Contemporain d’Intérêt National

kunsthallemulhouse.com

53

La Kunsthalle is a French contemporary art center operated by the city of Mulhouse, established since 2008. It serves as a cultural institution offering exhibitions, artist residencies, mediation programs, and publishing activities. The website targets the general public interested in contemporary art and is positioned as a nationally recognized center supported by public and regional cultural bodies. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, and uses Google Analytics for visitor tracking. The site is moderately optimized for mobile and SEO, with a good content structure and navigation. Security-wise, the site uses HTTPS and domain registration protections but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is weak, with no cookie consent mechanism despite tracking scripts. Overall, the website is professional and trustworthy but could improve in privacy and security practices.

S

SDIS34

sdis34.fr

54

SDIS34 is the official fire and rescue service for the Hérault department in France, providing essential public safety services including firefighting, rescue operations, prevention, and recruitment of volunteer and professional firefighters. The website serves as an information portal for residents and stakeholders, offering news, practical information, and access to services. The organization maintains a strong social media presence and uses modern web technologies to deliver content effectively. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder and Slider Revolution, integrating Google Maps for location services. The site is secured with HTTPS and employs standard security headers, reflecting a good security posture. Performance and mobile optimization are adequate, though accessibility could be improved. Security-wise, the site shows good practices like HTTPS enforcement and no visible vulnerabilities. However, the absence of explicit privacy, cookie, and terms of service pages, as well as missing WHOIS data, slightly reduce trust and compliance confidence. There is no visible incident response or vulnerability disclosure information. Overall, SDIS34's website is a professional and trustworthy public service platform with room for improvement in privacy compliance and transparency. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding security and incident response information, and ensuring WHOIS data availability to enhance legitimacy and trust.

G

Groupe Goyer

goyer.fr

37

Groupe Goyer is a well-established French company specializing in the design, manufacturing, and installation of custom façades, particularly in aluminium and mixed materials, with a history dating back to 1931. The company operates an integrated industrial process from conception to installation, serving a European market. Their website reflects a mature digital presence built on WordPress with modern plugins and SEO tools, offering good mobile optimization and accessibility features. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly disclosed. The domain registration data is consistent with the company's long history and business claims, hosted by OVH, a reputable provider. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

C

Communauté de communes du Haut-Poitou

cc-hautpoitou.fr

48

The website cc-hautpoitou.fr represents the Communauté de communes du Haut-Poitou, a French local government entity established in 2017 serving 27 communes. The site provides information on community services including youth, social services, culture, sports, economy, and territorial planning. It targets residents and stakeholders of the Haut-Poitou region and operates as a public intercommunal cooperation body. The website is built on WordPress using the Enfold theme and several plugins such as Contact Form 7 and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could improve protection. No critical vulnerabilities or suspicious content were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the site is trustworthy and professionally maintained, reflecting the legitimacy of the public institution it represents.

T

TPF Ingénierie

tpf-i.fr

43

TPF Ingénierie is a well-established French engineering consultancy specializing in building, infrastructure, environmental, and energy sectors. The company positions itself as an independent international group with over 30 years of experience, offering multidisciplinary and innovative project management and engineering services. Their website reflects a professional and consistent brand image, targeting architects, urban planners, engineers, and enterprises seeking integrated and sustainable engineering solutions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPBakery, and Slider Revolution, ensuring good SEO and user experience. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection but lacks some security headers and explicit security policies. Overall, the site is accessible, professional, and trustworthy, though improvements in privacy compliance and security posture are recommended.

M

Mairie de Fontenilles

ville-fontenilles.fr

56

The website www.ville-fontenilles.fr serves as the official online presence for the municipal government of Fontenilles, France. It provides residents and visitors with comprehensive information about local events, administrative procedures, education, cultural activities, and social services. The site is positioned as a trusted source of municipal information and public services for the local community. Technically, the site is built on WordPress, utilizing popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, with a responsive design and moderate performance. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a cookie consent mechanism, although explicit security headers and privacy policies are not fully implemented or visible. Overall, the site demonstrates a good security posture and professional presentation, but could improve transparency and compliance by publishing privacy and terms of service documents and providing clear contact information for security and data protection matters.

E

EcoSmart Building

antibacteries.fr

58

EcoSmart Building is a newly established French company specializing in energy performance and indoor air quality solutions. The company offers innovative technologies including predictive supervision to optimize building energy consumption while ensuring a healthy indoor environment. Their market positioning is focused on B2B clients seeking eco-efficient building management solutions. Technically, the website is built on WordPress with modern plugins like Elementor and Slider Revolution, hosted by OVH sas. The site demonstrates good design quality and mobile optimization but lacks privacy and cookie policies, which are compliance gaps. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration is consistent and transparent, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, enabling DNSSEC, and improving security headers.

F

France Active Nouvelle Aquitaine

franceactive-aquitaine.org

50

France Active Nouvelle Aquitaine is a regional non-profit organization dedicated to supporting and financing small businesses and social economy structures in the Nouvelle-Aquitaine region of France. The website presents a professional and well-structured digital presence, leveraging WordPress with modern plugins such as Elementor and Yoast SEO to deliver content and services effectively. The organization targets entrepreneurs and social economy enterprises, offering accompaniment, financing, and networking opportunities. Technically, the site is hosted by OVH sas, uses HTTPS, and integrates analytics and tracking tools like Google Analytics and Facebook Pixel. Security measures include HTTPS and reCAPTCHA, but additional security headers and published policies could enhance the security posture. Privacy and cookie policies are not explicitly found, indicating an area for compliance improvement. Overall, the website is trustworthy, with consistent domain registration data and a clear business focus.

P

Partypack.cz

partypack.cz

42

Partypack.cz is a Czech Republic-based small business specializing in event entertainment services, including photobooths, AI-enhanced photo booths, hostesses, 360° party spins, and other event-related offerings. The company positions itself as a provider of memorable event experiences with a professional approach and modern equipment. The website reflects a well-structured, SEO-optimized WordPress platform using popular plugins and themes, with a focus on user experience and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security policies and headers. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible online presence. Overall, the business demonstrates moderate trustworthiness and digital maturity, with room for improvement in privacy transparency and security best practices.

W

Werich Villa

werichovavila.cz

41

Werichova vila is a cultural and historical center located in the heart of Prague, dedicated to preserving and promoting the legacy of notable Czech personalities such as Jan Werich and Vladimír Holan. The website serves as an official portal offering information about permanent exhibitions, cultural programs, theatrical performances, concerts, and workshops aimed at a broad audience including families, schools, and the general public. The organization positions itself as a small but significant cultural institution with a focus on arts and heritage preservation. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is hosted under a Czech registrar and uses SSL encryption, ensuring secure communications. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and multilingual support. From a security perspective, the site employs HTTPS and reCAPTCHA but lacks explicit security headers and a published security or incident response policy. Privacy compliance is partially addressed with a GDPR information page, but no cookie consent mechanism is evident. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the website's claims and location, supporting its legitimacy. Overall, Werichova vila's website is a well-maintained cultural portal with good content quality and technical implementation. Enhancements in privacy compliance, security policy transparency, and security headers would further strengthen its security posture and user trust.

R

Realytics

realytics.io

71

Realytics is a technology company specializing in TV analytics and total video measurement solutions designed to measure the advertising impact of cross-media TV campaigns. Positioned as a leading provider in this niche, Realytics targets advertisers, marketing professionals, and media agencies seeking data-driven insights to optimize their video advertising strategies. The website reflects a professional B2B SaaS business model with a focus on analytics services. Technically, the site is built on WordPress using modern themes and plugins such as Divi and Elementor, with integrated marketing and analytics tools including Google Analytics and LinkedIn Insight. The site demonstrates good SEO practices and mobile optimization, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent implemented, but could benefit from additional security headers and a formal vulnerability disclosure policy. Overall, the domain appears legitimate though WHOIS data is privacy protected, which is common for tech companies. No critical security issues or content safety concerns were identified.

B

Bio en Grand Est

biograndest.org

9

Bio en Grand Est is a regional non-profit organization dedicated to supporting and promoting organic agriculture in the Grand Est region of France. The website serves as a network hub for organic producers and provides information, news, events, and resources related to organic farming. The organization targets both professionals in the organic sector and consumers interested in organic products. The site is professionally designed using WordPress and integrates modern web technologies and plugins to deliver a good user experience. Social media integration and structured data enhance its digital presence. Security measures such as HTTPS and reCAPTCHA are implemented, but there is room for improvement in DNS security and HTTP headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and serves its business purpose effectively.

T

TopRaut.cz

topraut.cz

52

TopRaut.cz is a small hospitality business specializing in catering services for events such as receptions, weddings, parties, seminars, and film production catering. Operating primarily in Prague, it manages the Kavárna DRBárna café and offers event space rental with audiovisual support. The company emphasizes customized menus and individual client approaches, serving a diverse clientele including cultural and film industry professionals. The website is built on WordPress with modern plugins and includes a contact form protected by Google reCAPTCHA. While the site is well-designed and content-rich, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data limits domain trust assessment, but the visible business information and partner references support legitimacy.

T

Timac Agro Nederland BV

timac-agro.nl

59

Timac Agro Nederland BV is a specialized company operating in the agricultural sector, focusing on plant nutrition and animal hygiene and nutrition products. The company is positioned as a specialist within the Dutch agricultural market and is a subsidiary of Groupe Roullier. Their website reflects a professional and consistent brand presence, targeting agricultural professionals and businesses in the Netherlands. The business model is primarily B2B, offering specialized products and expert advice to the agricultural industry. Technically, the website is built on WordPress CMS with modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution. It integrates marketing automation tools like SharpSpring and uses Google Analytics for visitor tracking. The site is moderately performant, mobile-optimized, and SEO-friendly, with basic accessibility features. From a security perspective, the website enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. The domain registration data is consistent with the business claims, showing a domain age appropriate for the company's history and no use of privacy protection, which supports legitimacy. Overall, the website demonstrates a good security posture, solid privacy compliance, and credible business information. Recommendations include enhancing security headers, enabling DNSSEC, and publishing a formal security policy to further strengthen trust and compliance.

F

FLIPCOM servis, s. r. o.

flipcomstavby.cz

50

FLIPCOM servis, s. r. o. is a Czech Republic based small-sized company specializing in residential construction and renovation services including family house building, apartment and bathroom renovations, and smart home solutions. The company targets homeowners and property developers primarily in Ostrava and surrounding regions. The website is built on WordPress using popular plugins and themes, indicating a moderate level of digital maturity. It employs modern tracking and marketing tools such as Google Analytics, Facebook Pixel, and Smartlook, while maintaining GDPR compliance with a cookie consent mechanism and privacy policy. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though security headers and formal security policies are absent. The lack of WHOIS data for the domain is a concern for domain legitimacy verification, but the website content and contact information appear professional and trustworthy. Overall, the site presents a credible business front with room for improvement in security transparency and domain registration clarity.

K

KAVÁRNA DRBÁRNA

kavarnadrbarna.cz

56

KAVÁRNA DRBÁRNA is a small hospitality business operating a café associated with the Radek Brzobohatý Theater in Prague. The business offers unique cultural and catering services including event space rental, rauts, and specialty beverages such as freshly roasted coffee and Moravian wines. The website reflects a professional and consistent brand image with a focus on cultural events and hospitality services. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and libraries, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks some recommended security headers and policies. The absence of WHOIS data and privacy/cookie policies are notable gaps in compliance and trust. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

O

Outdoor Access Initiative

yamahaoai.com

61

The Outdoor Access Initiative (OAI) website serves as a platform supporting grassroots efforts to protect and improve access to public lands for motorized and outdoor recreation. The organization operates as a small non-profit focused on advocacy, education, and grant funding to promote responsible use of off-highway vehicles and conservation goals. The website is built on WordPress with standard plugins for SEO and analytics, including Yoast SEO, Slider Revolution, Google Analytics, and Facebook Pixel. The technical infrastructure is modern and mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professional and trustworthy within its niche but would benefit from improved privacy disclosures and security enhancements.

L

LIVEKINDLY

livekindly.co

9

LIVEKINDLY is a lifestyle brand focused on promoting sustainable living through plant-based dining, eco-friendly retail, wellness centers, and educational experiences. The website presents a professional and visually appealing platform targeting consumers interested in conscious and sustainable lifestyles. Technically, the site is built on WordPress with modern plugins and technologies, including SEO optimization and Google reCAPTCHA for form security. However, the absence of privacy and cookie policies and the lack of WHOIS domain registration data present compliance and legitimacy concerns. Security posture is generally good with HTTPS and form protections but could be improved with additional security headers and published policies. Overall, the site is functional and trustworthy from a user perspective but requires verification of domain registration and enhanced privacy compliance.

H

H2 Europe

h2europe.company

47

H2 Europe is a small Czech Republic-based company specializing in innovative health and wellness products, specifically revolutionary capsules that generate molecular hydrogen. The company targets health-conscious consumers primarily in the European market. Their business model is e-commerce focused, leveraging a WordPress WooCommerce platform with modern design and multilingual support. The website is professionally designed, mobile optimized, and includes standard privacy and cookie policies compliant with GDPR. Technically, the site uses a modern tech stack including Elementor, WooCommerce Blocks, and Amazon Cloudfront CDN, ensuring moderate performance and good SEO. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though there is room for improvement in published security policies and incident response information. Overall, the domain WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were detected. The site uses standard marketing and tracking tools such as Facebook Pixel and Ecomail. The website content is safe for general audiences with no adult or explicit content. The overall AI score reflects a good quality, secure, and compliant e-commerce website with moderate business credibility.

W

Wp Royal

wp-royal.com

57

WP Royal Themes is a small technology company specializing in the development and sale of WordPress themes, targeting bloggers, small businesses, and WordPress users seeking quality, customizable themes. The company emphasizes customer support, providing forums, documentation, and video tutorials to enhance user experience. Their market position is that of a niche WordPress theme provider with a focus on quality and support, leveraging modern WordPress technologies and e-commerce capabilities via WooCommerce. Technically, the website is built on WordPress with a robust tech stack including WooCommerce, Yoast SEO, WPBakery Page Builder, and Slider Revolution. Hosting is provided by Bluehost Inc., and the site uses HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and structured data. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No explicit security or incident response policies are published, and no direct contact emails or phone numbers are provided, which could be improved for better trust and compliance. Cookie consent is implemented, indicating some GDPR compliance efforts. Overall, the website is professional, trustworthy, and safe for general audiences. The main risks relate to minor security hardening and privacy policy transparency. Strategic improvements in these areas would enhance compliance and user trust.

E

European Congress Integrative Medicine Madrid

ecim24madrid.com

57

The website ecim24madrid.com serves as the official platform for the XVI European Congress of Integrative Medicine scheduled in Madrid in 2024. It targets healthcare professionals and researchers interested in integrative medicine, providing detailed event information, speaker profiles, and program schedules. The site is professionally designed and well-branded, reflecting a reputable event organization with international reach. Technically, it is built on WordPress with common plugins for event management and galleries, hosted by Acens Technologies, a known hosting provider. The site uses HTTPS and includes Google Analytics for visitor tracking, but lacks some privacy compliance features such as a cookie consent mechanism. Security posture is moderate with room for improvement in DNS security and security headers. Overall, the site is trustworthy and functional, supporting the event's business goals effectively.