Security Directory

C

CENIT AG

cenit.com

75

CENIT AG is a well-established technology and consulting company based in Germany, specializing in digital process solutions, product lifecycle management, and software integration. With over 30 years of experience and strategic partnerships with global IT leaders such as Dassault Systèmes, IBM, and SAP, CENIT serves a broad enterprise clientele across multiple countries. Their business model focuses on providing comprehensive digital transformation services, software solutions, and consulting to enhance operational excellence and digital maturity for their customers. Technically, the website is built on the TYPO3 CMS platform with Bootstrap for responsive design, leveraging modern web technologies and integrating marketing and analytics tools like Google Tag Manager and Microsoft Dynamics Marketing Forms. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs security headers such as Content Security Policy, and uses CAPTCHA-protected forms, indicating a solid security posture. However, the absence of publicly available security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and readiness. Overall, the website presents a professional, trustworthy, and content-rich presence aligned with the company's market position. The lack of WHOIS data limits domain trust verification, but the business legitimacy is supported by consistent branding, detailed service offerings, and contact information. Strategic recommendations include enhancing security transparency, publishing incident response details, and verifying domain registration information to strengthen trust further.

A

abatisens GmbH

abatisens.de

47

abatisens GmbH is a small technology consultancy specializing in Data Science and Artificial Intelligence solutions. With over 10 years of experience, the company offers consulting, training, custom software development, and ready-to-use AI products. Their market position is that of a niche expert focused on practical, application-related AI solutions for businesses seeking automation and innovation. The website is professionally designed using WordPress and the Avada theme, with good mobile optimization and clear navigation. The technical infrastructure includes modern web technologies and hosting with rzone.de. Security posture is solid with HTTPS and secure form handling, though additional security headers could enhance protection. Privacy compliance is evident with a privacy policy and cookie consent mechanism. Contact information is clearly presented, including phone, email, physical address, and a contact form. Social media presence on Twitter, LinkedIn, and Medium supports business credibility. Overall, the website reflects a trustworthy and professional business with a good digital maturity level.

N

National Defense Industrial Association, Michigan Chapter

ndia-mich.org

65

The National Defense Industrial Association Michigan Chapter is a well-established membership organization focused on connecting defense industry stakeholders within Michigan to support the warfighter. The website serves as a hub for event information, membership drives, and community initiatives such as STEM scholarships and defense policy advocacy. The organization maintains partnerships with several reputable defense and government-related entities, reinforcing its market position as a key regional connector in the defense sector. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, hosted by GoDaddy. It employs standard web technologies and includes Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could enhance performance and security. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which are recommended to improve protection against common web threats. The presence of CAPTCHA on subscription forms is a positive anti-spam measure. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism, which is a compliance gap given the use of tracking technologies. Overall, the website is professional and trustworthy with a solid business credibility score. Strategic improvements in security headers, privacy compliance, and contact transparency would further strengthen its posture and user trust.

E

EC-Council

eccouncil.org

81

EC-Council is a globally recognized cybersecurity education and certification provider offering a wide range of training programs including ethical hacking, incident handling, cloud security, and blockchain security. The organization targets cybersecurity professionals, enterprises, and students seeking to advance their careers through industry-recognized certifications. The website demonstrates a mature digital presence with a comprehensive catalog of courses, partner programs, and advisory services, positioning EC-Council as a leader in cybersecurity education. Technically, the website is built on WordPress with Elementor and integrates modern web technologies such as Bootstrap, Google Tag Manager, and Trustpilot for reviews. The site is well-optimized for mobile devices and incorporates security best practices including HTTPS enforcement, security headers, and CAPTCHA on forms. Analytics and marketing tools are used responsibly with visible cookie consent mechanisms. From a security perspective, the site maintains a strong posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a public security.txt file and explicit incident response contacts suggests room for improvement in vulnerability disclosure and incident management transparency. WHOIS data is not publicly available, likely due to privacy protection, which is common for organizations of this nature. Overall, EC-Council's website reflects a professional, trustworthy, and secure platform suitable for its educational mission. Strategic enhancements in transparency and accessibility could further strengthen its security and compliance profile.

I

IBF Solutions GmbH

ibf-solutions.com

54

IBF Solutions GmbH is a medium-sized German company specializing in CE marking, risk assessment, and standards management software and consulting services. With over 25 years of experience, they provide the Safexpert software suite and a broad range of seminars to support manufacturers and machine builders in achieving regulatory compliance efficiently. The website is professionally designed, multilingual, and rich in content, targeting B2B clients in manufacturing and product safety sectors. Technically, the site is built on TYPO3 CMS with modern frameworks and includes consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS, domain transfer protection, and cookie consent, though some security headers and DNSSEC are missing. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

A

Ahorn Camp GmbH & Co. KG

ahorn-camp.de

51

Ahorn Camp GmbH & Co. KG is a medium-sized family business based in Germany specializing in the retail and marketing of motorhomes and campervans. With over 30 years of market presence, the company offers a range of high-quality and comfortable recreational vehicles, targeting consumers interested in travel and outdoor lifestyles. The website serves as a digital storefront and information hub, showcasing models, prices, and dealer locations. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins for SEO, performance, and user engagement. The infrastructure is hosted on rzone.de, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent management via Borlabs Cookie, but lacks published security policies or incident response information. Privacy compliance is partial, with no explicit privacy or terms of service pages detected. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

C

CHEFS CULINAR

chefsculinar.com

54

CHEFS CULINAR is a well-established European foodservice distributor with a strong presence across multiple countries. The company offers a broad range of food and non-food products, kitchen technology, and consulting services tailored to professional customers in hospitality, gastronomy, and communal catering. Their website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses a traditional tech stack including jQuery, Bootstrap, and Google reCAPTCHA, with moderate performance and mobile optimization. Security measures include bot protection and cookie consent, but lack visible security headers and advanced policies. The absence of WHOIS data reduces domain transparency and trust, though the business appears legitimate based on content and related domains. Overall, the website scores well but could improve in security posture and domain registration transparency.

adaptronic Prüftechnik GmbH is a well-established German company specializing in the manufacture and development of wiring and functional test systems for sectors including aerospace, railway, automotive, and industrial wiring. With over 30 years of experience and as a member of the Swiss Komax Group, adaptronic offers customized test solutions, calibration services, and training to its B2B clientele. The website reflects a professional and consistent brand image with clear business information and certifications such as ISO 14001. Technically, the site is built on TYPO3 CMS using standard libraries like jQuery and Bootstrap, hosted on Microsoft Azure DNS infrastructure. While the site is functional and moderately optimized for mobile and SEO, there is room for improvement in performance and accessibility.

Festival tata is a Croatian non-profit organization and festival dedicated to celebrating and promoting caring fatherhood and active paternal involvement in child upbringing. Founded in 2018, it is supported by the Swedish Embassy in Zagreb and local organizations such as Status M and Roditelji u akciji – Roda. The festival organizes digital campaigns, photo exhibitions, workshops, and advocacy efforts focused on paternity leave and family well-being. The website is professionally designed using WordPress and hosted on DreamHost, featuring a modern tech stack including jQuery, Bootstrap, and Jetpack plugins. Social media integration and analytics are implemented via Facebook SDK and Jetpack Stats respectively. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and formal policies are lacking. Privacy compliance is partial with a cookie consent mechanism but no privacy policy or terms of service pages. Contact information is minimal, limited to an email address. Overall, the website is trustworthy, content-rich, and serves its target audience effectively, but could improve compliance and security transparency.

X

XY Asocijacija

spolnozdravlje.ba

43

Spolnozdravlje.ba is a non-profit educational website operated by XY Asocijacija, focused on sexual and reproductive health education, family planning, relationships, and health rights primarily targeting the population of Bosnia and Herzegovina. The platform offers a wide range of informational content, guides, and resources for both the general public and health professionals, supported by the United Nations Population Fund (UNFPA). The website maintains a consistent brand presence and provides clear contact information, including physical address and social media channels. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, and integrates Google Analytics for user tracking. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security-wise, HTTPS usage is implied but not explicitly confirmed, and no security headers were detected in the provided data, indicating room for improvement in security posture. Overall, the website is functional, informative, and trustworthy but would benefit from enhanced privacy compliance and security hardening.

A

ABM - Associação Brasileira de Metalurgia, Materiais e Mineração

abmbrasil.com.br

61

ABM - Associação Brasileira de Metalurgia, Materiais e Mineração is a well-established Brazilian non-profit association serving the metallurgy, materials, and mining sectors. The organization provides a broad range of services including educational courses, industry events, webinars, and publications, targeting professionals, companies, and students within these industries. The website reflects a professional and consistent brand presence with strong industry partnerships and a clear focus on knowledge dissemination and community engagement. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates analytics and user behavior tracking tools like Google Analytics and Hotjar. Hosting is managed via Amazon AWS infrastructure, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms, although some security best practices such as security headers and incident response policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, user-friendly, and serves its target audience effectively.

C

CHEFS CULINAR

chefsculinar.de

54

CHEFS CULINAR is a large, established German foodservice wholesaler specializing in supplying gastronomy and institutional catering sectors. The company offers a broad portfolio including food wholesale, consulting, software solutions, seminars, and recipe inspiration, positioning itself as a comprehensive partner in the foodservice industry. The website reflects a mature digital presence with modern technologies such as Bootstrap, jQuery, Alpine.js, and integrates GDPR-compliant consent management via Usercentrics. Analytics tools like Google Analytics, Meta Pixel, and eTracker are used responsibly with user consent mechanisms in place. Security posture is solid with HTTPS enforced and secure login forms, though HTTP security headers are not explicitly detected. The WHOIS data is minimal but consistent with a German business using Deutsche Telekom nameservers. Overall, the site is professional, trustworthy, and well-structured, targeting B2B customers in the hospitality and catering sectors.

E

Everllence

man-es.com

64

Everllence, formerly known as MAN Energy Solutions, is a leading global provider of propulsion, decarbonization, and efficiency solutions targeting shipping, energy, and industrial sectors. The company focuses on enabling a carbon-neutral economy through advanced engineering technologies such as climate-neutral fuel engines, large-scale heat pumps, carbon capture and storage, and green hydrogen production via its subsidiary Quest One. The website reflects a mature enterprise with a strong brand transition and a comprehensive digital presence. Technically, the site employs modern frameworks like Angular and Bootstrap, integrates Google Analytics and Tag Manager for tracking, and implements robust cookie consent mechanisms compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security best practices like explicit security policies and incident response contacts are absent. The domain WHOIS data is missing, suggesting recent registration or transition, which slightly impacts trust but is mitigated by the professional and consistent website content and branding.

O

Oak Foundation

oakfnd.org

52

Oak Foundation is a well-established philanthropic organization founded in 2000 and registered in Switzerland. It operates globally with a focus on grant-making to support social, environmental, and human rights causes. The website reflects a mature digital presence with comprehensive content about its programmes, partners, and impact stories. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the organization's identity, supporting its legitimacy. The site is safe for general audiences and demonstrates high professionalism and trustworthiness.

The Austrian Development Agency (ADA) serves as Austria's operational unit for international development cooperation, focusing on poverty reduction, peace promotion, and environmental protection. It operates under the Federal Ministry for European and International Affairs and implements projects and programs in developing countries. The website reflects a government-affiliated organization with clear communication channels and a professional online presence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery, RequireJS, and Bootstrap, ensuring a responsive and accessible user experience. The site includes a comprehensive cookie consent mechanism and links to multiple official social media channels, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit HTTP security headers and published security policies or incident response contacts. The absence of WHOIS data limits domain legitimacy verification, though the official government affiliation and content quality support trustworthiness. Overall, the website presents a solid, professional, and trustworthy platform for Austrian development cooperation, with room for improvement in security transparency and domain registration clarity.

E

Everllence

everllence.com

64

Everllence is a leading enterprise specializing in propulsion, decarbonization, and efficiency solutions for shipping, energy, and industrial sectors. Formerly known as MAN Energy Solutions, the company focuses on reducing hard-to-abate emissions through advanced engineering technologies including climate-neutral fuel engines, heat pumps, carbon capture, and green hydrogen production. Their global presence and comprehensive after-sales service network position them as a key player in the energy transition market. The website reflects a mature digital infrastructure with modern technologies such as Angular, Google Analytics, and OneTrust for privacy compliance. Embedded multimedia content and a clear navigation structure enhance user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and vulnerability disclosure are absent. WHOIS data is unavailable, likely due to recent domain registration or transition, but website content and branding consistency support legitimacy. Overall, the site demonstrates strong professionalism, compliance, and technical maturity suitable for an enterprise in the energy sector.

D

Danube Dynamics Embedded Solutions GmbH

danube-dynamics.at

45

Danube Dynamics Embedded Solutions GmbH is a specialized provider of embedded systems and artificial intelligence solutions tailored for industrial and manufacturing sectors. The company combines expertise in software development, AI, and hardware design to deliver high-quality, customized embedded system solutions. Their market position is strengthened by a professional website showcasing client testimonials, comprehensive service offerings, and a clear focus on quality and innovation. Technically, the website is built on WordPress with modern plugins and tools such as Yoast SEO, Borlabs Cookie for GDPR compliance, and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and reCAPTCHA integration, though explicit security headers and a published security policy are absent. The absence of WHOIS data reduces domain trust but does not detract from the professional presentation and business credibility. Overall, the website demonstrates a mature digital presence with strong privacy compliance and user experience.

A

Autonoma Technologies GmbH

autonoma.cloud

62

Autonoma Technologies GmbH operates a digital customer platform (DCP) tailored for machinery and equipment manufacturers, enabling data-driven service revenues and digital business models. The company targets OEMs and internal departments seeking to digitize machines, processes, and customer experiences. Their platform offers modules for digital sales, after-sales, IIoT data management, machine analysis, and AI-driven services, positioning them as a comprehensive solution provider in the manufacturing technology sector. The website reflects a professional and consistent brand image with strong trust indicators including customer logos and operational status transparency. Technically, the site leverages modern web technologies such as Bootstrap, jQuery, and Cloudflare services, with responsive design and moderate performance. Security posture is good with HTTPS, domain transfer protection, and Cloudflare Turnstile Captcha on forms, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with a GDPR policy but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and aligned with the company's business claims.

The OPC Foundation is a well-established global standards organization specializing in industrial interoperability technologies. Founded in 1997, it supports a large ecosystem of suppliers and products facilitating secure and seamless data exchange across diverse platforms. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation targeting industrial automation professionals and technology vendors. Technically, the site is built on WordPress with modern tools such as jQuery, Bootstrap, and analytics platforms like Matomo and Hotjar, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforcement and domain protection, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with visible privacy and cookie policies and consent mechanisms. Overall, the OPC Foundation website demonstrates high trustworthiness and professionalism, supporting its market leadership in industrial interoperability standards.

P

PSTproducts GmbH

pstproducts.com

60

PSTproducts GmbH is a German-based medium-sized company specializing in electromagnetic pulse technology (EMPT) for industrial mass production applications. The company is positioned as a world leader in EMPT machine systems, offering tailored solutions for welding, joining, and high-speed forming processes without heat input. Their website is professionally designed, multilingual, and targets industrial manufacturers and engineering clients. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with good mobile optimization and SEO practices. Security posture is moderate; while cookie consent is implemented and no sensitive data is exposed, the absence of DNSSEC and security headers suggests room for improvement. No incident response or security policy information is published. Overall, the domain registration is consistent with the business history, supporting legitimacy and trustworthiness.

F

Forum za odgovorno poslovanje

odgovornoposlovanje.rs

45

Forum za odgovorno poslovanje is a Serbian non-profit organization that brings together leading companies committed to responsible business practices and sustainable development. Established in 2014, it serves as a platform to promote corporate social responsibility (CSR) principles and encourage active business sector participation in societal development. The website provides news, reports, and event information relevant to CSR and sustainability topics, targeting businesses and stakeholders interested in these areas. The forum maintains an active presence on major social media platforms and offers newsletter subscriptions to engage its audience.

D

de:hub digital ecosystems

de-hub.de

57

The website www.de-hub.de represents the de:hub digital ecosystems initiative, a government-backed network aimed at connecting medium-sized enterprises and corporations with innovation partners from the startup scene and academia across Germany. The initiative operates 25 hubs specializing in various technology sectors, fostering collaboration and technological innovation. The site is professionally designed, well-structured, and provides extensive information about the hubs, services, and contact options. Technically, the site is built on TYPO3 CMS with modern frontend technologies and uses Matomo for analytics, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and secure forms, though explicit security policies and incident response contacts are not present. Privacy compliance is strong with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy, professional, and serves as a key digital innovation platform in Germany.

Signal 112 & Feuerwehrmesse Oberwart is a professional trade fair website focused on emergency services and firefighting, organized by Burgenland Messe Betriebsges.m.b.H. & Co. KG in Austria. The site targets professional visitors and exhibitors, providing event information, exhibitor directories, and an online registration portal. The website is well-structured with multilingual support and clear contact details, reflecting a regional event organizer's digital presence. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, and various UI plugins like Master Slider and Owl Carousel. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. No CMS or backend platform was explicitly detected. Cookie consent is implemented with a clear banner and linked privacy policy, indicating good privacy compliance. From a security perspective, the site lacks visible security headers and does not provide explicit security or incident response policies. SSL configuration details are not provided, but HTTPS is assumed. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns. Overall, the website presents a moderate risk profile with room for improvement in security headers, incident response transparency, and technical modernization. The business credibility is solid given the clear contact information and partner links. Strategic recommendations include enhancing security policies, improving accessibility, and adding terms of service and vulnerability disclosure information.

Baumesse Oberwart is a regional trade fair event website focused on the construction and building industry in Oberwart, Austria. It provides comprehensive information for visitors and exhibitors, including event details, registration, ticketing, and newsletters. The business operates under Burgenland Messe Betriebsges.m.b.H. & Co. KG, indicating a structured event organization entity with a regional market presence. The website targets attendees and exhibitors interested in the trade fair, positioning itself as a key regional event organizer in Burgenland. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various plugins for sliders and carousels. It integrates analytics platforms such as Matomo and Open Web Analytics, and implements a cookie consent banner compliant with GDPR requirements. Hosting and domain registration are consistent with the business location in Austria, using a reputable registrar. The site shows moderate performance and good mobile optimization but lacks visible advanced security headers and explicit HTTPS enforcement in the provided data. From a security perspective, the site demonstrates basic compliance with privacy regulations through cookie consent and a privacy policy. However, it lacks visible security headers and explicit incident response or security policies. No critical vulnerabilities or exposed sensitive data were detected. The overall security posture is moderate but could be improved by implementing stronger SSL/TLS configurations, security headers, and publishing security policies. Overall, Baumesse Oberwart presents a professional and trustworthy online presence for a regional trade fair. The site is safe for general audiences, with no adult or questionable content. Strategic improvements in security and technical SEO could enhance its digital maturity and trustworthiness further.

The website genuss-burgenland.at represents a regional event organizer, Burgenland Messe Betriebsges.m.b.H. & Co. KG, promoting the Genuss Burgenland gourmet fair held in Oberwart, Austria. The site targets food enthusiasts, exhibitors, and visitors, providing event details, ticketing, exhibitor information, and newsletter subscriptions. The business operates in the hospitality sector with a focus on event management and promotion. The website content is well-structured and relevant, with good design and navigation, supporting a positive user experience.

Bibi Burgenland is a regional event website dedicated to the Bildungs- und Berufsinformationsmesse Burgenland, an education and career information fair held in Burgenland, Austria. The site provides comprehensive information for exhibitors, visitors, and offers online registration portals. The business operates under Burgenland Messe Betriebsges.m.b.H. & Co. KG and targets students, job seekers, and local businesses interested in education and career opportunities. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience.

Inform Oberwart is a regional event website promoting the 54th Inform Oberwart trade fair and family festival held in Oberwart, Austria. The site provides comprehensive information for visitors, exhibitors, and ticket buyers, positioning itself as a key regional event organizer under the Burgenland Messe Betriebsges.m.b.H. & Co. KG brand. The business targets families and local communities with a focus on event participation and visitor engagement. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI plugins, supported by Matomo and Open Web Analytics for user tracking with a compliant cookie consent mechanism. Security posture is moderate with no HTTPS status visible in the content but cookie consent and privacy policies are implemented. No advanced security policies or incident response contacts are found, indicating room for improvement in security governance. Overall, the website is professional, trustworthy, and well-structured, serving its purpose effectively with a good user experience and clear business credibility.

B

BitLab d.o.o.

eankete.com

45

eAnkete.com is a Serbian-based SaaS platform operated by BitLab d.o.o., specializing in creating customizable surveys, electronic forms, and tests. The platform targets businesses, educational institutions, and HR departments seeking efficient data collection and analysis tools. The website is professionally designed with a focus on usability and mobile responsiveness, supporting multiple languages relevant to the regional market. Technically, the site uses Bootstrap, jQuery, and Font Awesome, hosted on BitLab's infrastructure with HTTPS enabled but lacks DNSSEC and security headers. Security posture is moderate with no visible vulnerabilities but missing key policies such as privacy and cookie notices. Contact information is limited to social media and a contact/help page, with no direct emails or phone numbers disclosed. Overall, the domain registration is consistent with the business profile, indicating legitimacy and stable operation since 2015.

mojenovosti.com is a regional Serbian-language news portal established in 2013, focusing on Republika Srpska, Serbia, and the ex-Yugoslav region. It offers a broad range of news categories including politics, economy, culture, sports, and multimedia content. The site encourages user-generated content and provides advertising services, positioning itself as a small but active media outlet in its market niche. Technically, the website uses a custom CMS with common web technologies such as jQuery, Bootstrap, and Google Adsense for monetization. Hosting is provided by BitLab, a regional hosting provider, which aligns with the website's regional focus. Security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information is available but limited to basic email, phone, and physical address. Overall, the website is functional and professional but would benefit from enhanced security and privacy compliance measures.

H

Helaba Invest Kapitalanlagegesellschaft mbH

helaba-invest.de

64

Helaba Invest Kapitalanlagegesellschaft mbH is a well-established German institutional asset management company with over 30 years of experience. The company offers a comprehensive range of services including asset management, alternative investments, asset servicing, and master-KVG services, targeting institutional investors. The website reflects a professional and trustworthy brand with clear navigation and rich content tailored to its audience. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes SEO optimizations and cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

M

MicroMedia

microacademy.ba

49

MicroAcademy is an educational platform specializing in practical courses for design, marketing, and web development, backed by the experienced agency MicroMedia. The website positions itself as a practical academy offering mentorship, real project experience, and employment opportunities for top students, targeting individuals seeking career advancement in digital fields. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile devices, though performance is moderate. Security posture is solid with HTTPS and secure forms, but lacks advanced security headers and visible privacy compliance documentation. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security policies to improve compliance and user trust.

T

Ein Starterset für TYPO3 Entwickler: T3Bootstrap TYPO3 Template

t3bootstrap.de

9

The website t3bootstrap.de is a German-language platform offering a comprehensive TYPO3 CMS template based on Bootstrap, targeting TYPO3 developers and specialists. It positions itself as a specialist provider of TYPO3 templates, focusing on technical users who require a ready-to-use starter set for TYPO3 development. The business model revolves around providing templates and possibly related services for TYPO3 CMS users. The website content is professional and consistent with its niche, though it lacks detailed business and contact information on the homepage.

Burgenland Messe Betriebsges.m.b.H. & Co. KG operates a regional trade fair and exhibition center in Oberwart, Austria, focusing on events such as educational fairs, gourmet exhibitions, building trade shows, and emergency services expos. The website serves as an informational portal linking to partner event sites and providing contact details and company information. The target audience includes local residents, students, professionals, and enthusiasts interested in education, career development, gastronomy, construction, and emergency services within the Burgenland region. Technically, the website employs a standard modern stack including Bootstrap, jQuery, and popular UI plugins like Owl Carousel and Master Slider. The site is mobile optimized with a cookie consent mechanism compliant with GDPR. However, no advanced CMS or analytics tools are detected, indicating a straightforward, content-focused implementation. Performance is moderate with basic SEO and accessibility features. From a security perspective, the site uses HTTPS (assumed from domain and typical practice though SSL details not explicit), and implements cookie consent. However, no explicit security headers or incident response policies are publicly disclosed. No vulnerabilities or sensitive data exposures are evident. WHOIS data aligns well with the business claims, showing no privacy protection or suspicious registration patterns. Overall, the website is professional and trustworthy for its regional event business purpose. Strategic improvements could include enhanced security headers, public security policies, and more comprehensive privacy disclosures to strengthen compliance and trust.

B

BitLab

privreda.org

44

Privreda.org is a regional business portal focused on companies and entrepreneurs in Republika Srpska and the Federation of Bosnia and Herzegovina. Operated by BitLab, the portal provides a categorized business directory, promotional services including company web page creation, advertising on the portal and social media, and additional marketing and hosting services. The website is well-established with a domain age since 2002, indicating a stable market presence. The portal targets local businesses seeking increased visibility and digital presence within the regional market. Technically, the website uses a custom CMS with common web technologies such as jQuery, Bootstrap, Font Awesome, and Slider Revolution. Hosting is provided by BitLab, the same organization listed as the domain registrant, ensuring consistency. The site is moderately performant and mobile optimized, with basic SEO and accessibility features. Advertising is integrated via Google Adsense and Twitter widgets, with minimal user tracking. From a security perspective, the site uses HTTPS and secure form tokens but lacks advanced security headers and DNSSEC. No privacy, cookie, or terms of service policies are published, indicating gaps in compliance and transparency. Incident response and vulnerability disclosure information are absent. The WHOIS data aligns well with the website content and hosting, supporting legitimacy. Overall, the website is a functional and moderately professional business portal with good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

B

BitLab d.o.o.

eposao.info

48

ePosao.info is an established online job board platform founded in 2006, primarily serving the Balkan region including Bosnia and Herzegovina, Serbia, Croatia, and Montenegro. The platform facilitates job seekers and employers by providing job listings, candidate searches, and human resource management tools. The website is developed and hosted by BitLab d.o.o., a regional IT service provider. The platform targets a regional audience with multilingual support and a focus on quick and easy recruitment processes. Technically, the website uses a custom CMS with common web technologies such as jQuery, Bootstrap, and Font Awesome, but includes some outdated components like Flash-based upload plugins and older jQuery versions. Security posture is moderate with HTTPS enabled but lacking modern security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from modernization and improved compliance.

The website autoberza.biz serves as an informational platform focused on moving services, specifically targeting local and commercial moving needs in the New Rochelle, Scarsdale, and broader New York City area. It provides blog articles offering advice on selecting moving companies, planning moves, and the benefits of professional movers. The business model appears to be service information and lead generation for moving services, catering primarily to individuals and businesses planning relocations. The site is relatively new, with domain registration dating back to 2021, consistent with a small local service provider. Technically, the website is built on WordPress using the Sparkling theme, leveraging common web technologies such as jQuery, Bootstrap, and FontAwesome. Hosting is provided by Vultr, and the site uses HTTPS, ensuring basic transport security. Performance and mobile optimization are moderate to good, though accessibility and SEO optimizations are basic. The site lacks advanced security headers and DNSSEC, indicating room for improvement in security hardening. From a security perspective, the site has a basic security posture with HTTPS enabled but no additional security headers or published security policies. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies, contact information, and incident response details reduces compliance and trustworthiness. No analytics or tracking scripts were detected, suggesting minimal user tracking. The domain registration is privacy protected but uses a reputable registrar, with no suspicious patterns detected, supporting legitimacy. Overall, the website is functional and provides relevant content for its target audience but lacks critical compliance and security features. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security posture, supporting better business credibility and user confidence.

D

Delegation of the European Union to Bosnia and Herzegovina & European Union Special Representative in Bosnia and Herzegovina

europa.ba

72

The Delegation of the European Union to Bosnia and Herzegovina serves as the official representation of the EU in Bosnia and Herzegovina, providing comprehensive information on EU activities, projects, and policies in the country. The website is professionally designed, well-structured, and targets a broad audience including citizens, media, and stakeholders interested in EU-Bosnia relations. Technically, the site is built on Drupal 10 with modern web standards, ensuring good performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response details are not published. Privacy compliance is robust, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR. The domain is part of the official europa.eu space, managed by EU authorities, ensuring high legitimacy despite the absence of WHOIS details due to privacy policies. Overall, the site reflects a mature, trustworthy, and authoritative EU governmental presence in Bosnia and Herzegovina.

BitLab d.o.o. is a medium-sized technology company based in Bosnia and Herzegovina, specializing in IT solutions including web development, mobile applications, 3D visualization, hosting, e-commerce, and education. Established in 2014, the company has a solid market presence with over 500 completed projects and a diverse client base including government and educational institutions. Their business model focuses on providing comprehensive digital services and products to businesses and organizations in the region. Technically, the website demonstrates a modern technology stack with a variety of backend and frontend frameworks, CMS options, and integration of analytics and social sharing tools. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Hosting appears to be managed internally or through affiliated services, with DNSSEC enabled and SSL certificates in use, indicating a secure infrastructure. From a security perspective, the website benefits from HTTPS and DNSSEC but lacks visible security headers and formal security policies such as privacy or cookie policies. No forms or direct data collection mechanisms were detected in the provided content, reducing immediate risk exposure. However, the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR and similar regulations. Overall, BitLab d.o.o. presents a trustworthy and professional online presence with strong business credibility and technical implementation. To enhance security posture and compliance, the company should implement security headers, publish privacy and cookie policies, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory adherence.

S

Staples, Inc.

staplespromo.com

76

StaplesPromo.com is an enterprise-level e-commerce website operated by Staples, Inc., specializing in custom promotional products such as apparel, drinkware, tech accessories, and office essentials. The site targets businesses and organizations seeking branded merchandise to enhance their marketing efforts. It features a large catalog of over 4000 products and showcases trust signals including logos of major global brands. The business model is retail e-commerce with a focus on customization and branding services. The website is well-branded, professionally designed, and offers a seamless user experience with clear navigation and mobile optimization. Technically, the site leverages a modern tech stack including jQuery, Bootstrap, Dynamic Yield for personalization, Google Tag Manager, Adobe DTM, and TrustArc for consent management. It is hosted on a CDN infrastructure (Akamai) ensuring moderate performance and global reach. The platform used is Znode, a specialized e-commerce CMS. Accessibility is basic but functional, and SEO practices are good with proper meta tags and structured data. From a security perspective, the site enforces HTTPS, uses domain locking statuses to prevent unauthorized changes, and implements a consent management platform for GDPR compliance. A vulnerability disclosure policy is publicly available, indicating a mature security posture. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not found. No vulnerabilities or suspicious domains were detected. Overall, the website presents a low-risk profile with strong business credibility, good privacy compliance, and solid technical implementation. Recommendations include enabling DNSSEC, publishing explicit security policies, and enhancing accessibility compliance to further improve security and user trust.

NEŠKOVIĆ Group is a well-established company based in Bosnia and Herzegovina, specializing in the wholesale and retail of petroleum products, automotive sales and services, hospitality, and retail markets. The company operates multiple subsidiaries including insurance and auto centers, positioning itself as a regional leader with a broad service portfolio. The website reflects a professional digital presence built on WordPress with WooCommerce and other common plugins, offering a good user experience and clear business information. However, the technical infrastructure shows signs of aging with outdated WordPress versions and missing modern security headers. Security posture is moderate with HTTPS enforced but lacking comprehensive security policies or vulnerability disclosures. Privacy compliance is minimal, with no visible cookie consent or GDPR indicators. Overall, the website and business appear legitimate and trustworthy, but improvements in security and privacy compliance are recommended.

S

Satwork

satwork.net

57

Satwork is a well-established company founded in 2005 specializing in satellite vehicle tracking and fleet management services primarily in Bosnia and Herzegovina and the surrounding region. The company offers a comprehensive suite of GPS-based solutions including fuel consumption control, driver communication, route optimization, and digital tachograph data management. With subsidiaries in Serbia, Montenegro, and Austria, Satwork maintains a strong regional presence and is recognized as a market leader in its domain. The website reflects a professional and consistent brand image with detailed service descriptions and multiple contact points, supporting its credibility and customer engagement. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Font Awesome, and integrates analytics tools like Google Analytics and Google Tag Manager. The site is moderately optimized for performance and mobile devices, with good SEO practices evident. However, there is room for improvement in accessibility and security hardening, particularly by enabling DNSSEC, adding security headers, and publishing privacy and cookie policies. From a security perspective, Satwork demonstrates maturity by holding ISO 9001 and ISO/IEC 27001 certifications, indicating a commitment to quality management and information security. The website uses HTTPS for secure communications, especially on login forms, and implements user-friendly features like password visibility toggling. Nonetheless, the absence of explicit incident response contacts, vulnerability disclosure policies, and cookie consent mechanisms highlights areas for compliance enhancement. Overall, Satwork presents a trustworthy and professional online presence aligned with its business operations. The main risks relate to privacy compliance gaps and security header omissions, which should be addressed to strengthen user trust and regulatory adherence. Strategic improvements in these areas will enhance the company’s digital maturity and security posture, supporting sustained growth and customer confidence.

R

Red.es

nic.es

67

Dominios.es is the official Spanish government entity responsible for managing the registration of .es country code top-level domains. It operates under the umbrella of Red.es, a public enterprise of the Spanish government. The website provides comprehensive information and services related to domain registration, management, and security, targeting individuals, businesses, and authorized registrars. The entity holds recognized certifications such as ISO 9001, ISO 27001, and ENS, underscoring its commitment to quality and security. Technically, the site is built on Drupal 10 with modern web technologies and integrates Google Tag Manager and CookiesJSR for analytics and cookie management. The site is well-optimized for mobile and accessibility, with clear navigation and professional design.

Neue Messe Fulda GmbH operates as a regional event organizer and exhibition host based in Fulda, Germany. The company specializes in organizing trade fairs, public exhibitions, conferences, and congresses, providing a platform for businesses and visitors to connect. Their website reflects a professional and consistent brand image, targeting event organizers, exhibitors, and attendees interested in specialized trade fairs and public events. The business model centers on event management and exhibition services, positioning Neue Messe Fulda as a key player in the regional events market. Technically, the website is built on the Odoo CMS platform, utilizing modern frontend technologies such as Bootstrap and jQuery, with integrations like LightGallery for media display and Google Analytics for visitor tracking. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS with a valid SSL configuration and a cookie consent mechanism, although some security headers are missing and no explicit security policies are published. From a security perspective, the site demonstrates a reasonable posture with encrypted communications and CSRF token usage. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. No critical vulnerabilities or suspicious content were detected. Privacy compliance is basic but present, with GDPR-aligned cookie consent and a privacy policy page. Overall, the website is trustworthy, professionally maintained, and suitable for its business purpose. Strategic enhancements in security transparency and policy publication would further strengthen its compliance and trustworthiness.

А

Агенција за безбједност саобраћаја Републике Српске

bslzrs.org

44

The website bslzrs.org represents the Agency for Traffic Safety of Republika Srpska, Bosnia and Herzegovina. It primarily serves as an informational platform for the XIV International Conference on Traffic Safety in Local Communities, providing detailed content about traffic safety statistics, conference agenda, speakers, thematic areas, and organizational committees. The agency operates as a governmental and non-profit entity focused on improving traffic safety through research, awareness, and collaboration with regional and international partners. The website targets professionals, researchers, and government officials involved in traffic safety and local community development. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, Slick Carousel, and Google Maps API integration. It is hosted on Bitlab Hosting and demonstrates moderate performance with good mobile optimization. However, accessibility and SEO optimizations are basic, and no CMS or advanced platforms are detected. The site lacks analytics and tracking scripts, indicating minimal user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, which is a compliance gap. The WHOIS data shows privacy protection and a recent domain registration date, which is somewhat inconsistent with the historical content but not necessarily suspicious. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website is professional and trustworthy with good content quality and business credibility. However, it requires improvements in privacy compliance, security headers, and transparency to enhance its security posture and regulatory adherence.

G

Getlink

getlink.space

56

Getlink.space is a newly launched (June 2024) online URL shortening service offering free and customizable short links with analytics and link management features. The service targets general internet users, businesses, and influencers seeking to simplify link sharing and track link performance. The website is built using modern web technologies including SvelteKit and Bootstrap, hosted with Cloudflare DNS and protected by privacy-protected domain registration. The site is mobile optimized and provides a good user experience with clear navigation and multi-language support. Security posture is moderate with HTTPS enforced and anti-bot CAPTCHA on forms, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism despite use of Google Adsense and Tag Manager. No direct company contact emails or phone numbers are provided, only a contact form. Overall, the site is functional and trustworthy but could improve in security and privacy transparency.

The website 'Hadž i umra BiH – Ured za hadž i umru' serves as the official governmental portal for organizing and providing information about Hadž and Umra pilgrimages for citizens of Bosnia and Herzegovina. It offers news, guidelines, and organizational details relevant to pilgrims, positioning itself as the authoritative source in this religious sector within the country. The site targets the Bosnian Muslim community and operates under a governmental/non-profit business model, emphasizing service and information dissemination. Technically, the website is built on WordPress 6.8.2, utilizing common plugins such as WPBakery Page Builder, Everest Forms, Contact Form 7, and Google reCAPTCHA v3 for form security. The design is modern and mobile-optimized, with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in hosting and optimization. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak, with no visible privacy or cookie policies, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and professional, with a high business credibility score but moderate security and privacy compliance scores. Strategic improvements in privacy policy publication, security header implementation, and accessibility would enhance its security posture and compliance standing.

P

Promotim d.o.o.

promotim.ba

44

Promotim d.o.o. is a Bosnian technology company specializing in innovative web development and online marketing solutions since 2003. The company offers a range of services including web development, e-commerce platforms, web applications, and social media marketing, supported by their proprietary CMS platform PromoCMS. Their market position is strong locally with a portfolio of notable clients including news agencies and government entities. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics for tracking. However, the site lacks published privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS implied but no visible security headers or incident response information. Overall, the website is professional and well-structured but could improve in privacy and security transparency.

HERDT-Verlag für Bildungsmedien GmbH operates HERDT|Campus, a digital educational media platform targeting academic institutions in Germany. The platform restricts access to authorized university networks, providing exclusive learning content for research and teaching. The company has a stable market position as a niche provider of digital educational resources, founded in 2013 and maintaining consistent branding and contact transparency. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and the Yii framework, with Cloudflare DNS services enhancing infrastructure reliability. However, the site shows basic SEO and accessibility features and lacks visible advanced security headers or cookie consent mechanisms. Security posture is moderate, with domain registration and DNS configurations indicating legitimacy but missing DNSSEC and security policy disclosures. Overall, the site is safe, professional, and targeted at a general academic audience, but improvements in privacy compliance and security best practices are recommended.

UniCredit Bank Bosnia and Herzegovina operates a professional and comprehensive retail banking website offering a wide range of financial products including loans, savings, digital banking, and insurance. The bank is part of the UniCredit Group, a well-established international banking group, which is reflected in consistent branding and domain registration data. The website demonstrates a mature digital infrastructure with modern technologies such as Adobe Experience Manager CMS, Adobe Analytics, and Tealium tag management, supporting a good user experience and mobile optimization. Security measures include HTTPS enforcement and Content Security Policy headers, although some improvements in header strictness are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and includes multiple channels such as phone, email, and online forms. Overall, the website is trustworthy, professionally maintained, and suitable for general audiences.