Security Directory

Časopis Zagreb moj grad is a Croatian online magazine dedicated to the culture, history, and education about the city of Zagreb. It targets local residents and enthusiasts of Zagreb, providing well-curated articles without sensationalism. The website is built on WordPress with modern plugins such as Yoast SEO and Elementor, indicating a moderate level of digital maturity. Hosting is provided by cyber_Folks d.o.o., a Croatian registrar and hosting provider, which aligns with the local focus of the publication. Security posture is good with HTTPS enforced and use of Google reCAPTCHA on forms, but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

H

Hireology

hireology.com

11

Hireology is a well-established technology company specializing in applicant tracking system (ATS) software solutions tailored for businesses to streamline their hiring processes. Founded in 2008, the company has positioned itself as a significant player in the recruitment technology sector, offering a B2B SaaS model targeting businesses seeking efficient recruitment management tools. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at its target audience. Technically, the website is built on WordPress with Elementor, hosted on Amazon AWS infrastructure, and employs modern web technologies including Google Fonts and Font Awesome. Performance is moderate with good mobile optimization and basic accessibility features. The site uses HTTPS with a good SSL configuration and implements several security headers, indicating a solid security posture. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks explicit vulnerability disclosure mechanisms and incident response contacts. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR compliance indicators. Business credibility is high, supported by clear contact information, professional content, and trust signals like SSL and legal documentation. Overall, Hireology's website is trustworthy, secure, and professionally maintained, with minor recommendations to enhance DNS security and publish security policies. The risk level is low, making it a reliable platform for its users and clients.

L

Le Saint Network

reseau-le-saint.com

55

Le Saint Network operates as a distributor specializing in fresh products including fruits, vegetables, seafood, flowers, fresh meat, hygiene products, and wine. The company maintains a network of brands and purchasing offices across France, targeting B2B clients in retail and food distribution sectors. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies and standard analytics tools such as Google Analytics. Security posture is solid with HTTPS enforced and anti-spam measures in place, though explicit security policies and incident response information are absent. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, which slightly impacts trustworthiness. Overall, the website is functional, professional, and safe, but could improve transparency and compliance documentation.

E

Eden Renewables

eden-re.com

67

Eden Renewables is a small Indian company specializing in renewable energy solutions, likely offering consulting and sustainable energy services. The website is built on WordPress using Elementor and includes essential privacy compliance features such as a privacy policy and cookie consent banner. The technical infrastructure is moderate with standard hosting by GoDaddy and no advanced security headers detected. The security posture is adequate with HTTPS enabled but could be improved by adding DNSSEC and additional HTTP security headers. No incident response or vulnerability disclosure policies are published, which could be a gap in security transparency. Overall, the website is professional and trustworthy with room for technical and security enhancements.

F

Freiraumfest

freiraumfest.at

56

Freiraumfest is a non-commercial, self-organized cultural festival based in Graz, Austria, focusing on community-driven events and free spaces for cultural, artistic, and political engagement. The festival is scheduled for November 16-23, 2025, and aims to provide a platform for diverse community participation beyond commercial interests. The website is built on WordPress using modern plugins and themes, offering a good user experience with mobile optimization and SEO features. Security posture is adequate with HTTPS but lacks advanced security headers and formal policies. No privacy or cookie policies are present, which is a compliance gap. Overall, the site is legitimate and trustworthy for its purpose but could improve in privacy and security transparency.

S

SchloR

schlor.org

42

SchloR is a self-managed non-profit community project based in Vienna-Simmering, Austria, focused on providing solidarity-based housing and creative workspaces. The organization operates under the umbrella of recognized entities such as habiTAT and Mietshäuser-Syndikat, emphasizing collective living and cultural engagement. Their business model includes direct loans from supporters to finance their projects, reflecting a strong community trust and engagement. The website is well-structured, content-rich, and targets local community members interested in alternative housing and cultural activities. Technically, the website is built on WordPress using modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. The presence of Google reCAPTCHA on forms enhances security against automated abuse. However, some security best practices such as DNSSEC and security headers are not implemented, which could be improved to strengthen the security posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place, indicating a legitimate and controlled domain. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Privacy compliance is adequate with a privacy policy present, though cookie consent mechanisms are lacking. No incident response or vulnerability disclosure information is found, which could be areas for future enhancement. Overall, SchloR presents a trustworthy, community-oriented project with a solid web presence and moderate technical maturity. Strategic improvements in security headers, cookie consent, and vulnerability disclosure would enhance their security and compliance posture further.

G

Game Lab Graz

gamelabgraz.com

42

Game Lab Graz is an academic research group led by Johanna Pirker, focusing on exploring the full potential of video games through designing and researching virtual, engaging, and immersive experiences. The website serves as a platform to showcase projects, publications, courses, and team information related to game design and virtual reality. The target audience primarily includes students, researchers, and professionals interested in game development and immersive technologies. The business model is centered around education and research within the academic sector, positioning itself as a niche player in the field of game design and virtual reality research. Technically, the website is built on WordPress CMS with Elementor page builder and uses common web technologies such as jQuery, Bootstrap grid, and FontAwesome icons. Hosting appears to be provided by Alfahosting based on DNS nameservers. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The design is professional and consistent with academic branding, providing a good user experience and clear navigation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and other data protection regulations. No incident response or security contact information is provided, which could be improved to enhance trust and readiness. Overall, the website is trustworthy and professionally maintained, with a strong academic focus. The main risks relate to privacy compliance and security best practices, which should be addressed to improve the security posture and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact information for security incidents.

C

CENDIS, s.p.

cendis.cz

62

CENDIS, s.p. is a Czech government-related entity specializing in transportation information systems under the Ministry of Transport of the Czech Republic. The organization provides key ICT solutions and services such as electronic highway vignettes, unified railway tickets, electronic toll supervision, and various training and certification programs. Their target audience includes drivers, transport operators, public transport passengers, and government officials. The website reflects a professional and consistent brand image with a focus on transparency and public service. Technically, the site is built on WordPress using Elementor and Smart Slider 3, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and offers good navigation and content relevance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit incident response contacts. WHOIS data is missing, which reduces domain trustworthiness, but the official nature of the site and linked government registries support legitimacy. Overall, the site is a reliable source of transportation ICT information and services in the Czech Republic.

Ö

Översättare.nu

oversattare.nu

54

Översättare.nu is a Swedish-based online platform offering authorized translation services for both companies and private individuals. The website provides a professional and user-friendly interface to upload documents, receive free quotes, and connect with qualified translators. The business targets a niche market in Sweden, focusing on legal and official document translations with GDPR-compliant privacy practices. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and third-party services like Google Analytics and Cookiebot for analytics and cookie consent management. Security posture is strong with HTTPS and security headers implemented, though the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Overall, the site is well-structured, compliant, and trustworthy but would benefit from clearer contact information and verified domain registration details.

S

Sälja fakturor

xn--sljafakturor-gcb.se

41

The website 'Sälja fakturor' offers financial services focused on invoice selling, factoring, and invoice financing to Swedish businesses. It positions itself as a niche provider helping companies improve cash flow by enabling faster payment through invoice sales. The site is well-structured, professionally designed, and uses modern web technologies including WordPress, Elementor, and CleanTalk anti-spam solutions. Analytics and marketing tools such as Google Analytics and Tag Manager are integrated for user behavior tracking. Security posture is solid with HTTPS and anti-spam measures, though lacks explicit security headers and published privacy or cookie policies, which are compliance gaps. The domain is registered with a reputable Swedish registrar since 2013, consistent with the business claims, indicating legitimacy. Overall, the site is trustworthy and functional but should improve privacy compliance and security header implementation.

H

HLR-UTBILDNING

hlrutbildning.net

41

HLR-UTBILDNING is a Swedish company specializing in heart and lung resuscitation (HLR) and first aid training services. They offer various training packages including heart starter leasing and maintenance, targeting workplaces and organizations to improve emergency preparedness and safety. The company claims to be nationally active with a foundation year of 2005 and holds certification from Hjärt-Lungfonden, enhancing their credibility in the healthcare training sector. The website is professionally designed using WordPress and Elementor, with good SEO practices but lacks visible privacy and cookie policies. Contact information is clearly provided, supporting business credibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy.

M

Modifinder AB

modifinder.se

52

Modifinder AB operates as a specialized SEO agency based in Malmö, Sweden, focusing on search engine optimization services for local businesses. The website demonstrates a professional approach with a clear business focus on SEO consulting and strategy. The technical infrastructure is built on WordPress with Elementor and related plugins, indicating a modern and flexible digital presence. However, the absence of WHOIS data for the domain www.modifinder.se raises concerns about domain registration legitimacy and transparency. Security posture is limited by the lack of visible security headers and privacy policies, which are critical for compliance and trust. Overall, the website is functional and well-designed but requires improvements in security and compliance documentation to enhance trustworthiness and regulatory adherence.

S

seamtex

seamtex.at

72

seamtex is a specialized manufacturer and service provider of professional protective clothing, focusing on firefighter and heat protection garments. The company targets professional emergency services and emphasizes quality and certification in its products. The website is built on WordPress using Elementor and WooCommerce, indicating a modern and flexible technical infrastructure. The site includes multilingual support via TranslatePress and cookie consent management with Real Cookie Banner Pro, reflecting digital maturity and privacy awareness. Security posture is good with HTTPS enforced and some security best practices observed, though there is room for improvement in explicit security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's market position as a niche manufacturer in Austria.

K

KORTS Immobilien GmbH

korts-immobilien.de

50

KORTS Immobilien GmbH is a Hamburg-based, owner-managed real estate consultancy specializing in commercial office properties with over 19 years of market experience. The company offers comprehensive brokerage and advisory services tailored to tenants and property owners in the Hamburg metropolitan area. Their business model focuses on personalized service, leveraging a broad network of market participants to provide exclusive access to properties and expert negotiation support. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted by Timme Hosting, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the business.

N

next Startup Day

next-startup-day.de

42

The next Startup Day website serves as the central platform for a major startup event in Niedersachsen, Germany, focusing on innovation, entrepreneurship, and networking among startups, investors, and companies. The event is supported by regional government entities, positioning it as a key regional initiative to foster startup ecosystem growth. The website provides detailed event information, speaker highlights, and partner collaborations, targeting startups, investors, and corporate participants. Technically, the site is built on WordPress with modern plugins such as Elementor and WooCommerce, ensuring a flexible and visually appealing user experience. SEO and structured data are well implemented, enhancing discoverability. Security posture is adequate with HTTPS and nonce usage, but lacks explicit security headers and documented policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

R

Rettungsdienst-Akademie Bonn

rdakademiebonn.de

46

Rettungsdienst-Akademie Bonn is a specialized educational institution based in Germany offering state-recognized training programs for emergency medical personnel including rescue helpers, paramedics, emergency paramedics, and emergency physicians. The website serves as a comprehensive platform for course information, scheduling, and contact, targeting individuals seeking professional certification in emergency medical services. The business operates in the healthcare and education sectors with a small organizational size and a founding year of 2021, aligning with the domain registration date. Technically, the website is built on WordPress using Elementor and several reputable plugins such as Yoast SEO and Complianz GDPR for SEO and privacy compliance. The site demonstrates good mobile optimization, clear navigation, and a professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not publicly documented. Overall, the website shows a mature digital presence with compliance to GDPR through privacy and cookie policies, social media integration, and structured data for SEO. No critical vulnerabilities or suspicious content were detected. The WHOIS data supports the legitimacy of the domain with consistent registration information and appropriate domain age. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and security posture.

W

World Music Festival der Klangfreunde e.V.

worldmusicfestival.de

54

World Music Festival der Klangfreunde e.V. is a small, regionally focused cultural event organizer based in Germany, specializing in hosting an annual world music festival in Loshausen. The website provides comprehensive information about the festival, including event dates, ticket sales, workshops, and community involvement. The organization targets music enthusiasts and cultural participants, leveraging partnerships with ticketing platforms and regional cultural magazines to enhance reach. Technically, the website is built on a modern WordPress infrastructure with popular plugins such as Elementor and caching mechanisms to optimize performance. The site is mobile-optimized and includes accessibility features, structured data for SEO, and GDPR-compliant privacy and cookie policies. Hosting is provided by Goneo, a German hosting provider, consistent with the domain's WHOIS data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or malicious content were detected. Privacy compliance is strong, with clear policies and user consent mechanisms in place. Overall, the website is trustworthy, professionally maintained, and compliant with relevant regulations. It effectively supports the festival's business model and community engagement goals.

myvasco.com is a small, specialized internet marketing agency led by Regina Kainz, offering services such as SEO, social media management, Google Ads, and Facebook marketing. The company targets clients seeking effective online communication and marketing strategies, leveraging workshops and consulting to simplify internet marketing. The website is built on WordPress with Elementor and includes modern privacy and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS and security headers in place, though the absence of a published security policy and incident response contacts suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, warranting further verification. Overall, the site is professional, well-structured, and compliant with GDPR, serving a German-speaking audience effectively.

3

3fera

3fera.com

45

3fera is a Spanish technology company specializing in blockchain solutions for businesses. Established in 2006, it offers consulting, development, and integration services to help enterprises leverage blockchain technology. The website is built on WordPress using Elementor, hosted behind Cloudflare DNS, and presents a professional design targeted at business clients. Security posture is moderate with HTTPS enabled and domain registration protections, but lacks advanced security headers and explicit privacy or cookie policies. Contact options are limited to a contact form without direct emails or phone numbers. Overall, the website reflects a legitimate small business with room for improvement in privacy compliance and security best practices.

C

compustore Group

compustore.de

35

The compustore Group operates a retail website focused on Apple products with a national presence in Germany through 23 physical stores. The website serves as an informational and navigational portal linking to their e-commerce shop and product categories. The business targets German-speaking Apple customers seeking sales and support services. Technically, the site is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Leaflet.js for maps. The site is mobile optimized and demonstrates good SEO practices but lacks some accessibility features. Security posture is moderate with HTTPS enabled and cookie consent implemented via Borlabs Cookie, though security headers are absent and no explicit privacy or terms of service pages were found. The WHOIS data is minimal but consistent with the business, showing no immediate red flags. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.

T

tawk.to

tawk.help

66

tawk.to is a technology company providing 100% free live chat software and related customer engagement tools, including knowledge base, CRM contacts, chat pages, and AI-assisted chat responses. The company operates a freemium SaaS business model with additional paid services such as hiring chat agents and virtual assistants. The website is professionally designed, well-structured, and targets businesses and website owners seeking to enhance customer support and engagement. Technically, the site is built on WordPress with Elementor and integrates multiple modern analytics and marketing tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not published. Overall, the site is trustworthy, compliant with privacy regulations, and provides a good user experience.

M

Meisterclub

meister-club.de

43

Meisterclub is a professional networking platform affiliated with the Handwerkskammer Schwerin, targeting master craftsmen and students across various trades. The website serves as a hub for networking, events, and professional development opportunities, positioning itself as a regional leader in fostering connections within the crafts sector. The business model revolves around community building and providing exclusive access to events and educational resources. Technically, the site is built on WordPress using Elementor and the OceanWP theme, supported by modern web technologies and Google analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

I

Isoplus Polska Sp. z o.o.

isoplus.pl

62

Isoplus Polska Sp. z o.o. is a well-established Polish manufacturer specializing in preinsulated heating pipes, serving the energy sector with a focus on environmentally friendly and efficient thermal pipe systems. The company offers a comprehensive product range including flexible, single, and double pipes, supported by certifications such as Euroheat & Power, positioning itself as a trusted player in the regional market. The website reflects a professional digital presence built on WordPress with Elementor, optimized for SEO and mobile devices, providing clear business and contact information. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, the domain registration and website content are consistent, supporting the legitimacy and credibility of the business.

S

Salling Plast Energy

sallingplast.com

49

Salling Plast Energy is a well-established Danish manufacturer specializing in flexible transport, filtration, and storage solutions for various substances including liquids, gases, and air. Founded in 1999, the company positions itself as one of the leading producers in Denmark within the energy and industrial sectors. Their website reflects a professional business model focused on serving industrial clients with quality products, supported by ISO certifications (9001, 14001, 45001) that underscore their commitment to quality and environmental standards. The presence of a dedicated webshop indicates a hybrid business model combining direct sales and service offerings. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Integration with Google Tag Manager, Google Analytics, and Cookiebot demonstrates a mature digital marketing and compliance approach. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Hosting is provided by One.com, consistent with the domain registration data. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms with detailed cookie categorization. The use of reCAPTCHA adds protection against automated abuse. However, some security headers are not explicitly detected, and DNSSEC is not enabled, representing areas for improvement. No vulnerability disclosure or incident response information is provided, which could be enhanced to improve transparency and security readiness. Overall, the website is trustworthy, professional, and compliant with GDPR cookie consent requirements. The domain registration is consistent and long-standing, supporting the legitimacy of the business. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security posture and trust.

K

KMR Service GmbH

kmr-fernwaerme.de

47

KMR Service GmbH is a specialized German company providing industrial services and products in the energy sector, focusing on district heating (Nah- und Fernwärme) and related services such as pipe systems, insulation, error detection, and container construction. With over two decades of experience, the company positions itself as a reliable B2B partner serving clients nationwide in Germany, including biogas and agricultural sectors. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible digital infrastructure. The site is mobile-optimized and includes GDPR-compliant cookie and privacy policies, demonstrating good privacy practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website is trustworthy, well-maintained, and suitable for its target industrial audience.

B

Böhmer GmbH

boehmer.de

52

Böhmer GmbH is a medium-sized German manufacturer specializing in industrial ball valves for sectors including energy, oil and gas, pipelines, and district heating. The company positions itself as a reliable supplier for industrial clients requiring high-quality valve solutions. The website reflects a professional digital presence with multilingual support and clear business information. Technically, the site is built on WordPress using modern plugins such as Yoast SEO, Elementor, and Real Cookie Banner Pro, indicating a mature digital infrastructure. Security measures include HTTPS, Wordfence plugin, and comprehensive cookie consent management, though no explicit security policy or incident response details are published. Overall, the website demonstrates a solid security posture and compliance with GDPR, supporting trustworthiness and business credibility.

H

Hartmann Valves

hartmann-valves.com

9

Hartmann Valves is an established company specializing in the manufacturing and supply of industrial valves, primarily serving the energy sector. The website highlights over 75 years of experience and focuses on technical innovations for reliable energy supply. The digital infrastructure is based on WordPress CMS with modern tools such as Elementor and Yoast SEO, hosted on Kinsta, indicating a moderate level of digital maturity. The website is professionally designed, mobile-optimized, and includes marketing and analytics tools such as Google Analytics, LinkedIn Insight, and Leadinfo. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain is a notable concern, suggesting either a WHOIS privacy service or an unregistered domain, which conflicts with the active website presence. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

M

madaly GmbH

madaly.de

47

madaly GmbH is a small German marketing agency specializing in creator marketing targeted at the Gen-Z demographic. The company positions itself as a lead agency for innovative marketing and partnerships, offering services such as creator discovery, media production, concept development, and AI-powered reporting. The website is professionally designed using WordPress with Elementor and Yoast SEO, reflecting a modern and user-friendly digital presence. The technical infrastructure includes Cloudflare for hosting and security, Google Analytics and Hotjar for analytics, and a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Privacy compliance is supported by a detailed cookie consent banner but lacks a visible privacy policy or terms of service. Overall, the website is trustworthy, safe for general audiences, and demonstrates a solid business credibility and technical maturity.

Z

Zool Itamar

itamar-medical.com

65

Zool Itamar is a medical technology company specializing in home sleep apnea testing devices, notably the WatchPAT system that utilizes peripheral arterial tonometry signals. The company targets healthcare providers and patients requiring sleep apnea diagnostics, positioning itself as a niche player within the healthcare technology sector. The website reflects a professional and consistent brand image aligned with its parent company, ZOLL. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern web technologies and a cookie consent mechanism ensuring privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS registration data slightly reduces trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving contact transparency.

F

Fianona

fianona.hr

41

Fianona.hr is the website of a Croatian restaurant specializing in Italian cuisine, primarily pizza, operating under the hospitality industry. The business appears to be a small, local restaurant established in 2007, with a consistent brand presence and a website built on WordPress using the Elementor page builder. The site offers online booking capabilities and includes a cookie consent mechanism, indicating some awareness of GDPR compliance. However, explicit privacy policies and terms of service are not found, which could be improved for better compliance and user trust. Technically, the website uses modern web technologies including WordPress, Elementor, jQuery, and YouTube iframe API for embedded videos. The site is served over HTTPS with a valid SSL certificate, but lacks advanced security headers which are recommended to enhance security posture. Performance is moderate with good mobile optimization and basic accessibility features. SEO optimization is basic but present. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent with the business location and domain age, supporting legitimacy. Overall, the site is moderately secure but could benefit from enhanced security headers and clearer privacy documentation. The overall risk is low to moderate, with recommendations to implement comprehensive privacy and security policies, add security headers, and provide clear contact information for incident response. These steps will improve compliance, user trust, and security resilience.

E

Energierecht Verlag

verlag-energierecht.de

10

Energierecht Verlag is a specialized independent publishing house based in Leipzig, Germany, focusing on legal literature related to renewable energy law. Established in 2002, the publisher offers a range of specialist books, dissertations, and historical works primarily targeting legal professionals, academics, and researchers interested in energy law and the energy transition. The website provides detailed product listings and an online shop for ordering publications. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and HTTPS for secure communication. The design is professional and user-friendly, with good mobile optimization and clear navigation. However, the site lacks visible privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS but could be improved by adding security headers and incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Automando GmbH

bewirtungsbeleg.net

47

Bewirtungsbeleg.net is a German technology startup operated by Automando GmbH, offering an AI-powered SaaS solution for automated creation of tax-compliant hospitality receipts (Bewirtungsbelege). The platform targets businesses and professionals who require efficient and compliant receipt management, providing a web and mobile Progressive Web App with integration capabilities to popular bookkeeping tools. The website is professionally designed, content-rich, and provides clear pricing tiers including free and premium plans. Technically, it is built on WordPress with Elementor, uses modern JavaScript libraries, and integrates Google Analytics and Microsoft Clarity for user behavior insights. Cookie consent is managed via CookieYes with granular user controls, reflecting good privacy compliance. Security posture is solid with HTTPS enforced and domain transfer protection, though some security headers could be improved. Overall, the domain registration is transparent and consistent with the startup's recent founding in 2024. The website is trustworthy, safe, and well-positioned in its niche market.

B

Branchentag Windenergie NRW

nrw-windenergie.de

49

Branchentag Windenergie NRW is a well-established professional event organizer focused on the wind energy sector in North Rhine-Westphalia, Germany. The website serves as a comprehensive landing page for their annual congress and networking event, targeting industry leaders, decision makers, and exhibitors. The event offers a broad range of services including expert talks, workshops, exhibition stands, and networking opportunities, positioning itself as a leading platform in the regional wind energy market. Technically, the website is built on WordPress using modern tools like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. Overall, the site reflects a professional and credible business with clear contact information and event details.

V

vgbe

vgbe.energy

66

vgbe.energy is a professional energy sector association website focused on providing industry events, seminars, publications, and technical services primarily in Germany. The site targets energy professionals and companies involved in various energy technologies such as hydrogen, wind, photovoltaics, and carbon capture. The technical infrastructure is based on WordPress with modern plugins and frameworks, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. The absence of WHOIS registrant data reduces trust slightly but the website content and external references support legitimacy. Overall, the site is well-positioned in its niche but could improve transparency and security compliance.

Ö

Ökoring GmbH

oekoring.com

52

Ökoring GmbH operates as a specialized consultant and wholesale supplier of organic food products, targeting natural food retailers, gastronomy, social and educational institutions in Germany. The company emphasizes sustainable and fair supply chains with a focus on regional and global organic products. The website is professionally designed using WordPress and Elementor, incorporating SEO best practices and a comprehensive cookie consent mechanism, reflecting a mature digital presence. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit incident response information. The absence of WHOIS data is a notable transparency gap but does not detract significantly from the overall legitimacy given the professional website and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency.

E

easyfeedback

easy-feedback.com

57

easy-feedback.com is a professional online survey platform offering tools for creating questionnaires, forms, and quizzes with an emphasis on GDPR compliance and AI-powered analysis. The website targets businesses and individuals seeking flexible and privacy-conscious survey solutions. The platform is built on WordPress using Elementor and Yoast SEO, hosted by Hetzner Online GmbH, and integrates modern consent management via Cookiebot and analytics through Google Tag Manager. Security posture is solid with HTTPS and cookie consent, though explicit privacy and terms of service pages are missing, representing compliance gaps. The domain is mature and legitimate, supporting the business's credibility.

B

ba tax

ba-tax.de

10

ba tax is a digital and agile tax consultancy firm specializing in serving fast-growing technology companies and innovative digital businesses in Germany. The company emphasizes societal value and ecological sustainability, positioning itself as a modern partner for startups and companies in growth or transformation phases. The website reflects a professional and consistent brand image with strong client references and testimonials, indicating a solid market position. Technically, the site is built on WordPress with Elementor and uses modern plugins for SEO and cookie management, showing a good level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks published security policies and incident response information. Overall, the site is trustworthy and professional, though improvements in privacy compliance documentation and security transparency are recommended.

P

Premium Distribucija

premium-distribucija.hr

40

Premium Distribucija is a Croatian-based company specializing in the wholesale distribution of beverages for the hospitality industry, particularly targeting the HoReCa sector. The company positions itself as a premium distributor leveraging expert knowledge and experience to support successful hospitality operations. The website is professionally built on WordPress using Elementor and optimized with NitroPack and Google Site Kit, indicating a moderate level of digital maturity and performance optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve transparency and security documentation to enhance trust and compliance.

H

Početna - HEDONE

hedone.hr

43

The website 'hedone.hr' appears to be a Croatian business site titled 'Početna - HEDONE'. It is built on a WordPress platform using WooCommerce for e-commerce capabilities and Elementor for page building. The site uses Google Fonts and Font Awesome for styling and icons, and Google Tag Manager for analytics tracking. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. No contact information or security policies are evident, which may impact user confidence and regulatory compliance. The technical infrastructure is modern but lacks visible security headers and explicit security best practices. Overall, the site is functional and moderately optimized for SEO and mobile use but requires improvements in privacy, security, and transparency to enhance trust and compliance.

Promoprint d.o.o. is a Croatian small business specializing in graphic design and printing services, including digital and offset printing, large format printing, and promotional materials such as business cards, brochures, and rollup banners. The company has an established market presence since 2008 and targets businesses and individuals seeking promotional printing solutions. The website is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible technical infrastructure. It includes e-commerce capabilities and uses popular plugins for SEO and cookie consent management. Security posture is adequate with HTTPS, Google reCAPTCHA, and cookie consent mechanisms, but lacks explicit privacy policy, terms of service, and incident response information, which are important for compliance and trust. Overall, the website is professional and functional with moderate performance and good mobile optimization.

K

Kulturni centar Travno

kuctravno.hr

50

Kulturni centar Travno is a well-established cultural and educational center based in Zagreb, Croatia, founded in 2013. It organizes a variety of cultural events, workshops, exhibitions, and community inclusion projects, particularly focusing on youth and migrant integration through Erasmus+ funded initiatives. The website reflects a professional and community-focused organization with active event promotion and educational content. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS and some security best practices, though explicit security headers and policies could be improved. Privacy compliance is basic, with cookie consent implemented but no visible privacy policy or terms of service. Overall, the domain registration and website content are consistent and trustworthy, supporting the legitimacy of the organization.

S

SkySpecs

skyspecs.com

11

SkySpecs is a medium-sized technology company specializing in renewable energy asset management software and tech-enabled services. Founded in 2012, it offers innovative solutions such as autonomous drone inspections, blade asset management, condition monitoring, and financial asset management to renewable energy asset owners and operators. The company positions itself as a leader in autonomous inspection technology and asset health management within the renewable energy sector. Technically, the website is built on WordPress with Elementor and integrates modern analytics and marketing tools including Google Analytics, HubSpot, and Dreamdata. The site is well optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, uses reCAPTCHA Enterprise, and has a dedicated Security & Trust Center, though it lacks a published vulnerability disclosure and explicit incident response contacts. Overall, the domain registration data aligns well with the business history and legitimacy, supporting a high trust level. Strategic recommendations include enabling DNSSEC, publishing a security.txt or vulnerability disclosure, and adding a Terms of Service page to enhance legal completeness.

D

DOMBERT Rechtsanwälte

dombert.de

63

DOMBERT Rechtsanwälte is a specialized law firm based in Germany focusing on public law and legal conflicts involving the state, municipalities, and authorities. The firm positions itself as a competent advisor for all public law matters, targeting clients who require legal expertise in governmental and administrative law. The website reflects a professional and consistent brand image with clear messaging about their services and expertise. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies and SEO best practices. The presence of structured data and social media integration enhances its digital maturity. Security-wise, the site uses HTTPS and a cookie consent mechanism via Borlabs Cookie, but lacks explicit security headers and detailed security or incident response policies. Overall, the site is secure, professional, and trustworthy, though it could improve transparency by adding privacy policies, terms of service, and contact information for security incidents.

D

d.i.k.t.-Sitzmann

teletechnik.net

9

d.i.k.t.-Sitzmann is a small German company specializing in data technology, communication technology, and installation technology services for both private and business customers. The website presents a professional image with clear contact information and offers additional services such as online video courses. The company positions itself as a local/regional service provider in the telecommunications sector. Technically, the website is built on WordPress using the Enfold theme and Elementor page builder, incorporating accessibility and GDPR compliance plugins, indicating a moderate to good level of digital maturity. Security-wise, the site uses HTTPS and includes CAPTCHA for forms, cookie consent management, and accessibility features, but lacks some explicit security headers and a vulnerability disclosure policy. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the website content and contact details suggest a legitimate business presence. Overall, the site is well-structured, accessible, and compliant with privacy regulations, though improvements in security headers and domain registration transparency are recommended.

E

eazee link

eazee-link.com

60

Eazee link is a French SaaS company specializing in digital QR code menus for restaurants and bars. The platform offers a free, easy-to-use service that enables hospitality businesses to create, update, and translate their menus digitally, enhancing customer experience and operational efficiency. With over 5700 establishments using their solution, eazee link holds a strong market position in France's hospitality sector. The website is professionally designed, mobile-optimized, and rich in content, targeting restaurant owners and managers seeking digital transformation solutions. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and marketing tools such as Google Tag Manager and HubSpot. Security posture is good with HTTPS enforced and domain protections in place, though DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, with user consent mechanisms implemented. Overall, the site demonstrates a mature digital presence with strong business credibility and trust indicators.

K

KVM A/S

kvm.dk

48

KVM A/S is a Danish manufacturing company specializing in the development, production, and delivery of customized asphalt plants, concrete block machines, and molds. With over 65 years of industry experience, KVM operates globally, providing tailored solutions including project design, engineering, and 24/7 service support. Their market position is solidified by their comprehensive product range and commitment to reliability, flexibility, and availability. The company targets industrial clients requiring infrastructure and construction equipment, emphasizing quality and innovation. Technically, the website is built on WordPress using Elementor and integrates modern SEO and analytics tools such as Yoast SEO and Google Analytics. The site is well-structured, mobile-optimized, and demonstrates good performance and accessibility standards. However, some security headers are not explicitly present, and no dedicated security or incident response policies are published. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. The use of Google Analytics includes opt-out mechanisms, reflecting some privacy awareness. The absence of WHOIS data limits domain trust verification, but the website content and business information appear professional and credible. No signs of blocking or WAF interference were detected, allowing full content access. Overall, KVM A/S presents a trustworthy and professional online presence aligned with its manufacturing business. Strategic improvements include enhancing security headers, publishing security policies, and improving WHOIS transparency to strengthen domain legitimacy and trust.

D

Dansk Overfladebelægning

dob.dk

51

Dansk Overfladebelægning is a Danish company specializing in high-quality asphalt and surface paving solutions, offering professional consultancy and durable results for paving projects. The company targets businesses and individuals in Denmark seeking expert services in surface paving. The website positions the company as a local specialist with a clear focus on quality and professionalism. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern tracking and consent tools such as Google Tag Manager and Cookiebot, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security-wise, the site uses HTTPS and has cookie consent mechanisms but lacks explicit security headers, privacy policy, terms of service, and vulnerability disclosure policies, which are areas for improvement. Overall, the website is professional and trustworthy but could enhance compliance and security transparency to strengthen its risk posture.

T

Tech-Solution

tech-solution.dk

43

Tech-Solution is a Danish machine manufacturer specializing in custom machine development and production, emphasizing close collaboration with customers. The company highlights 25 years of experience and innovation in sectors such as industry, agriculture, and asphalt machinery. Their website is built on WordPress with Elementor, showing a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy image suitable for its niche market.

T

Tulzer & Osterauer

to-do.at

54

Tulzer & Osterauer is a specialized interior architecture firm focusing on planning and executing renovation and new construction projects for banks, offices, commercial premises, and hotels primarily in Austria. The website presents a professional and well-structured digital presence built on WordPress with Elementor, featuring good design quality and mobile optimization. The technical infrastructure includes modern web technologies and SEO optimization tools such as Rank Math PRO. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and terms of service policies are missing. No direct contact information is embedded in the HTML, which may affect user trust and compliance. Overall, the website is safe, professional, and trustworthy with room for improvement in privacy compliance and contact transparency.

Q

qqilipp

kalinkaphoto.at

65

Kalinkaphoto.at is a professional photography website specializing in documentary family and wedding photography based in Vienna, Austria. The business offers a range of services including family portraits, wedding reportage, baby bump and newborn photography, as well as online photography courses and mentoring. The website demonstrates a strong local niche market presence with a focus on authentic and natural photography capturing real-life moments. The site is well-branded and visually appealing, with consistent use of imagery and structured data to enhance SEO and user experience. Technically, the website is built on WordPress using Elementor as the page builder, supplemented by plugins such as Borlabs Cookie for cookie consent and Rank Math for SEO optimization. The site uses modern JavaScript libraries like Swiper.js for image sliders and jQuery. Performance is moderate with good mobile responsiveness and basic accessibility features. Security is well-managed with HTTPS enforced and standard security headers present, though there is room for improvement in privacy policy transparency and incident response readiness. From a security and compliance perspective, the site has implemented cookie consent mechanisms but lacks explicit privacy policy and terms of service pages, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The domain registration data is consistent with the business claims, showing transparency and legitimacy. No suspicious or malicious indicators were found. Overall, kalinkaphoto.at is a credible and professionally managed small business website with strong content quality and good technical implementation. Enhancing privacy compliance documentation and adding security contact information would further strengthen its trustworthiness and compliance posture.