Security Directory

S

StairwayStudios

stairwaystudios.de

40

StairwayStudios is a small, established multimedia agency based in Schwarzenbek, Germany, specializing in web design, print design, and multimedia marketing services. Founded in 2000, the company leverages TYPO3 CMS and modern frontend technologies to deliver responsive and SEO-friendly websites, complemented by print media and corporate video production. Their client portfolio and testimonials indicate strong local market presence and long-term customer relationships. Technically, the website is built on TYPO3 CMS with common libraries such as jQuery and Bootstrap, but suffers from slow load times and lacks modern performance optimizations. Security posture is weak due to the absence of a valid SSL certificate and HTTPS, missing security headers, and lack of advanced security features like HSTS and OCSP stapling. Privacy compliance is supported by a cookie consent banner and a privacy policy in German, indicating GDPR awareness. Overall, the site is professional but requires significant security and performance improvements to enhance trust and user experience.

A

Amtsverwaltung Büchen

amt-buechen.de

40

Amt Büchen operates as a local government administration serving 15 municipalities in the Herzogtum Lauenburg district of Schleswig-Holstein, Germany. The website provides comprehensive citizen services, public announcements, and administrative information primarily targeting residents and local businesses. The site is built on TYPO3 CMS and uses common frontend technologies such as Bootstrap and jQuery, hosted by Hetzner. Despite good content quality and clear navigation, the site lacks a valid SSL certificate, which impacts security posture and user trust. Cookie consent mechanisms are implemented, supporting GDPR compliance. Contact information is clearly presented, enhancing business credibility. However, the absence of security headers and slow page load times indicate areas for technical improvement.

A

Amtsverwaltung Büchen

amt-buechen.eu

40

Amt Büchen is a regional government administration serving 15 municipalities in the Herzogtum Lauenburg district of Schleswig-Holstein, Germany. The website provides citizens with access to public services, administrative information, announcements, and digital portals such as appointment booking and citizen services. The site targets local residents and stakeholders, offering a comprehensive overview of the Amt's functions and community resources. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, hosted by Hetzner. While the site is well-structured and mobile-optimized, it suffers from a critical security issue: the SSL certificate is invalid or missing, resulting in no HTTPS support. This severely impacts the security posture and trustworthiness of the site. Other security best practices such as security headers, DMARC, and HSTS are also missing. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, but no terms of service or security policy pages are found. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

G

Gemeinde Büchen

buechen.de

40

Gemeinde Büchen operates as a local government entity serving approximately 6,700 residents in the Herzogtum Lauenburg district of Germany. The website provides comprehensive information about municipal services, including family and social services, education, culture, economy, and local infrastructure. It targets residents, families, businesses, and visitors, positioning itself as a community hub with a focus on quality of life and connectivity. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, but suffers from slow load times and lacks modern security configurations such as HTTPS. The security posture is weak due to the absence of SSL/TLS encryption, security headers, and DNS security features. Privacy compliance is partially addressed with a cookie consent mechanism and a privacy policy, but no terms of service or incident response policies are evident. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

B

BunnyWay d.o.o.

bunnycdn.com

62

Bunny.net is a global edge platform providing content delivery network (CDN), streaming, storage, optimization, and edge computing services. It serves over 1.5 million websites with a robust infrastructure spanning 119+ edge locations worldwide. The platform is designed to deliver high performance, security, and reliability, targeting businesses that require fast and secure content delivery. Technically, the website leverages modern frameworks like Gatsby and React, with strong security practices including TLS 1.3 support and no known SSL vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, bunny.net demonstrates a mature digital presence with strong business credibility and technical implementation.

B

Bertelsmann SE & Co. KGaA

bertelsmann.de

40

Bertelsmann SE & Co. KGaA is a leading international media conglomerate headquartered in Germany, operating across multiple sectors including broadcasting, book publishing, music, services, printing, education, and investments. The website reflects a mature corporate presence with comprehensive information targeting investors, journalists, job seekers, and the general public. The business model is diversified with strong subsidiaries such as RTL Group and Penguin Random House, positioning Bertelsmann as a major player in the global media industry. Technically, the website employs established web technologies like Bootstrap and jQuery, with content delivery via Amazon CloudFront CDN, ensuring good performance and mobile optimization. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture. Security headers are partially implemented, but critical HTTPS and TLS configurations are missing, exposing the site to potential risks. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent managed by Cookiebot. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

B

Bertelsmann Education Group

bertelsmann-education-group.com

55

Bertelsmann Education Group is a medium-sized entity under the Bertelsmann parent company, focusing on investments and partnerships in healthcare training and education solutions. The company targets healthcare organizations and education sector stakeholders, aiming to address workforce and skills shortages through innovative learning and workforce management solutions. The website reflects a professional and consistent brand presence, highlighting key subsidiaries such as Afya Limited and Relias. Technically, the site is built on WordPress using Elementor and Astra theme, with moderate performance and good mobile optimization. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocols, despite having some security headers and a strict DMARC policy. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism via Cookiebot. Overall, the site is functional and credible but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

B

Bertelsmann SE & Co. KGaA

bertelsmann.com

52

Bertelsmann SE & Co. KGaA is a leading international media conglomerate headquartered in Germany, operating through multiple divisions such as RTL Group, Penguin Random House, BMG, and Arvato Group. The company provides a wide range of media, publishing, entertainment, and service offerings targeting journalists, investors, applicants, and the general public. The website reflects a mature digital presence with comprehensive corporate, investor, and media information, supported by strong branding and consistent content quality. Technically, the site uses established technologies like jQuery, Bootstrap, and Cookiebot for consent management, hosted on AWS CloudFront CDN. However, the absence of a valid SSL/TLS certificate and disabled HTTPS protocols represent critical security gaps. Security headers and content security policies are implemented but cannot compensate for the lack of HTTPS, which is essential for protecting user data and trust. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy but requires urgent security improvements to meet modern standards.

X

Xanadu

xanadu.ai

51

Xanadu is a Canadian quantum computing company focused on developing photonic quantum hardware and quantum software tools such as PennyLane and Catalyst. The company positions itself as an innovator in scalable, networked, and modular quantum computers, targeting researchers, developers, and enterprises interested in quantum technologies. Their partnerships with major automotive companies like Volkswagen and BMW highlight their industry collaborations and market relevance. Technically, the website is built on modern frameworks like React and Gatsby, hosted on AWS infrastructure, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS, lack of security headers, and no advanced TLS configurations. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

L

Landitec GmbH

scope7.de

40

scope7.de is the online presence of Landitec GmbH's scope7® brand, specializing in hardware appliances tailored for open source solutions such as OPNsense®, flexiWAN, IPFire, Untangle®, and FRRouting. The company positions itself as a provider of powerful, cost-effective, and ready-to-use hardware platforms that are pre-installed with popular open source firewall and routing software. Their market position is strengthened by official certifications and partnerships, notably as an OPNsense Platinum Partner and flexiWAN certified hardware provider. The website reflects a professional and consistent brand image targeting businesses and professionals seeking vendor-independent open source security appliances. Technically, the site is built on Joomla CMS with modern frontend libraries and extensions, delivering good performance and mobile optimization. Security posture is solid with HTTPS enforced, HSTS header present, and no detected SSL vulnerabilities, though improvements like OCSP stapling and DNSSEC could enhance security further. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Contact information is available with a clear company phone number and contact forms, supporting business credibility. Overall, the website demonstrates a mature digital presence with strong business and security fundamentals.

B

BG Verkehr

bg-verkehr.de

40

BG Verkehr is a German statutory accident insurance institution specializing in transportation and logistics sectors. The website provides comprehensive information about insurance coverage, prevention, rehabilitation, and training services tailored for employees and companies in these industries. The site targets German-speaking users and serves as an official communication channel for BG Verkehr's services and updates. Technically, the website is built on the Plone CMS platform, utilizing modern frontend libraries such as Bootstrap and Font Awesome, and integrates Piwik/Matomo for analytics and Cookiefirst for cookie consent management. However, a critical security shortfall is the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks and undermining trust. The site lacks security headers and advanced SSL configurations, which further impacts its security posture. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the website is professionally designed with good content quality and navigation but requires urgent security improvements to meet modern standards.

E

Error: 404 Page not found

qiata.com

40

The website at qiata.com currently serves only a 404 Page Not Found error with no accessible business content or metadata. The site uses Joomla CMS with the Helix Ultimate template framework and includes Bootstrap and Font Awesome libraries. The SSL configuration supports TLS 1.2 with a strong cipher suite but lacks modern features such as TLS 1.3, HSTS, OCSP stapling, and DNSSEC, indicating a basic security posture. No privacy, cookie, or terms of service policies are present, nor is there any contact or business information available on the site. Performance is slow with a page load time of approximately 4.8 seconds. Overall, the site lacks content, security best practices, and compliance indicators, resulting in a low trustworthiness and professionalism rating.

V

VisiConsult

visiconsult.de

40

VisiConsult is a family-owned German company recognized as a global market leader in customized and standardized X-ray inspection solutions for non-destructive testing (NDT), quality assurance, and process optimization. The company operates multiple business divisions and subsidiaries, including VCxray, VCbattery, VCcount, and VC Inspection Services, as well as diondo X-ray Systems and Services. Their solutions serve diverse industries such as aerospace, automotive, defense, energy, and manufacturing. Technically, the website is built on WordPress with the Avada theme and uses modern web technologies including TLS 1.3 for secure communications. The site is well-optimized for SEO and mobile devices, with good accessibility features. Security posture is solid with no critical vulnerabilities detected, although improvements like enabling HSTS and OCSP stapling are recommended. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website reflects a professional, trustworthy, and technically mature organization.

S

Sof.IA

sofia.vc

40

Sof.IA is a Brazilian technology company offering an AI-powered personal assistant accessible via WhatsApp. The service integrates multiple AI platforms such as ChatGPT, OpenAI, Google, and Microsoft to provide features including image generation, translations, mathematical solutions, and audio-based Q&A. The business model is credit-based with free trial credits and paid packages, targeting smartphone users seeking practical AI assistance. Technically, the website is built on WordPress with Elementor and related plugins, hosted on AWS infrastructure. However, the site suffers from slow performance and lacks a valid SSL certificate, exposing users to security risks. Security posture is weak with no HTTPS, no security headers, and missing DNS security records. Privacy compliance is poor, with no privacy or cookie policies despite collecting user data via forms. Contact information is available via email and contact forms, but no formal security or incident response policies are found. Overall, the site is functional but requires significant improvements in security and privacy to enhance trust and compliance.

A

Atria Design & Inovação

studioatria.com.br

47

Atria Design & Inovação is a Brazilian small design studio specializing in innovation, branding, and digital experience services. The company targets businesses seeking to enhance their brand and user experience through strategic design solutions. Their website showcases multiple client case studies and a clear service offering, positioning them as an innovative design partner in their market segment. Technically, the website uses modern frontend libraries such as Bootstrap, jQuery, and Owl Carousel, hosted on Locaweb, but suffers from slow load times and lacks a CMS or structured data for SEO enhancement. Security posture is weak due to the absence of a valid SSL certificate, no HTTPS support, and missing security headers, exposing the site to significant risks. Privacy compliance is basic with a cookie consent popup and a privacy policy page, but no GDPR-specific indicators or terms of service are present. Overall, the site is professional in design and content but requires urgent security improvements to protect user data and build trust.

E

E-MEDIAD GmbH

e-mediad.de

40

E-MEDIAD GmbH is a small, established creative agency based in Cologne, Germany, specializing in digital design, web development, and branding services since 2002. The company targets businesses and startups seeking professional digital and design solutions. Their website showcases a professional design with a rich portfolio and clear navigation, indicating a strong market position in the regional creative services sector. Technically, the website is built on WordPress using Elementor and LayerSlider, with additional plugins for SEO and cookie consent management. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers are well implemented, but the absence of modern TLS protocols and strong cipher suites reduces overall security. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to meet modern security standards.

G

Geomatex Integrated Solutions

geomatex.com

57

Geomatex Integrated Solutions is a specialized geo-intelligence system integrator based in Egypt, focusing on reality modelling applications that serve CAD, GIS, BIM, and Digital Twin technologies. The company positions itself as a regional leader with a highly experienced team offering key services such as As-Built Documentation, Ground Penetrating Radar, Drone Services, and 3D laser scanning. Their target audience includes clients across various sectors requiring advanced geo-intelligence solutions. Technically, the website employs common web technologies like jQuery and Bootstrap but suffers from slow performance and lacks modern security configurations. The SSL certificate is invalid, and no advanced security headers or DNS protections are in place, exposing the site to potential risks. Privacy compliance is minimal, with no cookie consent mechanisms detected and only a basic privacy policy present. Overall, the business demonstrates moderate digital maturity but requires significant improvements in security and privacy to enhance trust and compliance.

F

Feira na Rosenbaum

feiranarosenbaum.com.br

50

Feira na Rosenbaum is a Brazilian cultural and design event platform that showcases independent Brazilian artists and designers through fairs and an online presence. The website serves as a portal to promote the event, artists, and related news, targeting audiences interested in Brazilian design and culture. The business operates in a niche market with a small size and focuses on promoting Brazilian identity through design. Technically, the website is built on an outdated WordPress CMS version 4.8.25, hosted on solisys.net.br, and uses common web technologies such as Google Analytics and Font Awesome. Performance is slow with a high load time, but mobile optimization and SEO are reasonably good. Security posture is weak, with no valid SSL certificate, no modern TLS protocols, and no security headers or DNS security features implemented. There is a lack of privacy, cookie, and terms of service policies, which impacts compliance and trust. Overall, the site is functional for its business purpose but requires significant security and compliance improvements.

4

4ED

4ed.cc

62

4ED is a Brazilian design school offering a broad range of online and in-person courses across multiple design disciplines including graphic, UX/UI, marketing, architecture, and product design. Established in 2011 and based in Porto Alegre, it serves students, professionals, and corporate clients with a comprehensive educational portfolio. The website demonstrates a mature digital presence with extensive use of WordPress, WooCommerce, and Elementor, complemented by advanced marketing and analytics tools such as Google Analytics, Facebook Pixel, and Bing UET. However, the absence of a valid SSL certificate on the main domain represents a significant security risk that could undermine user trust and data protection efforts. While privacy and cookie policies are well implemented and GDPR compliant, there is no explicit security or incident response policy publicly available. Overall, 4ED maintains a strong market position in design education in Brazil but should prioritize improving its security posture to safeguard its digital assets and user data.

U

Unisinos

unisinos.br

57

Unisinos is a private Jesuit university in Brazil offering a wide range of educational programs including undergraduate, graduate, MBA, specialization, extension, and distance learning courses. It holds a strong market position as one of the top private universities in Brazil with over 55 years of history and numerous international partnerships. The institution is maintained by Associação Antônio Vieira (ASAV), a non-profit entity certified as a social assistance beneficent entity. The website reflects a comprehensive academic offering with clear navigation and strong branding consistency. Technically, the site is built on Joomla CMS with Helix3 framework and hosted likely on Microsoft Azure, but suffers from poor SSL/TLS configuration and slow performance.

S

Serviço Florestal Brasileiro

florestal.gov.br

56

Serviço Florestal Brasileiro is a Brazilian federal government agency dedicated to forest management, environmental regularization, and sustainable forest development. The website serves as an official portal providing information, services, and transparency related to forestry policies and programs. It targets citizens, government entities, and environmental stakeholders, positioning itself as a key government entity in Brazil's environmental governance. Technically, the site is built on the Plone CMS and integrates with the gov.br platform, using various modern web technologies and accessibility tools. However, the site suffers from critical security shortcomings, including the absence of a valid SSL certificate and missing DNS records, which pose risks to secure communications and domain resolution. The site implements cookie consent mechanisms and privacy policies, but overall security posture is weak. Social media presence is strong, enhancing outreach and transparency. Performance is slow, indicating potential optimization needs.

P

Promob Softwares Solutions

promob.com

50

Promob Softwares Solutions is a leading software developer specializing in the furniture sector, recognized as the largest in the world for this industry. Their comprehensive suite of software solutions covers design, production, sales, and education, targeting a broad audience including carpentry shops, factories, furniture stores, designers, architects, and educational institutions. The company emphasizes innovation and integration across the furniture production and sales lifecycle. Technically, the website is built on a modern WordPress platform using Elementor, supported by a robust tech stack including jQuery, JetElements, and various marketing and analytics tools. The hosting infrastructure leverages Azure DNS services, and the site employs modern SSL protocols (TLS 1.3 and 1.2) with OCSP stapling, ensuring secure communications. Performance is moderate with good mobile optimization and accessibility. From a security perspective, the site implements SPF and DMARC (though with a 'none' policy), uses Cookiebot for GDPR-compliant cookie consent, and shows no major SSL vulnerabilities. However, improvements such as enabling HSTS, DNSSEC, and a stricter DMARC policy could enhance security. No explicit security or incident response policies were found. Overall, Promob demonstrates a mature digital presence with strong business positioning and technical infrastructure. The extensive use of third-party analytics and marketing tools indicates a sophisticated approach to user engagement and data-driven marketing, balanced with compliance mechanisms. Strategic recommendations include enhancing security headers, improving compliance policies, and establishing clear incident response protocols.

L

Lineup

lineup.com

55

Lineup is a specialized software provider offering ERP and revenue management solutions tailored for the media and advertising industry. Their flagship product, Adpoint, integrates CRM, order management, finance, and analytics to streamline media sales processes and boost revenue. The company has a solid market presence with notable clients and significant ad revenue processed through their platform. Technically, the website is built on WordPress using the Salient theme and incorporates multiple marketing and analytics tools including HubSpot, Google Analytics, Hotjar, and LinkedIn Insight Tag. However, the site currently lacks a valid SSL certificate and modern TLS support, which poses a significant security risk. While SPF and DMARC email protections are properly configured, the absence of HTTPS undermines user trust and data security. The company demonstrates good privacy compliance with GDPR-aligned cookie consent mechanisms and detailed cookie categorization. Overall, Lineup presents a professional and trustworthy digital presence but must urgently address its SSL/TLS deficiencies to improve security posture and user confidence.

Q

qwertiko GmbH

navigate-it-services.de

50

qwertiko GmbH is a medium-sized German IT service provider specializing in professional hosting and Platform-as-a-Service (PaaS) solutions. With over 10 years of experience, the company offers tailored, high-performance cloud hosting, managed services, firewall solutions (notably pfSense®), and personalized consulting. Their market position is strengthened by official partnerships and a focus on personal customer service, targeting businesses and agencies requiring reliable and scalable IT infrastructure. Technically, the website is built on WordPress using WPBakery Page Builder and several plugins, hosted on infrastructure managed by nroute.de. While the site demonstrates good SEO and mobile optimization, the analyzed domain lacks a valid SSL certificate and modern TLS support, which is a critical security gap. The company maintains GDPR compliance with a comprehensive privacy and cookie policy and provides clear contact information and customer testimonials, enhancing trust. However, there is no explicit terms of service or security policy published, and incident response details are absent. Overall, qwertiko presents a professional digital presence with room for security improvements.

K

KM Business Information Canada Ltd.

lawawards.ca

63

The Canadian Law Awards website serves as a digital platform for promoting and managing an annual legal industry awards event in Canada. It is operated by KM Business Information Canada Ltd. and closely associated with the Canadian Lawyer and Lexpert brands, positioning itself as a reputable media and event organizer within the legal sector. The site targets legal professionals, law firms, and sponsors, offering event information, winner announcements, and sponsorship opportunities. Technically, the website is built on WordPress with Bootstrap and uses various third-party marketing and analytics tools including Google Analytics, Google Tag Manager, HubSpot Forms, and Bombora. However, the site suffers from significant security shortcomings, including an invalid SSL certificate and lack of modern TLS support, which undermines user trust and data protection. Despite enabling HSTS, the absence of a valid certificate renders it ineffective. There is no visible privacy or cookie policy, and no direct contact emails or phone numbers are provided, limiting transparency. The site exhibits good design and user experience but is slow to load due to large page size and many resources. Overall, the website is a moderately professional media event site with room for improvement in security and privacy compliance.

Cohesive Group is a globally recognized asset management solutions provider specializing in enterprise asset management, advisory, and data services. With a strong partnership ecosystem including IBM, Microsoft Azure, AWS, Bentley, and Planon, Cohesive delivers comprehensive digital transformation and asset lifecycle management solutions to complex infrastructure owners and operators. Their market position is reinforced by over 700 successful IBM Maximo implementations and a reputation as a stand-out leader in the industry. Technically, the website is built on WordPress with modern front-end technologies and hosted on Microsoft Azure infrastructure. While the site demonstrates good SEO and mobile optimization, performance is slow and there is room for improvement in accessibility and security headers. Security posture is solid with modern TLS support and no critical vulnerabilities detected, but enhancements such as HSTS, DNSSEC, and CAA records are recommended. Overall, Cohesive presents a professional and trustworthy digital presence aligned with its business objectives.

A

ABIMÓVEL

brazilianfurniture.org.br

54

Brazilian Furniture is a project supported by ABIMÓVEL and Apex-Brasil focused on promoting the Brazilian furniture manufacturing sector and design industry. The website serves as a platform for industry news, events, and export promotion, targeting furniture professionals, designers, and international buyers. The site demonstrates a moderate level of digital maturity with use of common web technologies and marketing tools but suffers from significant security shortcomings, including an invalid SSL certificate and lack of security headers. The absence of privacy and cookie policies indicates compliance gaps. Overall, the business is well positioned within its sector but should improve its digital security and compliance posture to enhance trust and protect user data.

C

Contentserv

contentserv.com

63

Contentserv is an enterprise-level technology company specializing in AI-powered Product Experience Management (PXM) cloud solutions. Recently acquired by Centric Software, Contentserv offers a comprehensive suite of services including Product Information Management, Digital Asset Management, and Multichannel Publishing, targeting marketers, product teams, and IT professionals. The website is built on HubSpot CMS and integrates multiple marketing and analytics tools, demonstrating a mature digital infrastructure. However, the current SSL/TLS configuration is invalid, posing a significant security risk. While privacy and cookie policies are present and GDPR compliant, there is no explicit security policy or incident response information publicly available. Overall, the company maintains a strong market position with excellent branding and content quality but should urgently address its SSL/TLS issues and enhance transparency around security practices.

R

RegioHelden GmbH

stroeer-online-marketing.de

64

RegioHelden GmbH, operating under the brand Ströer Online Marketing, is a large German media company specializing in local and measurable online marketing services for small and medium-sized enterprises. They hold a strong market position as one of the largest providers in Germany, offering a broad portfolio including Google Ads, SEO, directory listings, website creation, and social media advertising. Their digital presence is supported by a modern WordPress-based infrastructure with integrated analytics and consent management tools, reflecting a mature digital marketing operation. Security-wise, the company employs good SSL configurations, DNS security records like SPF and DMARC, and a comprehensive cookie consent mechanism, although there is room for improvement in HTTP security headers and vulnerability disclosure practices. Overall, the company demonstrates a high level of professionalism and trustworthiness, with clear contact channels and strong branding.

R

Readly

readly.com

70

Readly is a digital media company offering a subscription-based magazine app that provides unlimited access to thousands of magazines globally. The company has a strong market position with a broad international footprint, targeting consumers who prefer digital reading experiences with features like offline access and family sharing. Technically, the website is built on Ruby on Rails and leverages modern web technologies and cloud hosting via AWS, with moderate performance and good mobile optimization. Security-wise, Readly employs strong TLS configurations, SPF and DMARC email protections, but lacks some advanced security features such as HSTS and OCSP stapling. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear cookie consent mechanism. Overall, the company demonstrates a mature digital presence with room for security enhancements.

O

OBJENTIS Software Integration GmbH

objentis.com

65

OBJENTIS Software Integration GmbH is an established Austrian IT service provider specializing in software testing consulting, automation, and training. With over 26 years of experience and a portfolio of notable clients including major banks and insurance companies, OBJENTIS positions itself as a trusted partner in the software lifecycle. Their offerings include consulting solutions, innovative driverless test automation products, and tailored training workshops. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supported by modern web technologies and plugins for search and cookie management. Security-wise, the domain employs valid SPF and DMARC records with strict policies, supports TLS 1.2 and 1.3, and avoids known SSL vulnerabilities. However, improvements are needed in SSL configuration such as enabling HSTS and OCSP stapling, and publishing a security.txt file. Overall, the site demonstrates good digital maturity and professionalism, with moderate performance and good mobile optimization. The presence of client testimonials, certifications, and social media links enhance trust. Strategic recommendations include enhancing HTTPS security headers, formalizing security policies, and improving transparency around incident response.

C

Comunidade YES

yesmovelshow.com.br

55

Comunidade YES operates a Portuguese-language online portal focused on the Brazilian retail and furniture sectors, providing industry news, event promotion, and community engagement. The website serves as a hub for professionals and stakeholders in furniture, electronics, and mattress retail, offering content such as articles, event details, and social projects. Their market position is niche but established within this sector, supported by multiple event brands like Yes Móvel Show and Yes Varejo Summit. Technically, the site uses a standard LAMP stack with popular frontend libraries such as Bootstrap, jQuery, and Owl Carousel, but lacks a recognized CMS. Performance is moderate with good mobile optimization and basic SEO. Security posture is weak due to an invalid SSL certificate, lack of modern TLS protocols, and missing security headers, exposing the site to potential risks. Privacy compliance is minimal with a basic privacy policy but no cookie consent mechanism or terms of service. Overall, the site is professionally designed and functional but requires significant security and compliance improvements.

V

Varejo Brasil

revistavarejobrasil.com.br

51

Varejo Brasil is a Brazilian digital media portal specializing in retail business news, events, and market insights. It serves retail professionals and business stakeholders with news articles, event calendars, and business information primarily focused on the Brazilian retail sector. The website is powered by WordPress and uses various plugins to manage events and user login functionalities. It is hosted behind Cloudflare, providing DNS and CDN services, and employs Google Tag Manager for analytics and tracking. The site has a valid SSL certificate but lacks advanced security headers and DNS email authentication records. No explicit privacy, cookie, or terms of service policies were found, indicating potential compliance gaps. Contact information is limited to a login form with no public emails or phone numbers. The website's performance is slow due to a large page size and many resources, but it offers good mobile optimization and SEO practices. Structured data for events and website search is implemented, enhancing search engine visibility.

P

Portal AL1

al1.com.br

59

Portal AL1 is a regional news media website focused on delivering news, videos, and opinion content primarily for the Maceió and Alagoas region in Brazil. It serves a general audience interested in local, national, and international news with a business model based on advertising revenue. The website demonstrates a consistent brand presence and good content quality with active social media engagement. Technically, the site relies on common web technologies such as jQuery, Bootstrap, and Cloudflare for DNS and partial security. However, the absence of a valid SSL certificate and modern TLS protocols significantly undermines the site's security posture. The site also exhibits slow performance and basic mobile optimization. Security best practices are not fully implemented, with missing security headers, no HSTS, and no DNSSEC. Privacy and compliance policies are absent, which may expose the business to regulatory risks. Overall, the site is functional but requires urgent improvements in security and compliance to protect user data and enhance trust.

K

KM Business Information US, Inc

keymedia.com

57

Key Media is a globally recognized B2B media company specializing in niche publishing, events, and digital content delivery across multiple sectors including mortgage, insurance, HR, and wealth management. With a medium-sized workforce and offices worldwide, it maintains a strong market position supported by numerous industry awards and a large global audience. The website infrastructure is built on Joomla CMS with standard web technologies and is hosted behind Cloudflare, ensuring basic performance and security. However, the site exhibits slow load times and lacks advanced mobile optimization and accessibility features. Security posture is moderate with valid SSL, SPF, and DMARC configurations but lacks HSTS, DNSSEC, and CAA records, which are recommended for enhanced protection. No explicit security or incident response policies are publicly available, and cookie consent mechanisms are absent, indicating potential compliance gaps. Overall, the site is professional and trustworthy but could benefit from technical and security enhancements to improve resilience and user trust.

H

Hipporello

hipporello.net

57

Hipporello operates a service desk platform aimed at businesses requiring customer support management solutions. The website serves as a portal for their service desk offering, targeting organizations seeking SaaS-based helpdesk tools. The technical infrastructure is modern, leveraging React and hosted on Netlify, with external dependencies on popular icon libraries and Google Tag Manager for analytics. However, the site lacks a valid SSL certificate and does not enable modern TLS protocols, which significantly undermines its security posture. Key security headers are present but incomplete, and no formal privacy, cookie, or terms of service policies are found, indicating compliance gaps. Overall, the website demonstrates basic digital maturity but requires urgent improvements in security and compliance to build trust and protect user data.

F

Fortress Consulting Group

gofortress.com

60

Fortress Consulting Group is a medium-sized, award-winning branding, web design, advertising, and marketing agency based in Chicago, Illinois. The company specializes in digital marketing and brand strategy, serving businesses seeking to enhance their brand presence and market reach. Their key services include branding, corporate identity, web and digital experience, advertising, social media marketing, SEO, content marketing, and more. The agency positions itself as a strategic partner for brand success with a strong portfolio and client base. Technically, the website is built on WordPress using Elementor, integrated with multiple marketing and analytics tools such as HubSpot, Google Analytics, Facebook and TikTok pixels, and Lead Forensics. The site shows good SEO and accessibility practices but suffers from slow performance and lacks modern TLS protocol support. Security posture is basic with valid SSL but missing DNSSEC and security headers. Cookie consent mechanisms are implemented, supporting GDPR compliance. Overall, the company demonstrates a professional and trustworthy online presence with room for technical and security improvements.

I

Interlink

interlink.org

66

Interlink is a socially-driven company builder focused on developing, funding, and implementing solutions to social, environmental, and economic challenges. Positioned as a medium-sized enterprise based in Germany, it operates multiple companies across sectors such as green energy, bot protection, coworking spaces, and resource reuse. The website reflects a strong commitment to sustainability and social entrepreneurship, targeting startups, freelancers, and established companies. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, employing modern plugins and privacy-compliant analytics. Security posture is generally strong with valid SSL, HSTS, and security headers, though TLS protocols are currently disabled, which is a critical area for improvement. No explicit security or incident response policies are published, indicating room for maturity in security governance. Overall, Interlink presents a professional and trustworthy digital presence aligned with its mission and audience.

DEKRA Neo GmbH is a German media agency specializing in digital learning solutions including live online trainings, e-learning, and explainer videos, with a focus on safety, security, and sustainability. The company operates as a medium-sized entity with a full-service approach, leveraging in-house production capabilities and longstanding industry expertise. Their market position is strengthened by partnerships with DEKRA and a client base including major corporations such as Lufthansa Group. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, optimized for performance and mobile use, though some security configurations like TLS protocols and DNSSEC could be improved. The security posture is solid with ISO 27001 certification and valid SSL, but lacks advanced HTTP security headers and modern TLS support. Overall, the company demonstrates a mature digital presence with strong trust indicators and compliance with GDPR.

D

DEKRA Neo GmbH

dekra-neo.com

60

DEKRA Neo GmbH is a German media agency specializing in digital learning solutions including live online trainings, e-learning, and explanatory films, with a focus on safety, security, and sustainability sectors. The company operates as a medium-sized entity with a full-service model, leveraging inhouse production and IT capabilities to deliver tailored learning media. Their market position is strengthened by notable clients and a rebranding under the DEKRA group umbrella since 2024. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, optimized for performance and mobile use, though it lacks some advanced security configurations like modern TLS protocols and DNSSEC. The security posture is solid with ISO 27001 certification and GDPR compliance, but improvements in SSL/TLS configuration and DNS security are recommended. Overall, the company demonstrates a high level of professionalism, trustworthiness, and digital maturity, with clear business and technical strategies aligned to their market niche.

F

Featured Customers

featuredcustomers.com

64

Featured Customers operates as an online platform specializing in providing reviews, testimonials, and case studies for B2B and SaaS software and services. The platform targets B2B buyers and SaaS users seeking customer insights to inform purchasing decisions. The business model revolves around aggregating and showcasing customer feedback to enhance software selection processes. The company appears to be medium-sized within the technology sector, with a moderate market position focused on niche B2B software review services. Technically, the website is built using React and served via an nginx server hosted on DigitalOcean. It employs Google Fonts and Font Awesome for styling and icons, along with third-party tools such as UserWay for accessibility and Factors.ai for tracking. Performance is fast, but mobile optimization and SEO are basic. The absence of a CMS and limited metadata suggest a relatively simple technical infrastructure. From a security perspective, the site implements some security headers like X-Frame-Options and Content-Security-Policy to prevent clickjacking and framing attacks. However, the SSL configuration is weak, with no modern TLS protocols enabled, which poses a significant risk to secure communications. There are no visible privacy, cookie, or terms of service policies, nor GDPR compliance mechanisms, indicating gaps in regulatory adherence and user data protection. No incident response or vulnerability disclosure information is available. Overall, the website presents moderate trustworthiness but requires significant improvements in security posture, privacy compliance, and transparency. Strategic enhancements in SSL configuration, policy publication, and accessibility would strengthen the platform's reliability and user confidence.

H

HornerXpress® Worldwide

hxworldwide.com

64

HornerXpress® Worldwide is a well-established global distributor specializing in pool and spa equipment since 1969. The company holds a leading market position with a broad portfolio of product lines and a global customer base spanning over 100 countries. Their business model focuses on B2B distribution, supported by value-added services such as logistics and marketing support. The website reflects a professional and consistent brand image with clear communication of their services and partnerships. Technically, the website is built on WordPress using Elementor and WooCommerce, hosted on WP Engine, indicating a modern and scalable infrastructure. Performance is inferred to be fast with good mobile optimization and SEO practices. However, accessibility is basic and could be improved. From a security perspective, the site has a valid SSL certificate but lacks modern TLS protocol support and important security headers. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy. Incident response and vulnerability disclosure information are absent, indicating room for maturity in security governance. Overall, the website and business demonstrate strong market presence and technical foundation but would benefit from enhanced security practices and compliance transparency to reduce risk and build greater trust with customers and partners.

S

studio.site

studio.site

65

The website studio.site currently serves a 'Page not found' error page with minimal content and no visible business or contact information. The site is built using the Nuxt framework and leverages Google Fonts and Font Awesome for styling. Hosting appears to be on Google Cloud infrastructure. The technical infrastructure is modern but the site lacks substantive content and business details, indicating it may be inactive or under development. Security posture is weak due to an expired SSL certificate, absence of TLS protocols, and missing security headers beyond a basic Content-Security-Policy. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. Overall, the site exhibits low trustworthiness and poor user experience.

The Fellowship Of Gamblers Anonymous Scotland is a small non-profit organization dedicated to supporting individuals suffering from gambling addiction within Scotland. The organization provides a 24-hour helpline, local group support, and resources to help problem gamblers and their families. Their website serves as an informational and support portal, including a member login area and contact details for further assistance. The organization positions itself as a specialized support entity within the non-profit sector focused on addiction recovery. Technically, the website is built on WordPress using Elementor and related plugins, hosted on Inventive Cloud infrastructure. However, the site lacks a valid SSL certificate, which impacts security and user trust. Security posture is basic with no advanced policies or vulnerability disclosures present. Privacy policy exists but is basic and not fully GDPR compliant. Overall, the digital maturity is moderate with room for improvement in security and compliance.

S

StoneHardscapes, LLC

stonehardscapes.com

82

StoneHardscapes, LLC is a medium-sized manufacturer and importer specializing in natural stone and porcelain pavers, veneers, and tiles primarily for outdoor and hardscape applications. Positioned as a trusted supplier with over 20 years of experience and affiliation with the Team Horner Group, the company serves a diverse audience including design professionals, contractors, distributors, and the hospitality sector. Their business model focuses on providing premium stone products alongside installation resources and partner support. Technically, the website is built on WordPress with WooCommerce and hosted on WP Engine, utilizing various plugins for enhanced user experience and marketing. However, the site lacks a valid SSL certificate, which is a critical security concern. The security posture shows awareness with cookie consent and reCAPTCHA but requires improvements in SSL, DNS security, and published security policies. Overall, the website demonstrates good content quality, branding consistency, and trust indicators, but technical and security enhancements are recommended to strengthen digital maturity and user trust.

D

Discount Domain Name Services

bmmtestlabs.com

85

Discount Domain Name Services (DDNS) is a well-established Australian domain registrar and hosting provider, operating since 1999. The company emphasizes local Australian ownership, customer service excellence, and a broad portfolio of services including domain registration, web hosting, SSL certificates, VPS, email, and Microsoft 365 solutions. Their market position is strengthened by accreditations such as ASIC, auDA, ISO 27001 certification, and PCI compliance, positioning them as a trusted provider in the Australian technology sector. The website reflects a professional and user-friendly design with comprehensive service offerings and clear contact information, targeting individuals, SMEs, corporations, and government bodies.

S

Studio.Design

studio.design

62

Studio.Design is a technology company providing a no-code platform for building portfolio websites, landing pages, and other creative web content. Positioned as an easy and quick solution for creatives, it offers a range of services including a design editor, CMS, hosting, forms, SEO tools, and integrations with Figma and Lottie animations. The platform targets creative professionals and individuals seeking flexible website creation without coding. Technically, the website is built on Nuxt.js with server-side rendering, hosted on Google Cloud infrastructure, and integrates Firebase for backend and analytics. The site demonstrates excellent design quality, mobile optimization, and SEO practices. Security-wise, the site uses a valid SSL certificate but lacks modern TLS protocol support and advanced security headers like HSTS and DNSSEC. There is no visible cookie consent mechanism, and privacy policies are present and comprehensive. Incident response contact is available via an abuse email. Overall, the platform shows a mature digital presence with room for security enhancements and privacy compliance improvements.

G

Gamblers Anonymous England, Wales & Ulster

gamblersanonymous.org.uk

60

Gamblers Anonymous England, Wales & Ulster is a non-profit fellowship organization dedicated to supporting compulsive gamblers and their families through meetings, literature, and resources. The website serves as a regional hub providing meeting information and educational content to its target audience in the UK. Technically, the site is built on WordPress, hosted by SiteGround, and uses common web technologies including jQuery and Google Tag Manager for analytics. The site performs well with fast load times and good mobile optimization, though accessibility is basic. Security posture is moderate with a valid SSL certificate but lacks modern TLS protocol support and advanced security headers. No cookie consent or detailed privacy compliance mechanisms are evident. Overall, the site is trustworthy and professional but could improve in security and privacy compliance areas.

G

Gam-Anon UK and Ireland

gamanon.org.uk

62

Gam-Anon UK and Ireland is a non-profit support organization dedicated to helping individuals affected by a loved one's compulsive gambling. The website serves as an informational and resource hub, offering details about meetings, literature requests, and contact points for support. The organization targets family members and friends impacted by gambling addiction within the UK and Ireland. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, hosted on a LiteSpeed server with a valid SSL certificate. However, the SSL configuration lacks modern TLS protocols and security headers, indicating room for improvement in security posture. No privacy or cookie policies are present, which may affect compliance with data protection regulations. Overall, the site provides essential support information but could enhance its digital maturity and security practices.