Security Directory

The Libre Graphics Meeting 2025 website represents an established annual conference focused on Free/Libre and Open Source graphics software. The event targets developers, artists, and community members interested in libre graphics technologies. The website provides comprehensive event information, sponsor announcements, and community engagement channels, reflecting a well-positioned niche event with a history dating back to 2005. Technically, the site uses modern web standards including ES modules and Leaflet.js for interactive maps, hosted on a domain registered with NameCheap and using tuxfamily.net nameservers. The site is accessible, mobile-optimized, and professionally branded, though it lacks some compliance elements such as privacy and cookie policies. Security posture is moderate with domain transfer protection but missing DNSSEC and security headers. Overall, the site is trustworthy and functional but could improve privacy compliance and security hardening.

D

David Revoy

davidrevoy.com

42

David Revoy is an independent artist and instructor specializing in digital illustration using exclusively Free/Libre and Open-Source software since 2009. The website serves as a portfolio, blog, tutorial repository, and patronage platform, targeting artists and open-source enthusiasts. The business model relies on freelance work and community support via Patreon, Liberapay, Tipeee, and donations. The site maintains a consistent brand and high-quality content, positioning itself as a niche leader in open-source digital art education. Technically, the website is built on the PluXml CMS, utilizing standard HTML5, CSS3, and JavaScript. It demonstrates good mobile optimization and SEO practices but lacks visible advanced security headers and cookie consent mechanisms. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. The absence of WHOIS data for the domain is a notable anomaly, though the site content and social media presence suggest legitimacy. From a security perspective, the site shows moderate maturity with no exposed sensitive data or vulnerable libraries detected. However, the lack of explicit security headers and cookie consent reduces compliance with modern privacy regulations such as GDPR. Incident response and security policies are not publicly documented. Overall, the site is safe and trustworthy but could improve its security posture and privacy compliance. The overall risk is moderate with recommendations to enhance security headers, implement cookie consent, clarify privacy policies, and investigate the domain registration status to improve trust and compliance.

B

Black Duck Software

blackduck.com

84

Black Duck Software is a well-established enterprise software company specializing in application security solutions, including software composition analysis, static and dynamic testing, and application security posture management. Recognized as a leader by Gartner and Forrester, Black Duck serves organizations seeking to secure their software supply chains and integrate security into DevOps workflows. The website reflects a mature digital presence with comprehensive content, strong branding, and clear market positioning. Technically, the site leverages Adobe Experience Manager CMS, modern JavaScript frameworks, and integrates advanced marketing and analytics tools such as Adobe Launch and Coveo Search. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policy pages and vulnerability disclosure mechanisms are not evident. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

M

MagicSpace Entertainment

live-at-the-eccles.com

59

Live at the Eccles is a professional entertainment venue website operated by MagicSpace Entertainment, focusing on live events such as concerts, comedy shows, and family-friendly performances primarily at the Eccles Theater in Salt Lake City, Utah. The platform offers ticketing services, event information, and community engagement through newsletters and social media. The website is well-branded and targets a general audience interested in cultural and live entertainment events. Technically, the site is built on OctoberCMS with modern front-end technologies including HTML5, CSS3, JavaScript, and popular libraries like Slick Slider. It leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The site integrates multiple analytics and advertising tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and AdRoll, indicating a mature digital marketing strategy. From a security perspective, the website enforces HTTPS and uses Cloudflare protections, but lacks DNSSEC and explicit security or incident response policies. Privacy compliance is basic with a privacy policy present but no dedicated cookie policy page. The site collects user data via newsletter signup forms and tracking pixels, with moderate to extensive user tracking. Overall, the website is professional, secure, and credible with minor gaps in privacy and security policy transparency. Strategic improvements in cookie consent, DNS security, and published security policies would enhance trust and compliance.

Lulu's blog is a personal technical blog authored by Philippe Lucidarme, focusing on robotics, computer science, Arduino, Linux, sensors, actuators, and web development. The site serves a niche audience of technology enthusiasts, students, and hobbyists seeking educational content and practical tutorials. The business model is primarily content publishing supported by donations via PayPal and Tipeee. The website is hosted by Scaleway SAS and uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Hotjar for analytics and user behavior tracking. Consent management for GDPR is implemented via InMobi's CMP, although explicit privacy and cookie policies are not published. Security posture is good with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Overall, the site is trustworthy, professionally maintained, and provides high-quality content with moderate tracking and advertising.

T

Telesoft Project

telesoft.bg

50

Telesoft Project is a Bulgaria-based software development company specializing in bespoke software and web applications tailored to client needs globally. Their offerings include custom software development, business software integration, software testing, quality assurance, and web design services. The company targets businesses requiring tailored IT solutions and positions itself as a niche regional provider with international reach. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized with good design and navigation but lacks advanced accessibility features. Security posture is moderate; while no critical vulnerabilities are evident, the absence of HTTPS confirmation and security headers suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent with the business location, though WHOIS data is limited by GDPR privacy restrictions. Strategic recommendations include enhancing security headers, implementing HTTPS, publishing privacy policies, and improving accessibility to strengthen trust and compliance.

G

Geonix

proxy-sale.com

68

Geonix is a proxy service provider offering a variety of proxy types including private datacenter IPv4, IPv6, residential, mobile, and ISP proxies. The company targets businesses and individuals requiring proxy services globally, boasting IP pools across 200+ countries and 24/7 support. The website is professionally designed, mobile-optimized, and uses modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting is managed via Cloudflare DNS, enhancing performance and security. The domain is well-established, created in 1999, indicating a mature business presence. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear cookie and privacy policies and GDPR adherence. However, the absence of explicit contact information and terms of service pages slightly reduces business credibility. Overall, the site is functional, secure, and compliant, suitable for its target audience.

N

Netza&CO

netzaeco.com.br

57

Netza&CO is a Brazilian marketing company specializing in integrated marketing solutions, positioning itself as a reference in the marketing sector. The website presents a professional design with clear branding and content focused on marketing services. The technical infrastructure is built on modern web technologies including Readymag platform, Google Tag Manager for analytics, and uses popular web fonts to enhance user experience. Mobile optimization is good, and the site loads with moderate performance. Security posture is adequate with HTTPS enabled, but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

D

Dstny

dstny.com

59

Dstny is a telecommunications company specializing in innovative business communications solutions tailored for service providers and local businesses. Their website presents a professional and modern digital presence, leveraging HubSpot CMS and integrating advanced marketing and analytics tools such as Google Tag Manager and Cookiebot. The company positions itself as an innovative player in the business communications sector, focusing on making communication effortless and delightful for their target audience. The website content is well-structured, mobile-optimized, and includes comprehensive privacy and cookie policies, reflecting a commitment to GDPR compliance and user privacy. From a technical perspective, the website employs modern web technologies and frameworks, ensuring good performance and accessibility. The use of HubSpot CMS and integration with multiple analytics and marketing platforms indicates a mature digital infrastructure. Security best practices are observed, including HTTPS enforcement and appropriate security headers, contributing to a strong security posture. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security readiness. The security posture is robust with no evident vulnerabilities or exposed sensitive data. The website employs cookie consent mechanisms and complies with GDPR requirements, enhancing user trust. Despite the professional presentation, the WHOIS data for the domain www.dstny.com is unavailable, showing a 'No match' response, which may indicate privacy protection or recent registration. This lack of domain registration transparency slightly reduces the overall trust score but does not detract significantly from the website's legitimacy based on content and technical indicators. Overall, Dstny's website demonstrates a solid business and technical foundation with good privacy and security practices. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance further. Additionally, providing direct company contact information would improve business credibility and user confidence.

Codethink Ltd. is a UK-based software engineering consultancy established in 2007, specializing in open source system software and embedded systems across diverse industries such as automotive, finance, medical devices, and agriculture. The company positions itself as a trusted partner for international clients, including Fortune 500 companies and startups, delivering high-performance software solutions with a focus on quality, integrity, and open source collaboration. Their business model centers on providing expert teams to solve complex software challenges, accelerate product time-to-market, and reduce costs. Technically, the website demonstrates a mature digital presence with modern web technologies including responsive design, Google Fonts, and privacy-conscious analytics (Plausible). Marketing automation is handled via Mautic forms. The site is well-structured with clear navigation and professional branding. However, some security best practices such as explicit security headers and cookie consent mechanisms are not visibly implemented. From a security perspective, Codethink holds ISO 27001 and ISO 9001 certifications, indicating a strong commitment to information security and quality management. The website uses HTTPS and does not expose sensitive data. The absence of a vulnerability disclosure policy or incident response contact is a minor gap. WHOIS data could not be retrieved for the subdomain queried, but this is due to an invalid WHOIS query on 'www.codethink.co.uk' rather than the registered domain 'codethink.co.uk'. Overall, Codethink presents a professional, trustworthy, and technically competent front with minor areas for improvement in privacy compliance and security transparency. The risk profile is low, and the company appears well-positioned in its niche market.

R

Read the Docs, Inc

readthedocs-hosted.com

61

Read the Docs, Inc operates a documentation building and hosting platform designed to assist developers in creating and managing documentation from code. The platform offers features such as versioned documentation, integrated search, and pull request previews, positioning itself as a key player in the developer tools and documentation hosting market. The website content reflects a professional and consistent brand image aligned with the company's mission. Technically, the site is built using the Pelican static site generator and employs Font Awesome Pro icons, indicating a modern and maintainable infrastructure. However, the absence of explicit privacy, cookie, and security policies suggests areas for improvement in compliance and transparency. Security posture is moderate with no detected blocking mechanisms or WAF challenges, but lacks visible security headers and incident response information. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy disclosures to strengthen user confidence and regulatory compliance.

Hotel-Ds.Com operates as an online hotel reservation network offering a multilingual platform for users to search and book hotels worldwide. The website features extensive hotel listings categorized by regions and countries, targeting travelers seeking accommodation options. The business model centers on providing an intermediary service for hotel bookings, aggregating hotel data and facilitating reservations. The platform supports multiple languages, enhancing accessibility for a global audience. Technically, the website employs standard web technologies including HTML5, CSS3, and jQuery UI for interactive elements such as autocomplete search fields. Google Fonts are used for typography. The site appears moderately optimized for mobile devices and offers a clear navigation structure. However, there is no evidence of advanced frameworks or CMS platforms, and performance is moderate without explicit hosting details. From a security perspective, the site uses HTTPS, indicating encrypted communications. However, no security headers were detected in the provided content, and there is a lack of privacy, cookie, and terms of service policies, which are critical for compliance with regulations such as GDPR. No contact or incident response information is available, limiting transparency and trust. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about legitimacy and ownership verification. Overall, the website provides a functional and content-rich platform for hotel reservations but lacks critical compliance and security disclosures. The absence of WHOIS data and contact information reduces trustworthiness. Strategic improvements in privacy compliance, security best practices, and domain registration transparency are recommended to enhance credibility and user confidence.

F

FLOSS/fund

floss.fund

54

FLOSS/fund is a recently established non-profit initiative founded in 2023, dedicated to providing up to $1 million annually to support free and open source software projects globally. The website clearly communicates its mission and offers an application portal for projects seeking funding. The initiative is positioned as a niche funder within the open source ecosystem, supported by a parent company, Zerodha, and partnered with FOSS United Foundation. Technically, the website employs modern web standards including HTTPS, Google Fonts, and Cloudflare DNS services, delivering a good user experience with responsive design and clear navigation. However, it lacks key compliance documents such as privacy and cookie policies, and does not provide contact information or security incident channels, which limits transparency and user trust. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security disclosures.

C

Commune de Corminboeuf

corminboeuf.ch

58

The Commune de Corminboeuf website serves as the official digital presence for the local government of Corminboeuf, a small municipality in the canton of Fribourg, Switzerland. It provides residents and visitors with access to municipal services, administrative information, local news, events, and contact details. The site is well-structured, targeting local citizens with relevant content about administration, finances, education, health, social services, leisure, security, construction, mobility, and environmental management. The business model is that of a public sector entity focused on community service and governance. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and incorporates modern web technologies including Google reCAPTCHA for form security and Google Tag Manager for analytics. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not clearly present, and no dedicated security or incident response policies are published. No vulnerabilities or suspicious content were found. The domain registration data is consistent with the website's claims, reinforcing legitimacy and trustworthiness. Overall, the website is a reliable and professional municipal portal with good content quality and business credibility. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its posture and user trust.

F

FOSS United Foundation

fossunited.org

50

FOSS United Foundation is a small non-profit organization dedicated to fostering the Free and Open Source Software ecosystem in India. The foundation focuses on community building, educational programs, events, and industry partnerships to promote FOSS adoption and growth. The website is professionally designed using the Frappe framework and is hosted with Cloudflare DNS services, indicating a moderate level of technical maturity. However, the site lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is moderate with domain privacy protection and transfer restrictions, but lacks DNSSEC and security headers. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance features.

B

Bits & Bäume

bits-und-baeume.org

62

Bits & Bäume is a German non-profit coalition advocating for sustainable and socially just digitalization. Founded in 2018, it unites 13 organizations from environmental, climate, digital, development policy, and scientific sectors, alongside a growing community. The website serves as a hub for community engagement, events, publications, and political advocacy focused on digital sustainability and social justice. The organization targets activists, academics, and policy stakeholders interested in shaping digital transformation for the common good. Technically, the website is built using the Eleventy static site generator with modern CSS frameworks (likely Tailwind CSS), delivering fast performance and good mobile optimization. The site is well-structured with clear navigation and professional design, though accessibility features are basic. No analytics or tracking scripts were detected, reflecting a privacy-conscious approach. Security posture is solid with HTTPS enforced and domain transfer protections in place; however, DNSSEC is not enabled and no explicit security headers or policies are published. Privacy compliance is partially met with a privacy policy present but lacking a cookie consent mechanism. Contact information is limited to email addresses without phone numbers or physical addresses. Overall, the website is trustworthy, professional, and aligned with its non-profit advocacy mission. Recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and implementing a cookie consent mechanism to enhance GDPR compliance.

J

JAIN Logic

onfarm.com

50

JAIN Logic operates a technology platform accessible via a secure login portal powered by Auth0. The website serves as an authentication gateway for users to access JAIN Logic's services. The site is minimalistic, focusing solely on login functionality without public-facing content such as privacy policies, contact information, or business descriptions. Technically, the site uses modern React components and standard web technologies, with basic mobile optimization and accessibility features. Security posture is moderate, leveraging HTTPS and secure password inputs, but lacks visible security headers and compliance documentation. The absence of WHOIS data for the subdomain is expected but limits domain trust evaluation. Overall, the site is functional but lacks transparency and comprehensive compliance information.

T

The C Plus Plus Alliance, Inc.

cppalliance.org

54

The C++ Alliance is a US-based non-profit organization founded in 2017 dedicated to supporting the evolution of the C++ programming language. It focuses on funding educational resources, maintaining open source C++ libraries, fostering a vibrant community, and promoting contributions to C++ standards. The organization is funded by a private endowment and does not currently accept public donations or sponsorships. The website presents a professional and consistent brand image with clear information about its mission, team, activities, and news updates. Technically, the website is built using modern web technologies including Jekyll as a static site generator, Bootstrap for styling, and integrates analytics tools such as Google Analytics and Plausible. It is hosted with DNS services via Cloudflare and registered through GoDaddy with privacy protection. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features and security headers. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized changes. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and cookie consent banners, which are important for compliance and user trust. No critical vulnerabilities or suspicious content were detected. WHOIS data aligns with the organization's profile, showing a legitimate and appropriately aged domain. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security headers, and transparency around data protection policies to improve its security posture and user trust.

G

GIMP

gimp.org

65

GIMP is a well-established open source project providing a free, cross-platform image editing software widely used by graphic designers, photographers, illustrators, and scientists. The website reflects a mature project with consistent branding, clear navigation, and up-to-date content including recent news and release notes. The business model is donation-supported, emphasizing community involvement and open source principles. Technically, the site uses modern web standards with CSS and JavaScript libraries, and is optimized for mobile and accessibility. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are missing. Overall, the site is trustworthy and professional, supporting a globally recognized software product.

M

Markus Göllnitz

bewares.it

41

The website bewares.it is a personal portfolio and project showcase for Markus Göllnitz, a free software developer focused on Linux mobile environments and GNOME applications. The site highlights his involvement in open source projects such as Usage, Railway, and Papers, and emphasizes his contributions to the GNOME ecosystem and mobile Linux community. The business model is centered around open source development and community engagement, targeting Linux users and free software enthusiasts. The site is small-scale, reflecting an individual developer's presence rather than a corporate entity. Technically, the website is a statically hosted, well-optimized site with modern HTML5, CSS3, and JSON-LD structured data for semantic clarity. It is mobile responsive and accessible, with fast performance and good SEO practices. No CMS or complex frameworks are detected, indicating a lightweight and maintainable infrastructure. Hosting details are not explicit but the site claims no access logs and no PII collection, enhancing privacy. From a security perspective, the site uses HTTPS and DNSSEC, which are strong indicators of secure domain and transport layers. However, it lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. No forms or data collection mechanisms are present beyond a contact email link, minimizing attack surface. The WHOIS data is consistent with the website content and owner identity, supporting legitimacy and trustworthiness. Overall, the site presents a low-risk profile with good technical and security hygiene for a personal developer site. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a security.txt file to improve transparency and security posture further.

P

Private by Design, LLC

userstyles.world

69

UserStyles.world is a free, open-source, community-driven platform focused on sharing and browsing UserCSS userstyles. It serves as a modern alternative to UserStyles.org, emphasizing privacy and user control. The platform targets userstyle authors and users seeking customizable themes and skins for websites. The business operates under Private by Design, LLC, based in the US, and was founded in 2020. The website is professionally designed with excellent content quality and user experience, supporting fast performance and mobile optimization.

M

Musing Studio

writeas.com

49

Write.as is a privacy-focused minimal blogging platform operated by Musing Studio since 2015. It offers users a distraction-free writing environment with features such as anonymous posting, multiple identities, custom domains, and ActivityPub integration. The platform targets writers and small teams seeking simple, ad-free publishing solutions. Technically, Write.as leverages open source software (WriteFreely), modern web technologies, and self-hosted analytics to maintain privacy and performance. Security posture is strong with HTTPS and minimal data collection, though explicit security policies and cookie consent mechanisms are lacking. Overall, the website is professional, trustworthy, and well-optimized, with a clear business model based on subscription plans. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and adding vulnerability disclosure information.

The website vanta.quest is a newly registered domain with a minimalistic landing page focused on a game or interactive experience called VantaQuest. The site features a colorful rainbow-themed design with a single call to action inviting users to play the game. There is no detailed business description, contact information, or legal policies present, which limits the ability to assess the business comprehensively. The domain is protected by a privacy service and was registered recently in December 2023, indicating a nascent or small-scale operation. From a technical perspective, the site uses basic HTML, CSS, and JavaScript without any advanced frameworks or CMS detected. The performance and mobile optimization are basic, and there are no SEO or accessibility enhancements. No analytics, advertising, or tracking technologies are present, suggesting minimal data collection and user tracking. Security posture is weak due to the absence of security headers, privacy policies, and contact information for incident response. The site does not appear to use HTTPS or advanced security measures based on the data provided, which is a critical area for improvement. No vulnerabilities or suspicious content were detected, and the content is safe for general audiences. Overall, the website scores low on business credibility and privacy compliance due to lack of transparency and policies. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving accessibility and SEO, and providing clear contact and security information to enhance trust and compliance.

The website 'vanta DIY' is a personal project showcasing handmade, customized clothing items with a strong emphasis on rainbow and queer aesthetics. It serves primarily as a portfolio or gallery for DIY fashion creations rather than a commercial business. The domain is very new, registered with privacy protection, which aligns with the personal nature of the site. Technically, the site is built with basic HTML, CSS, and JavaScript without advanced frameworks or CMS. It uses HTTPS but lacks security headers and privacy policies, indicating a low maturity in security and compliance. There are no forms or contact details, limiting user interaction and business credibility. Overall, the site is safe for general audiences and does not contain any adult or explicit content.

VANTA COOL CLOTHING is a small retail clothing brand with an online presence primarily serving a general audience interested in unique clothing and art commissions. The business operates via an external e-commerce platform (artisans.coop) and offers direct commissions through email contact. The website is simple and visually styled with rainbow-themed animations and responsive design for mobile and desktop users. Technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript without advanced frameworks or CMS detected. Hosting and domain registration are managed through NameCheap with privacy protection enabled, consistent with a new small business setup. From a security perspective, the website uses HTTPS but lacks DNSSEC and security headers, which are recommended to enhance protection. No privacy or cookie policies are present, indicating a gap in compliance with data protection regulations such as GDPR. The site does not collect user data via forms on the main page, limiting exposure but also limiting engagement features. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website presents a low-risk profile with no adult or explicit content, but it would benefit from improved security practices and privacy compliance to build trust and meet regulatory standards. The domain is very new but appears legitimate with no suspicious WHOIS patterns. Strategic improvements in security headers, policy disclosures, and possibly adding analytics with privacy transparency would enhance the site's professionalism and compliance.

C

cybersyndicate

cybersyndicate.info

59

Cybersyndicate is a small community-driven technology platform focused on hosting and promoting federated social media instances with a cyberpunk theme. The website highlights three main instances: a Mastodon instance (cyberpunk.lol), a Misskey instance (cyberpunk.gay), and an upcoming Akkoma instance. The platform targets cyberpunk enthusiasts and users interested in decentralized social networking. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, with a custom canvas animation for visual effect. Hosting appears to be via NameCheap registrar with VPS hosting for at least one instance. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no contact or incident response information is provided, limiting compliance and trust. The domain is very recently registered with privacy protection, which is common for small community projects but shows some inconsistency with the claimed founding date. Overall, the site is functional and visually appealing but lacks key security and compliance elements.

D

DD Disposables Inc

dispo.fun

56

Dispo.fun is the official website for Dispo, a social media platform focused on live moment sharing, operated by DD Disposables Inc, a US-based company founded in 2020. The website promotes the mobile app available on Apple iOS and offers merchandise through an online shop. The business targets general users interested in authentic, real-time photo sharing experiences. The site includes links to community guidelines, FAQs, terms and privacy policies, and social media channels, indicating a moderate level of user engagement and brand presence. Technically, the website is built with standard HTML5 and CSS3, uses Google Fonts, and is registered through Squarespace Domains with DNS hosted on Google Cloud. The site is mobile optimized and performs moderately well, though it lacks advanced CMS or frameworks. SEO and accessibility features are basic but functional. No advanced analytics or tracking technologies were detected, suggesting a minimal user tracking approach. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain registration protections such as clientTransferProhibited status. However, DNSSEC is not enabled, and no security headers or incident response policies are published. The absence of a cookie consent mechanism and limited privacy compliance indicators suggest room for improvement in regulatory adherence. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for a niche social media app with a small company footprint. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing security and incident response policies, and adding cookie consent mechanisms to enhance privacy compliance and user trust.

T

Tested

tested.com

65

Tested.com is a media website led by Adam Savage, focusing on science, popular culture, and emerging technology. It operates a YouTube channel and promotes events and merchandise. The website is built on Squarespace, uses modern web technologies, and integrates social media and analytics tools. Privacy and cookie policies are present, indicating GDPR compliance. However, the absence of WHOIS data and lack of direct contact emails or phone numbers slightly reduce trust. Security posture is strong with HTTPS and HSTS enabled, but there is room for improvement in publishing security policies and terms of service.

S

Smarthotel B.V.

smarthotel.nl

69

Smarthotel B.V. is a Netherlands-based technology company specializing in providing integrated hotel operation solutions, including smart payments, channel management, and web booking systems. The company serves over 2500 hotels across more than 10 countries, positioning itself as a trusted partner in the hospitality technology market. Their platform is modular and PMS-independent, allowing seamless integration with existing hotel management systems. The website reflects a professional and modern digital presence built on HubSpot CMS, with strong branding consistency and clear calls to action for demos and contact.

T

Team Liquid / TLnet

teamliquid.net

72

TLnet is a well-established esports news and community website primarily focused on StarCraft II and Brood War. It serves a dedicated audience of esports fans by providing news articles, community forums, live event calendars, and streaming links. The site is part of the broader Team Liquid ecosystem, a recognized brand in the esports industry. The business model centers on community engagement and advertising revenue, supported by partnerships with major esports platforms like Liquipedia. Technically, the site uses a custom CMS with modern JavaScript libraries and ad technologies, hosted and protected by Cloudflare. While the site employs HTTPS and standard security practices, it lacks advanced DNS security features like DNSSEC and does not publicly disclose a security policy or incident response contacts. Privacy compliance is basic, with a cookie consent banner and privacy policy present but no detailed GDPR compliance indicators. Overall, TLnet demonstrates a mature digital presence with good content quality and business credibility but could improve its security posture and privacy transparency.

C

Codeberg

codeberg.page

53

Codeberg Pages is a niche service offering free static website hosting tailored for open source projects hosted on Codeberg. The platform targets developers and open source communities, providing an easy way to publish project homepages, blogs, or experiments directly from Git repositories. The website is well-branded and consistent, with clear instructions and links to documentation, but lacks formal privacy, cookie, or terms of service policies and does not provide direct contact information. Technically, the site uses modern web standards including HTML5, CSS3, JavaScript, and popular font/icon libraries. It employs the Halfmoon CSS framework for responsive design and is hosted on Codeberg infrastructure with HTTPS enforced, ensuring secure connections. The site performs moderately well with good mobile optimization and basic accessibility features, though SEO and advanced accessibility could be improved. From a security perspective, the site benefits from HTTPS and absence of user input forms, reducing attack surface. However, it lacks security headers and published security policies or incident response contacts, which are recommended for improved security posture. No vulnerabilities or sensitive data exposures were detected. Overall, the website is safe, professional, and trustworthy for its intended audience but would benefit from enhanced privacy compliance, security policies, and contact transparency to improve user trust and regulatory adherence.

O

OpenCage GmbH

thegeomob.com

64

Geomob is a specialized event series and podcast platform targeting geospatial enthusiasts and location-based service creators primarily in Europe. The website serves as a community hub offering event information, podcast episodes, and sponsorship details. The business operates under OpenCage GmbH, a known entity in the geospatial data sector, enhancing its credibility. The platform's market position is niche but well-defined, focusing on geoinnovation discussions and networking. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, hosted and registered via Cloudflare, ensuring reliable DNS and domain management. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. However, no CMS or advanced frameworks were detected, suggesting a custom or lightweight implementation. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and related regulations. The site uses minimal tracking via Fathom Analytics and Mailchimp for mailing list management, reflecting a privacy-conscious approach but lacking explicit user consent mechanisms. Overall, the website is professional, trustworthy, and content-rich for its target audience but would benefit from improved security headers, explicit privacy and cookie policies, and DNSSEC implementation to strengthen its security posture and compliance standing.

Lightbug Ltd is a UK-based technology company specializing in the design and manufacture of ultra-long battery life GPS tracking devices and integrated software solutions. Their products target distributors, integrators, and developers seeking reliable, small-sized tracking hardware with advanced features such as RTK high accuracy and environmental sensors. The company emphasizes quality manufacturing in Bristol, UK, and sustainability in operations. Technically, the website employs modern web technologies including Material Design Lite and Vue.js, hosted on AWS infrastructure, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and Cyber Essentials PLUS certification, though improvements are recommended in security headers and published policies. Overall, the site is professional, trustworthy, and business-focused, with no blocking or suspicious content detected.

P

postmarketOS

postmarketos.org

51

postmarketOS is an open-source Linux distribution project focused on extending the life cycle of mobile devices by providing a sustainable and privacy-respecting operating system. The project is well-positioned within the Linux mobile ecosystem, collaborating closely with upstream projects such as Alpine Linux, GNOME, KDE, and others. The website reflects a mature, community-driven initiative with excellent content quality and clear messaging aimed at Linux enthusiasts and developers interested in mobile Linux solutions. Technically, the website is modern, fast, and mobile-optimized, though it lacks some advanced security headers and cookie consent mechanisms. Security posture is moderate with room for improvement in formal policies and technical controls. Overall, the domain registration and WHOIS data are consistent and trustworthy, supporting the legitimacy of the project.

P

Pengutronix e.K.

pengutronix.de

64

Pengutronix e.K. is a specialized German company providing embedded Linux consulting, kernel development, open source multimedia solutions, and training services primarily targeting industrial customers developing Linux-based devices. The company maintains a professional and content-rich website that clearly communicates its services and expertise, positioning itself as a niche player in the embedded Linux technology sector. The website is well-structured, mobile-optimized, and uses modern web technologies such as Bootstrap, jQuery, and PhotoSwipe to deliver a good user experience. From a technical perspective, the website employs HTTPS with good SSL configuration, modern JavaScript libraries, and responsive design. SEO practices are well implemented with proper meta tags and Open Graph data. However, some accessibility features could be improved. Security headers are not explicitly detected, and there is no visible security.txt or incident response contact information, which could be enhanced to improve security posture and transparency. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Contact information is clearly provided, including email, phone, and physical address, enhancing business credibility. No advertising or tracking services are detected, indicating a privacy-conscious approach. Overall, the website and domain appear legitimate and consistent with the company's business operations. The WHOIS data is minimal but does not raise concerns. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing a security.txt file, and providing explicit incident response contacts to further strengthen security and compliance.

F

FreeWear.org

freewear.org

55

FreeWear.org is a niche e-commerce website specializing in merchandise related to open source and free software projects. The business model includes selling T-shirts, hoodies, stickers, mugs, and other items, with a portion of sales donated back to the respective open source projects. The site targets open source enthusiasts and community supporters, positioning itself as a community-focused retailer with transparent donation practices. Technically, the website uses older JavaScript libraries such as MooTools 1.2.4 and Font Awesome 4.7.0, with Google Analytics for tracking. The site is served over HTTPS with a cookie consent banner indicating GDPR compliance. However, some modern security headers are missing, and the WHOIS data is unavailable due to a malformed query, limiting domain registration transparency. Overall, the site is functional, moderately optimized, and trustworthy for its niche audience.

C

Cuberto

cuberto.com

60

Cuberto is a well-established digital product agency founded in 2007 and based in the USA, specializing in UI/UX design, branding, web, and mobile development. The company targets businesses seeking high-quality digital design and development services, positioning itself as a leading agency with a strong portfolio and consistent branding. The website reflects a mature digital presence with excellent design quality, clear navigation, and mobile optimization. Technically, the site uses modern web standards, is hosted on DigitalOcean, and employs multimedia content effectively. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and formal policies are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

N

Netfarm S.r.l.

netfarm.it

50

Netfarm S.r.l. is an established Italian technology company specializing in open source software solutions, including mobile applications, scientific software, business integration, and Odoo ERP services. Founded in 2000, it serves primarily Italian SMEs and enterprises seeking reliable and innovative open source technology. The company maintains a strong market position supported by partnerships such as Bloomup and Ethos S.p.a, and holds ISO 9001 certification, underscoring its commitment to quality. The website reflects a professional and consistent brand image with clear service offerings and contact information.

M

MindShare Inc.

kfocus.org

53

Kubuntu Focus, operated by MindShare Inc., is a specialized technology company offering validated Linux hardware systems optimized for performance, reliability, and ease of use in low or no IT environments. Their product line is built around Kubuntu Linux with KDE Plasma desktop, targeting developers, AI scientists, and creators who require robust Linux-first support and curated software environments. The company emphasizes long-term hardware validation and extensive software testing to ensure system stability and user productivity. Technically, the website is well-structured, leveraging modern web technologies including jQuery, Font Awesome, and Google Tag Manager for analytics. The site is mobile-optimized and provides rich multimedia content such as videos and interactive tools. Hosting is inferred to be with GoDaddy, and the domain is privacy-protected but consistent with the business location and age. SEO and accessibility are adequately addressed, though some improvements are possible. From a security perspective, Kubuntu Focus demonstrates good practices such as offering full disk encryption, YubiKey 2FA, OpenVPN, and validated kernel and driver updates. However, the website lacks explicit security headers, cookie consent mechanisms, and published incident response policies, which are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, Kubuntu Focus presents a trustworthy and professional online presence with a strong focus on Linux hardware and software validation. Strategic enhancements in privacy compliance and security transparency would further strengthen their security posture and user trust.

P

PINE64

pine64.org

47

PINE64 is a technology-focused community and business established in 2015, specializing in the development and sale of ARM and RISC-V based single board computers and related devices. The organization emphasizes open source principles and user freedom, fostering a vibrant community of developers, hardware enthusiasts, and privacy advocates. Their product portfolio includes devices such as the RockPro64, Quartz64, PinePhone, and PineTime smartwatch, supported by extensive documentation and community engagement channels. The business operates primarily through community-driven initiatives and product sales via official global and EU stores. Technically, the website is built using the Hugo static site generator, delivering a fast, mobile-optimized, and SEO-friendly experience. Hosting is provided by sponsors VPSFree.org and bbxnet.sk, indicating a community-supported infrastructure. The site includes multiple external links to social media and community platforms, enhancing user engagement and trust. However, there is a lack of formal privacy and cookie policies, which represents a compliance gap. From a security perspective, the site uses HTTPS and client-side search forms but lacks visible security headers and published security policies or incident response contacts. DNSSEC is not enabled, which could improve DNS security. The WHOIS data shows privacy protection for the registrant, which is justified for this type of community-driven technology business. The domain age aligns well with the company's founding date, supporting legitimacy. Overall, PINE64 presents a trustworthy and professional online presence with strong community ties and technical maturity. To enhance security posture and compliance, it is recommended to implement DNSSEC, publish privacy and cookie policies with consent mechanisms, add security headers, and provide clear incident response information.

T

Timothée Giet and others

gcompris.net

66

GCompris is a well-established educational software suite targeting children aged 2 to 10, offering over 100 activities across various learning domains such as arithmetic, reading, science, and games. The project is community-driven and hosted by the KDE community, distributed under the GNU AGPL license, and supported by donations and patronage. The website reflects a mature and consistent brand with professional content and clear navigation. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Matomo analytics, hosted on OVH infrastructure. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and cookie consent mechanisms. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is trustworthy, safe for general audiences, and well-positioned within the educational software niche.

I

INRIA

ocaml.org

49

OCaml.org is the official website for the OCaml programming language, managed by INRIA, a reputable French research institute. The site serves as a comprehensive resource hub for developers, educators, and industrial users interested in OCaml, offering installation guides, documentation, package management, community engagement, and news updates. The website demonstrates a strong market position with endorsements from industry leaders such as Facebook, Microsoft, and Bloomberg, and recognition through prestigious awards. Technically, the site employs modern web technologies including Alpine.js, HTMX, and analytics tools like PostHog and Plausible, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and enhanced security headers could be implemented. Privacy compliance is well addressed with clear policies, though cookie consent mechanisms are minimal. Overall, the site is professional, trustworthy, and well-maintained, reflecting the maturity and credibility of the OCaml ecosystem.

M

MAME Development Team

mamedev.org

59

MAMEdev.org is the official website of the MAME Development Team, an open source project dedicated to preserving vintage software through emulation. The site provides access to the MAME emulator, documentation, community forums, and development resources. The project is well-established in the emulation community with a strong focus on software preservation and open source collaboration. Technically, the website uses a classic Bootstrap and jQuery stack with a responsive design, though some modernization opportunities exist, such as updating libraries and improving mobile optimization. Security posture is moderate with no visible HTTPS or security headers data, and no cookie consent mechanism detected, indicating room for improvement in privacy compliance. The WHOIS data is unavailable due to registry restrictions, which slightly reduces transparency but does not detract from the legitimacy supported by active development and community engagement. Overall, the website is professional, content-rich, and trustworthy for its target audience.

G

Google LLC

webmproject.org

71

Google LLC operates the world's leading search engine and a broad portfolio of internet-related services and products, including advertising technologies, cloud computing, software, and hardware. As a subsidiary of Alphabet Inc., Google holds a dominant market position in digital advertising and internet search globally. The website reflects a mature, enterprise-level digital presence with excellent content quality, user experience, and technical infrastructure. The site is optimized for performance, accessibility, and SEO, supporting a broad international audience with localized content. Security is robust, with HTTPS enforced and comprehensive security headers implemented, reflecting Google's commitment to protecting user data and privacy. Privacy policies and cookie consent mechanisms are clearly presented, demonstrating compliance with GDPR and other regulations. Overall, the website is highly professional, trustworthy, and aligned with Google's corporate identity and business model.

The website sourceforge.net is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to the site's content. SourceForge is a well-known technology platform established in 1999, primarily serving as a repository and distribution platform for open-source software projects. The domain registration data confirms a long-standing and legitimate presence in the technology sector. Due to the content being blocked, no direct analysis of privacy policies, contact information, or business details is possible. The technical infrastructure includes Cloudflare security services, indicating a focus on protecting the site from automated threats and abuse. Security posture is strong in terms of domain protection and use of WAF, but the inability to access content limits further security and compliance evaluation. Overall, the site is legitimate but currently inaccessible for detailed analysis, resulting in a low AI score driven by content unavailability.

T

The GTK Team

gtk.org

57

The GTK Project is a well-established open-source initiative providing a free, cross-platform widget toolkit for creating graphical user interfaces. Maintained by the GTK Team under the GNOME Foundation, it serves a global developer audience with comprehensive language bindings and a rich set of UI components. The website reflects a mature project with consistent branding, excellent content quality, and a strong community focus. Technically, the site leverages modern web technologies including Bootstrap, jQuery, and Jekyll, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional, supporting the GTK project's reputation in the open-source ecosystem.

M

Mahjong138

emergedesktop.org

52

Mahjong138 operates as an online gambling platform primarily targeting Indonesian users, offering a variety of betting games including slots, poker, casino, sports betting, and more. The website positions itself as a licensed and secure provider with 24/7 customer service and multiple promotional offers to attract and retain users. The business model revolves around online betting services with a focus on user engagement through bonuses and referral programs. Technically, the site leverages the AMP framework to ensure fast loading and excellent mobile optimization, hosted on Bluehost with Cloudflare DNS services. Security posture is moderate with HTTPS enforced and domain transfer protection, but lacks advanced DNS security and explicit security policies. Privacy compliance is limited, with no visible cookie consent or GDPR indicators. Overall, the site is functional, professionally designed, and moderately trustworthy but could improve in privacy and security transparency.

E

Ecere Corporation

ecere.org

47

Ecere Corporation operates the Ecere SDK, an open-source cross-platform software development kit designed for building applications and games across multiple platforms including desktop, mobile, and web. The SDK includes a compiler for the eC language and offers extensive features such as GUI, 2D/3D graphics, networking, and an integrated development environment. The website positions itself as a niche provider with a long history dating back to 1997, targeting developers and technical users seeking a comprehensive development toolkit. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party analytics and social SDKs such as Google Analytics and Facebook SDK. The site is hosted with a reputable registrar and shows moderate performance and basic mobile optimization. However, it lacks advanced SEO and accessibility features and does not appear to use a CMS. From a security perspective, the website lacks visible security headers, does not enable DNSSEC, and does not provide HTTPS enforcement details in the HTML content. No privacy, cookie, or terms of service policies are published, and no incident response or security contact information is provided. These gaps indicate a low maturity in privacy compliance and security posture, which could expose the organization to compliance risks and reduce user trust. Overall, the website is functional and provides relevant technical content for its target audience but requires improvements in security, privacy compliance, and transparency to enhance trustworthiness and meet modern standards. Strategic recommendations include implementing DNSSEC, publishing privacy and cookie policies, adding security headers, enforcing HTTPS, and providing clear contact information for security incidents.

The website devkitpro.org is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks access to the actual site content. Consequently, no direct business information, policies, or contact details are available for analysis. The domain is registered since 2005 with NameCheap, Inc., uses Cloudflare nameservers, and has a clientTransferProhibited status, indicating a legitimate and stable registration. The technical infrastructure includes Cloudflare's security services, but no further technology stack or CMS details are accessible. Security posture cannot be fully assessed due to the blocking mechanism, but the presence of Cloudflare indicates a baseline of security. Overall, the site cannot be fully evaluated until the security challenge is passed or bypassed.

B

Boost C++ Libraries

boost.org

62

Boost.org hosts the Boost C++ Libraries, a well-established open source project providing peer-reviewed, portable, and free C++ libraries. The organization is community-driven and supported by grants from the C++ Alliance. The website reflects a mature project with a clear mission to advance software development best practices and inspire standard enhancements. The target audience is primarily C++ developers and software engineers seeking high-quality libraries to improve productivity and reduce maintenance costs. Technically, the site uses modern JavaScript frameworks such as Alpine.js and htmx, with a clean, responsive design optimized for desktop and mobile. Analytics are handled via privacy-focused plausible.io, indicating a minimal user tracking approach. Security posture is good with HTTPS enforced, but lacks some advanced security headers and published security policies. WHOIS data is unavailable due to privacy protection, which is typical for open source projects. Overall, the site is professional, trustworthy, and well-maintained.