Security Directory

E

Easee

easee.com

11

Easee is a Norwegian company specializing in smart electric vehicle charging solutions, offering adaptable chargers compatible with various vehicles and power supplies. The company positions itself as an innovative player in the energy and transportation sectors, targeting EV owners, businesses, and installers. Their website reflects a mature digital presence with excellent content quality, professional design, and strong branding consistency. Technically, the site leverages modern technologies including Google Tag Manager, reCAPTCHA, and Cloudflare, hosted on AWS infrastructure, and built on WordPress with Yoast SEO for optimization. Security posture is strong with HTTPS enforced, EPP domain locks, and a comprehensive cookie consent mechanism, although DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is well addressed with a detailed cookie policy and GDPR-aligned consent management. Overall, the website is trustworthy, professional, and well-optimized for user experience and SEO.

S

SMZ Stadtmedienzentrum Karlsruhe

smz-karlsruhe.de

53

SMZ Stadtmedienzentrum Karlsruhe is a regional educational media center supporting teachers in integrating digital media into classroom instruction. The website serves as a comprehensive resource hub offering services such as media lending, technical support, workshops, and pedagogical consulting. It targets educators and schools primarily in Karlsruhe, Germany. The digital infrastructure is built on a modern WordPress platform with Elementor and SEO optimizations, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The site maintains GDPR compliance with clear privacy and cookie policies. Overall, the website reflects a trustworthy and professional educational institution with a clear mission and well-structured content.

A

Aji Groupe

aji-groupe.com

51

Aji Groupe is a specialized communication agency based in Alsace, France, focusing on the gastronomy sector. Founded in 2015, the company offers a range of services including culinary photography, custom website creation, social media management, and proprietary software solutions such as Aji Box and Aji Manager. The agency positions itself as a regional expert with a strong emphasis on digital marketing tailored to culinary businesses. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern libraries and Google reCAPTCHA for security. Hosting is provided by OVH sas, a reputable French provider. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the website is professional, well-branded, and compliant with GDPR, with clear trust indicators such as certifications and client testimonials.

D

DÉVELOPPEMENT ÉCONOMIQUE DE LA VILLE DE VANDOEUVRE

vandeco.fr

45

The website www.vandeco.fr serves as the official digital platform for the economic development and employment services of the Ville de Vandœuvre-lès-Nancy, France. It targets local businesses, job seekers, institutions, students, and the general public by providing comprehensive information on business creation, development, employment opportunities, training, and local events. The platform is positioned as a key local government service to foster economic growth and employment within the community. Technically, the site is built on WordPress using Elementor and several popular plugins such as Yoast SEO and Contact Form 7. The infrastructure supports responsive design and basic accessibility features, with moderate performance. The site employs HTTPS with a valid SSL certificate, but lacks advanced security headers and explicit incident response policies. From a security perspective, the site demonstrates good baseline practices including encrypted connections and cookie consent mechanisms compliant with GDPR. However, the absence of security headers and vulnerability disclosure policies suggests room for improvement in security maturity. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professional, reflecting its role as a municipal service. The lack of WHOIS data reduces domain registration transparency but does not detract significantly from the site's legitimacy given the official branding and contact information. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to strengthen trust and resilience.

R

Reworld Media Connect

reworldmediafactory.com

53

Reworld Media Connect is the advertising sales division of Reworld Media, a leading French thematic media group owning 80 proprietary media brands. The website targets advertisers and media buyers interested in thematic media advertising in France. The business model focuses on media representation and advertising sales. The website is built on WordPress with modern plugins and SEO optimizations, including Google Tag Manager and a GDPR-compliant cookie consent mechanism via Didomi. However, no explicit privacy policy or terms of service pages were detected, and no direct contact information was found in the HTML content. The WHOIS data for the domain is missing or unavailable, which is inconsistent with the active and professional website presence, lowering trustworthiness. Security posture is basic with HTTPS enabled but lacking visible security headers or explicit security policies. Overall, the website is professional and functional but would benefit from improved transparency and security disclosures.

D

Državna škola za javnu upravu

dsju.hr

10

Državna škola za javnu upravu is a Croatian government educational institution specializing in public administration training and development. The website serves as an official portal offering information about their programs, services, international cooperation, and contact details. It targets public sector professionals and government employees seeking training and capacity building. The institution holds a stable market position as the national public administration school, founded in 2011, with a medium organizational size. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. It integrates Google Tag Manager and OneSignal for analytics and notifications, and complies with GDPR through cookie consent mechanisms. The site is mobile-optimized and provides a good user experience with clear navigation and search functionalities. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy pages and incident response contacts, which are recommended for enhanced transparency and readiness. The WHOIS data confirms domain legitimacy and consistent government affiliation, reinforcing trust. Overall, the website presents a professional, secure, and compliant digital presence suitable for its government educational role. Strategic improvements in security policy disclosure and accessibility could further strengthen its posture.

R

Recenzije Filmova i Serija

recenzijefilmova.com

53

Recenzije Filmova i Serija is a small media website focused on providing film and series reviews, news, trailers, and recommendations primarily targeting movie and series enthusiasts. The site is built on WordPress and uses common web technologies such as PHP, JavaScript, and Google Fonts. The digital maturity is moderate with good SEO practices and mobile optimization, but lacks advanced security headers and privacy compliance features. Security posture is basic with HTTPS enabled but missing important security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and content-rich but requires improvements in security and compliance to enhance trust and protect user data.

E

everso | Live music experience

eversomusic.com

53

everso is a German-based live music experience provider offering an exclusive artist team of over 80 performers for successful events. The website targets event organizers seeking professional live music entertainment. The business model revolves around artist booking services, positioning itself as a specialized media and entertainment service provider. The website is built on WordPress with the Divi theme and uses modern plugins for multilingual support and SEO optimization. The technical infrastructure is moderately optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the active and professional website suggests a legitimate business. Overall, the site is trustworthy but would benefit from enhanced transparency and security practices.

I

intergerma

cimunity.com

69

CIMunity operates as a specialized European magazine focusing on the meetings, conference, and incentive management industry. The website serves as a professional media platform delivering industry news, event information, and expert analysis targeted at professionals within this niche sector. The company behind the site is identified as 'intergerma' through structured data, with a clear focus on the European market. The website is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, indicating a moderate level of digital maturity and technical infrastructure. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate, with no evident security headers or explicit incident response policies, and no visible vulnerabilities in the provided content. Privacy compliance is partially addressed through cookie consent mechanisms but lacks a clear privacy policy. Overall, the site presents a professional front but would benefit from enhanced transparency and security measures.

C

City Mix&Match

citymixandmatch.hr

44

City Mix&Match is a Croatian fashion, beauty, and lifestyle content platform providing trend reports and lifestyle articles primarily targeting a general audience interested in contemporary fashion and lifestyle trends. The website operates under the parent company City Center One, a known retail entity, and maintains a consistent brand presence with a focus on regional content. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant consent management. The site demonstrates good mobile optimization and SEO practices, though some security headers are missing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies or incident response contacts. Overall, the site is legitimate, professionally maintained, and suitable for its audience.

C

Comp-On AG, HR Solutions

comp-on.ch

58

Comp-On AG is a Swiss-based company specializing in HR compensation solutions, targeting businesses seeking practical and understandable approaches to remuneration questions. The company operates a professional website built on WordPress with the Divi theme, integrating modern SEO and analytics tools such as Yoast SEO and Google Analytics. The website content is well-structured and relevant to its niche market, reflecting a small-sized enterprise with a clear business focus. Technically, the site demonstrates moderate performance and good mobile optimization, though some accessibility features could be enhanced. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but missing a formal privacy policy and terms of service. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the site is trustworthy and professional but would benefit from improved privacy and security documentation to enhance compliance and user trust.

TJ Niva Hladké Životice is an amateur football club based in Severní Morava, Czech Republic, with a long-standing tradition dating back to 1950. The website serves as a community hub providing match results, team rosters, photo galleries, and news updates. It targets local football enthusiasts and community members. The business model is non-profit and community-focused, emphasizing local sports engagement. Technically, the site is built on WordPress using the Avada theme, enhanced with Yoast SEO for search optimization and Google Tag Manager for analytics. The site is moderately performant and mobile-optimized, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal incident response policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy for its purpose but could improve compliance and security practices.

J

Joker

joker.hr

50

Joker.hr is the official website of Joker, a retail shopping center located in the heart of Split, Croatia. The site offers comprehensive information about the shopping center's stores, restaurants, entertainment options, and services such as parking and fitness. The business targets local shoppers and visitors seeking a diverse retail and leisure experience. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking tools, including Google Tag Manager and Mailchimp integration. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the domain registration aligns with the business claims, supporting legitimacy and trustworthiness.

K

KING CROSS

king-cross.hr

58

KING CROSS is a retail shopping center website based in Croatia, offering a variety of products related to sports, home, family, and leisure. The website targets a general audience looking for convenient and affordable shopping options. The site is built on WordPress CMS with SEO optimizations via Yoast and uses modern UI components such as Swiper.js. The technical infrastructure appears moderate in performance and mobile optimization, with HTTPS enabled ensuring basic transport security. However, the absence of visible security headers and explicit privacy and cookie policies indicates room for improvement in security and compliance. No contact information or incident response details are publicly available, which may affect user trust and compliance with GDPR transparency requirements. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices.

K

Katalozi.net / Svi katalozi na jednom mjestu

katalozi.net

56

Katalozi.net is a Croatian retail catalog aggregation website established in 2012, providing users with access to various promotional catalogs and offers from multiple retailers. The site leverages WordPress CMS with Yoast SEO for content management and optimization, and monetizes through Google Adsense advertising. The technical infrastructure includes Cloudflare DNS and hosting via GoDaddy.com, LLC. The website is well-structured with good navigation and content relevance, targeting general retail consumers in Croatia and neighboring regions. Security posture is moderate with HTTPS enabled and domain registration locks, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. No direct contact or incident response information is provided, limiting transparency. Overall, the site is functional and trustworthy for its business purpose but requires improvements in privacy and security disclosures.

J

Julianus Inkasso

julianus.ee

44

Julianus Inkasso is a well-established Estonian debt collection company founded in 1995, operating as a leading provider in Estonia and the Baltic region. The company offers comprehensive credit management services including debt collection, legal proceedings, and purchase of debt portfolios. It is part of the Aktiva Finance Group, which enhances its market position and operational scale. The website reflects a professional and consistent brand image, targeting both debtors and creditors with multilingual support and self-service portals. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and website content align well, indicating a trustworthy and credible business presence.

Q

Qmini

qmini.hr

57

Qmini is a boutique digital agency based in Čakovec, Croatia, specializing in web development, graphic design, and marketing solutions. Established in 2006, the company positions itself as an innovative provider helping brands enhance their online presence. The website is professionally designed using WordPress with the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. It supports Croatian and English languages, targeting businesses seeking digital marketing and design services. The technical infrastructure includes modern web technologies and Cloudflare DNS services, ensuring reliable hosting and performance. Security posture is solid with HTTPS enforced and standard security headers present, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a consent mechanism. Overall, the website reflects a trustworthy and professional business with good digital maturity.

G

Grad Bjelovar

bjelovar.hr

42

Grad Bjelovar operates an official municipal government website serving the city of Bjelovar, Croatia. The site provides residents and visitors with information on local government administration, public calls, events, documents, and services. It maintains a consistent brand presence and leverages social media platforms to engage its audience. The website is built on WordPress with popular plugins for SEO, caching, and analytics, hosted on Totohost servers. The technical infrastructure supports good mobile optimization and accessibility, with moderate performance characteristics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional, suitable for its government function.

Budoucipestouni.cz is a professionally maintained website operated by Sdružení pěstounských rodin z.s., a Czech non-profit organization dedicated to supporting foster families and promoting foster care and adoption. The site offers a variety of services including online and email counseling, educational quizzes, webinars, and informational infographics, targeting prospective foster parents and stakeholders in child welfare. The organization has a credible market position with a history dating back to 1995 and receives support from the Czech Ministry of Labour and Social Affairs. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Complianz GDPR for cookie consent management. It uses HTTPS with good SSL configuration and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices like security headers and a published privacy policy are missing. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR principles, but lacks explicit privacy and terms of service documents and security headers that could enhance protection against common web threats. No vulnerabilities or suspicious content were detected. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but reduces transparency. Overall, Budoucipestouni.cz presents a trustworthy and professional online presence for a non-profit organization focused on foster care support. Strategic improvements in privacy documentation and security headers would further strengthen its security posture and compliance.

N

Nuvia Group

nuvia.com

62

Nuvia Group is an international company specializing in nuclear technology, offering a comprehensive range of services including engineering, EPC, services and works, and products. The company operates under the parent company Vinci Construction Group, positioning itself as a key player in heavily regulated environments such as nuclear, healthcare, defense, and industrial sectors. The website reflects a professional and consistent brand image targeting business clients and professionals in these industries. Technically, the website is built on WordPress with modern libraries such as jQuery, Owl Carousel, and Leaflet, and integrates privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers are not detected and no explicit security policy or incident response information is published. The absence of WHOIS data for the domain is a notable gap, reducing transparency and trust slightly. Overall, the website is well-designed, compliant with privacy regulations, and safe for general audiences.

S

SuperFaktúra

superfaktura.sk

11

Superfaktura.sk is a Slovak-based online invoicing platform targeting small businesses and freelancers. It offers reliable invoicing, offers, credit notes, and delivery notes accessible anywhere and anytime, with a 30-day free trial to attract users. The company positions itself as a leading SaaS provider in the Slovak market for business invoicing solutions. Technically, the website is built on WordPress with modern SEO and analytics tools, including Yoast SEO, Google Tag Manager, Microsoft Clarity, and OneSignal for push notifications. The site is well optimized for mobile and desktop, with fast performance and good accessibility. Security posture is strong with HTTPS, security headers, cookie consent, and no visible vulnerabilities. However, there is no explicit security policy or incident response contact published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a credible service provider in its niche.

N

NG Retail

airme.cz

51

NG Retail is a Czech-based company specializing in retail software solutions, including point-of-sale systems (POS NG), marketing analytics (air&me), and operational management (CRS NG). The company targets retail businesses seeking integrated omnichannel communication and operational efficiency. Their market position is that of an established medium-sized player in the Czech retail technology sector, supported by a professional website and active social media presence. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Hotjar. The site is well-optimized for mobile and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is partially addressed with cookie consent mechanisms but lacks a clearly accessible privacy policy page. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from the site's legitimacy. Overall, NG Retail presents a credible and professional digital presence aligned with its business focus.

Č

Český Institut Metabolického syndromu

cims-ops.cz

45

Český Institut Metabolického syndromu is a Czech healthcare-focused non-profit organization dedicated to educating patients and professionals about metabolic syndrome. The website serves as a platform for disseminating information, organizing seminars, and providing resources such as articles and publications. It maintains partnerships with reputable pharmaceutical companies, enhancing its credibility in the healthcare sector. Technically, the website is built on WordPress with modern libraries and plugins, offering a good user experience and mobile optimization. However, the absence of privacy and cookie policies indicates compliance gaps, and the lack of WHOIS data reduces domain trustworthiness. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

N

Norwit SLOVAKIA

norwit.sk

41

Norwit SLOVAKIA operates a corporate website primarily targeting the Slovak market. The company appears to be established since 2003, with a domain age supporting a mature business presence. The website uses WordPress with the Divi theme, integrating common SEO and analytics tools such as Yoast SEO, Google Analytics, Microsoft Clarity, and Facebook Pixel. While the site includes a cookie consent mechanism indicating GDPR awareness, it lacks explicit privacy policy and terms of service pages in the analyzed content. The technical infrastructure is modern and mobile-optimized, but security headers are not detected, which is a potential area for improvement. No contact emails or phone numbers are clearly presented, which may affect user trust and compliance. Overall, the security posture is moderate with HTTPS enabled and no visible vulnerabilities, but the absence of detailed security policies and contact information limits the security maturity. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, and providing clear contact channels for incident response.

M

Marius Pedersen

mariuspedersen.sk

65

Marius Pedersen is a Slovakian waste management service provider with a professional online presence focused on environmental and waste disposal services. The website is built on WordPress with a modern tech stack including SEO and anti-spam plugins, and it implements a comprehensive cookie consent mechanism compliant with GDPR principles. However, explicit privacy and terms of service policies are not found in the provided content, which is a gap in compliance. The technical infrastructure is moderate in performance and mobile optimization, with SSL properly configured but lacking security headers. Overall, the security posture is adequate but could be improved with additional headers and explicit policies. The website is trustworthy and professional, targeting businesses and municipalities in Slovakia. No adult or questionable content is present, and no WAF or blocking mechanisms interfere with content accessibility.

W

WeDare

wedare.pl

59

WeDare is a Polish-based company specializing in affiliate marketing services tailored for the e-commerce sector. The company emphasizes partnership and transparency as core values, positioning itself as a niche e-commerce house. Their website reflects a modern digital presence built on WordPress with Elementor and Yoast SEO, indicating a mature technical infrastructure. Integration with Google Analytics, Tag Manager, and Cookiebot demonstrates a commitment to data-driven marketing and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. Contact information is primarily via web forms and social media, with no direct emails or phone numbers publicly listed. Overall, the website is professional, well-branded, and trustworthy, serving a small-sized business audience in Poland.

G

Gamblers Anonymous

gamblersanonymous.org

41

Gamblers Anonymous is a well-established non-profit organization focused on providing support and recovery resources for individuals affected by gambling addiction. The website offers multiple services including in-person, virtual, and telephone meetings, recovery programs, literature, and a monthly newsletter. The organization targets individuals struggling with gambling problems and their families, positioning itself as a trusted support network with a long history dating back to at least 1996 as indicated by the domain registration. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities and uses popular plugins such as Yoast SEO and WPBakery Page Builder. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The hosting provider is not explicitly identified but the domain registrar is Network Solutions, LLC. The site uses HTTPS with a good SSL configuration but lacks DNSSEC and some recommended security headers. From a security perspective, the site has a solid foundation with HTTPS and domain transfer protection but could improve by enabling DNSSEC and adding security headers like Content-Security-Policy. No explicit security policies or incident response contacts are found, which is typical for non-profit support organizations but could be enhanced for transparency. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected despite use of WooCommerce cookies. Overall, the website is trustworthy, professional, and safe for general audiences seeking help with gambling addiction. Strategic recommendations include improving DNS security, implementing security headers, and adding cookie consent to enhance privacy compliance and user trust.

T

TERRAN Slovakia s.r.o.

terran.sk

52

TERRAN Slovakia s.r.o. is a well-established manufacturer specializing in premium concrete roofing tiles and accessories, serving primarily the Slovak market and surrounding regions. The company emphasizes quality, innovation, and tradition, supported by multiple certifications and a strong brand presence. Their website reflects a mature digital infrastructure with comprehensive product information, downloadable catalogs, and customer engagement tools such as calculation services and newsletters. The target audience includes consumers, architects, and construction professionals seeking reliable roofing solutions. Technically, the website is built on WordPress with WooCommerce components, enhanced by performance optimizations like WP Rocket and integrated marketing tools such as Google Tag Manager and MailerLite. The site is mobile-optimized, SEO-friendly, and employs modern web standards, ensuring a fast and accessible user experience. Hosting is managed through a reputable provider with DNSSEC enabled, contributing to domain security. From a security perspective, the site enforces HTTPS, uses DNSSEC, and implements bot detection scripts. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and explicit user consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with no indications of content blocking or security challenges. Strategic recommendations include publishing formal security policies, establishing incident response contacts, and enhancing security headers to further strengthen the security posture.

S

Slovenská elektrizačná prenosová sústava, a.s.

sepsas.sk

48

Slovenská elektrizačná prenosová sústava, a.s. (SEPS) is the Slovak national electricity transmission system operator responsible for managing, operating, and developing the country's transmission grid. The company provides critical services including auctions, scheduling, support services, and technical data for partners, while also engaging in public consultations and international cooperation projects. SEPS holds a significant market position as an essential energy infrastructure entity in Slovakia, serving energy market participants, partners, and the general public. The website reflects a professional and comprehensive digital presence with clear navigation and relevant content tailored to its audience. Technically, the website is built on WordPress with modern technologies such as jQuery, Swiper.js, and Google Tag Manager. It employs Google reCAPTCHA for form security and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, SEPS demonstrates a mature posture, evidenced by ISO 27001 certification and HTTPS enforcement. Security best practices include secure forms and cookie consent, though some security headers are not explicitly confirmed. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, explicit incident response and vulnerability disclosure policies are not publicly found, representing an area for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing incident response policies, improving accessibility, and maintaining regular security audits to sustain and improve the security posture.

E

enseco.sk

enseco.sk

42

ENSECO is a Slovakian company specializing in turnkey technological solutions primarily for the energy sector. Their website presents a professional B2B service model offering comprehensive services including EPC projects, engineering, electrical activities, control systems, manufacturing, and quality control. The company appears to have a solid regional market position with a medium-sized business profile. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and explicit incident response information. No blocking or WAF mechanisms interfere with content accessibility. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

D

Družstvo CBA CZ

bimkarta.cz

40

BIM Karta is a Czech Republic based retail loyalty program operated by Družstvo CBA CZ, offering customers benefits such as discounts, vouchers, and product catalogs. The website serves as a customer portal for registration, account management, and accessing promotional materials. Technically, the site is built on WordPress using the GeneratePress theme and integrates common plugins like Yoast SEO and Google reCAPTCHA for security and SEO optimization. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and a consent banner. Overall, the site is legitimate, professional, and trustworthy with consistent WHOIS data and no blocking mechanisms detected.

C

Cornelissen aannemingsbedrijf

cornelissenbouw.nl

43

Cornelissen aannemingsbedrijf is a Dutch construction contracting company specializing in managing both large and small building projects with an emphasis on craftsmanship and customer involvement. The company targets individuals and businesses in the Netherlands seeking reliable construction services. The website is built on WordPress, utilizing Yoast SEO for search engine optimization and Google Analytics for visitor tracking. The technical infrastructure is modern but lacks some advanced security headers and privacy compliance features. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to align with best practices and regulatory requirements.

T

Tours Val de Loire Box

valdeloire-box.fr

41

Tours Val de Loire Box is a small French hospitality business specializing in selling curated experience gift boxes focused on the Val de Loire region. Their offerings include cultural passes, vintage vehicle rides, helicopter tours, gastronomy workshops, and weekend stays, targeting tourists and gift buyers interested in unique regional experiences. The website is professionally designed using WordPress with the Divi theme and WooCommerce platform, supported by modern web technologies such as jQuery and Snap.svg. The site is hosted by OVH, a reputable French provider, and includes SEO optimizations and mobile responsiveness. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy policies and terms of service are present and accessible, indicating GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional digital presence for a niche tourism business.

K

kimverlag GmbH

kimverlag.de

10

kimverlag GmbH is an independent, artist-led publishing company specializing in children's media, hobby art, and creativity. They develop and publish magazines, audio content, and digital media, also producing and licensing content for German and international book publishers. The company positions itself as a niche publisher with a focus on creative and child-friendly content, targeting children and hobby artists. The website reflects a small-sized business with a professional and consistent brand presence, founded around 2020 in Germany. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS platform with good SEO practices. Hosting is provided by rzone.de, a German hosting provider, and the site uses Google Analytics and a consent management platform for tracking and privacy compliance. The site is mobile optimized with moderate performance and basic accessibility features. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. However, no direct contact emails or phone numbers were found in the content provided. Overall, the website is trustworthy, professional, and compliant with privacy regulations, suitable for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact information for security or incident response purposes.

L

Laudert GmbH + Co. KG

laudert.de

74

Laudert GmbH + Co. KG is a European leader in holistic product communication, offering consulting, tools, content, and channel services primarily targeting businesses seeking to enhance their product messaging. The company positions itself as a highly effective partner in the media sector, with a professional and well-branded online presence. The website is built on WordPress with modern SEO and privacy compliance features, including a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Technically, the site employs standard web technologies and integrates Google Tag Manager and Cookiebot for analytics and consent management. Security posture is strong with HTTPS and Content-Security-Policy headers, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data for the domain is a notable anomaly that warrants further investigation. Overall, the website demonstrates a mature digital infrastructure and a high level of professionalism, supporting the company's market position.

U

Unite Caribbean

unite-caribbean.com

55

Unite Caribbean is a Caribbean-based consulting firm specializing in sustainable development and regional cooperation, with offices in Guadeloupe and Saint Lucia. The company offers consulting services and initiates cooperative projects in partnership with public, private, and philanthropic sectors in the Caribbean. The website is professionally designed using WordPress and Elementor, with multilingual support and SEO optimization. The technical infrastructure includes modern analytics and tracking tools such as Google Analytics and Tag Manager. Security posture is good with HTTPS enabled and domain transfer protection, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy or terms of service pages found. Overall, the website presents a trustworthy and professional image suitable for its target audience.

S

Spoconline Ads

spoconline-ads.fr

61

Spoconline Ads is a technology company specializing in urban innovation and smart city solutions, focusing on sustainable, connected, and people-centered urban environments. Their offerings include solar-powered connected urban furniture, advertising LCD screens, mapping solutions, and a digital creative studio, targeting businesses and municipalities primarily in the Caribbean region. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response information are not publicly detailed. WHOIS data is unavailable due to privacy protection, which is typical for this business type. Overall, the site presents a trustworthy and credible business presence.

E

Experis France

experisfrance.fr

55

Experis France is a well-established IT talent and solutions provider operating primarily in France, with a business foundation dating back to 2011. The company offers a broad range of IT services including professional resourcing, managed services, consulting, project services, and academy services, targeting IT professionals and businesses seeking specialized IT expertise. As a subsidiary of ManpowerGroup, Experis France benefits from a strong market position and brand recognition in the technology sector. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content tailored to its audience. Technically, the site is built on WordPress with modern frontend frameworks and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, and Piano Analytics, indicating a high level of digital maturity. Security-wise, the website enforces HTTPS, implements key security headers, and maintains GDPR compliance with cookie consent mechanisms. However, it lacks a dedicated security policy or incident response contact information, and no vulnerability disclosure or security.txt file is present. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the entity. Strategic recommendations include publishing explicit security policies, establishing incident response contacts, and enhancing accessibility features to further improve compliance and trust.

P

Accueil - Parc expo Montpellier

parc-expo-montpellier.com

8

Parc Expo Montpellier operates as an event venue located in Montpellier, France, providing exhibition spaces and hosting various events. The website is built on WordPress using Elementor and Yoast SEO plugins, indicating a moderate level of digital maturity. The site is accessible without any WAF or security challenges, and it features a cookie consent mechanism, though lacks explicit privacy and security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy. Security posture is moderate with no detected security headers or incident response information, suggesting room for improvement in security best practices. Overall, the website presents a professional front but would benefit from enhanced transparency and security measures to improve trust and compliance.

D

Digilor

digilor.fr

54

Digilor is a French technology company specializing in innovative interactive digital devices and custom tactile application development. The company targets businesses, public sector entities, and enterprises seeking advanced digital signage, interactive kiosks, and video conferencing solutions. Their market position is that of a specialized B2B provider with a strong focus on tactile and digital display technologies. The website reflects a professional and consistent brand image with comprehensive product and service information. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, including modern lazy loading and tracking technologies. Security posture is good with HTTPS and some security headers, though explicit security policies and incident response contacts are absent. Privacy and cookie policies are present and GDPR compliant, supporting user trust. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and content quality. Overall, Digilor demonstrates a mature digital presence suitable for its business domain.

P

Parc des Expositions de Colmar

colmar-expo.fr

41

Parc des Expositions de Colmar operates as a regional exhibition and event center in Colmar, France, offering 43,500 m² of modular spaces for professional and public events including concerts, trade shows, and congresses. The website is built on WordPress using Elementor and related plugins, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS and security headers properly configured, and a cookie consent mechanism is implemented. However, the site lacks explicit privacy policy and terms of service pages, which are important for GDPR compliance and user trust. Contact information is available primarily through a contact page and forms, with social media presence on Facebook, Instagram, and LinkedIn. WHOIS data is unavailable, limiting domain legitimacy assessment, but the website content and branding appear professional and consistent with a legitimate business.

V

VMV – Verkehrsgesellschaft Mecklenburg-Vorpommern mbH

vmv-mbh.de

54

VMV – Verkehrsgesellschaft Mecklenburg-Vorpommern mbH operates as a regional public transportation company in Mecklenburg-Vorpommern, Germany, providing services related to public transit schedules, ticketing, and regional transport network management. The website serves as an information portal for residents and travelers, offering schedule information, news updates, and contact options. The company positions itself as a key regional transportation authority with a focus on accessibility and customer engagement. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is evident with a comprehensive privacy and cookie policy, aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's regional transportation mission.

A

Anixy

anixy.eu

42

Anixy is a French company specializing in comprehensive ticketing and event management services for fairs and public trade shows. Positioned as a leader in its domain within France, the company offers end-to-end solutions including pre-event access preparation, on-site management of human and financial flows, and post-event result analysis. The website reflects a professional business model targeting event organizers, supported by client references and experience counters indicating over two decades of operation. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies such as Google Tag Manager and Axeptio for cookie consent. The site is mobile-optimized with good SEO and basic accessibility features. Hosting details are not explicit, but the domain is registered with a reputable registrar, GANDI. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms. However, it lacks explicit security headers, a published security policy, and incident response contacts. No vulnerabilities or suspicious elements were detected in the analysis. Overall, the website presents a trustworthy and professional digital presence with moderate to good technical and security posture. Strategic improvements in privacy compliance documentation and security policy publication would enhance trust and compliance.

N

NordSüd Verlag AG

nord-sued.com

50

NordSüd Verlag AG is a well-established Swiss children's book publisher with a strong market presence and a comprehensive digital platform. The website showcases a rich catalog of children's books, events, and related materials, targeting a general audience including parents, educators, and book enthusiasts. The company leverages modern web technologies including WordPress, WooCommerce, and Matomo analytics to provide a performant and user-friendly experience. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though DNSSEC is not enabled, representing an area for improvement. Privacy compliance is robust with clear cookie consent and a comprehensive privacy policy. Overall, the website reflects a professional and trustworthy business with consistent branding and high-quality content.

K

Komuneid

komuneid.com

50

Komuneid is a French digital agency based in Montpellier, specializing in website creation, SEO, digital strategy, and eCommerce solutions since 2007. The company positions itself as a global digital agency offering comprehensive services including content creation, web design, development, and social media propagation. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to data protection. However, the absence of WHOIS data raises questions about domain registration legitimacy, which should be verified. Security posture is generally good with HTTPS enforced and privacy plugins in use, but lacks advanced security headers and incident response information. Overall, the website presents a trustworthy and professional digital agency with room for improvement in security transparency and domain legitimacy verification.

A

Anixy

anixy.com

43

Anixy is a French company specializing in event management services, particularly focusing on fairs and public salons. They offer comprehensive ticketing management from preparation to post-event analysis, positioning themselves as a leader in their niche within France. The website is built on WordPress using Elementor and integrates modern SEO and tracking tools such as Yoast SEO and Google Tag Manager. The technical infrastructure is solid with HTTPS and cookie consent mechanisms in place, though some security headers are missing. Contact information is clearly provided, enhancing business credibility. However, formal security policies and incident response details are absent, indicating room for improvement in compliance and security transparency.

C

Corps Touristique

corps-touristique.at

49

Corps Touristique is a small, Austria-based non-profit association representing international and national tourism organizations. The website serves as a platform to promote tourism and provide information about member countries and events. The business model focuses on association and representation within the hospitality sector, targeting tourism organizations and stakeholders in Austria. The site is professionally designed using WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity. The technical infrastructure is stable with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service, though a cookie consent mechanism is present. Overall, the website is trustworthy and functional but could improve compliance and security transparency.

S

SMART Design | Gregic Advisory

sm-art-design.com

37

SMART Design | Gregic Advisory is a Croatian technology company specializing in advanced SMART web solutions, including custom web shops, web applications, and AI integrations. Positioned as a leader in the Zagreb region, the company targets businesses and professionals seeking high-performance, secure, and adaptive digital platforms. Their offerings emphasize nano-optimized code, dynamic content, and loyalty programs, reflecting a modern and innovative approach to web development. The website demonstrates a high level of digital maturity with professional design, responsive layouts, and comprehensive GDPR-compliant cookie management. Security posture is solid with HTTPS and secure forms, though explicit security policies and incident response details are absent. Overall, the company presents a trustworthy and professional image with strong client references including government and educational institutions.

F

forward

forward.live

55

The website forward.live represents the 'fwd: Bundesvereinigung Veranstaltungswirtschaft e.V.', a German non-profit association dedicated to the event industry. It serves as a central platform for members of the event sector, focusing on political advocacy, networking, knowledge transfer, and sustainability initiatives. The organization positions itself as a key voice for the industry at the national and regional levels, with a clear emphasis on community and future-oriented development. The site content is professionally presented in German, targeting industry professionals and stakeholders. Technically, the website is built on WordPress using Elementor and several Jet plugins, with SEO optimization via Yoast. It employs modern web technologies including jQuery and Google Tag Manager for analytics. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks visible security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for this type of organization. No explicit security or incident response policies are publicly available, suggesting an area for enhancement. Overall, the website demonstrates a strong business credibility and compliance posture with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

F

Fair-ON-Pay Association

fair-on-pay.com

52

Fair-ON-Pay Association is a Swiss-based non-profit organization founded in 2022 that promotes equal pay in companies through certification and auditing services. It offers a recognized certification process with multiple levels, audited by SGS, to help companies demonstrate their commitment to equal pay and social responsibility. The association is a member of the Equal Pay International Coalition (EPIC), enhancing its credibility and international standing. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. It integrates Google Analytics and a GDPR-compliant cookie consent mechanism, reflecting a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website and business present a trustworthy and professional image with clear contact information and partner relationships.