Security Directory

R

Rooomer

rooomer.com

44

Rooomer is a small business focused on providing online reputation management, independent review platform services via MeetingReview, and business consultancy primarily targeting entrepreneurs and business owners. The website content is minimal and primarily in Dutch, with basic navigation and branding consistency. The technical infrastructure uses Bootstrap and jQuery, hosted by Argeweb Hosting, with Google reCAPTCHA implemented for bot protection. However, there is no evidence of advanced CMS or analytics platforms. Security posture is basic, lacking DNSSEC, security headers, and visible HTTPS enforcement. No privacy or cookie policies are present, indicating low privacy compliance. The domain is well-established since 2011, consistent with the business age and services offered, and registered with Tucows Domains Inc. Overall, the website is functional but lacks comprehensive security and privacy features, limiting trust and compliance levels.

A

algoo

galae.net

62

Galae is a French-based email service provider offering high deliverability, unlimited email addresses and domains, and advanced configuration options. The service is positioned as an ethical, GDPR-compliant alternative focused on autonomy and sovereignty, leveraging open source software and hosted exclusively in France. The business is relatively new, founded in 2023, and operated by the parent company algoo. The website presents a professional image with clear pricing, client testimonials, and a community support platform. Technically, the site uses modern web technologies including Bootstrap and Matomo analytics, with hosting provided by Scaleway SAS. Security practices include support for email authentication standards (DKIM, SPF, DMARC) and data redundancy, but lack visible security headers and explicit incident response information. Privacy compliance is partially demonstrated but lacks explicit privacy and cookie policies on the site. Overall, galae demonstrates a solid business and technical foundation with room for improvement in security transparency and privacy disclosures.

A

Algoo

tracim.fr

60

Tracim is a French-based collaborative software platform developed and maintained by Algoo since 2014. It offers a comprehensive team communication and collaboration solution designed for asynchronous work, targeting organizations such as enterprises, associations, and educational institutions. The platform emphasizes open source principles, ethical data handling, and user sovereignty. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, Swiper.js, and Matomo analytics, hosted on ScaleWay infrastructure. The site is mobile-optimized and provides a professional user experience with clear navigation and rich content. Security posture is strong with HTTPS enforced, CSRF protection on forms, and domain registration consistent with business claims. However, explicit cookie consent mechanisms and published security policies are lacking, representing areas for improvement. Overall, Tracim presents a trustworthy and mature digital presence with a solid foundation for growth and compliance.

U

Uitjes.nl

uitjes.nl

52

Uitjes.nl is a well-established Dutch online platform founded in 1999, specializing in providing inspiration and listings for leisure activities and day trips across the Netherlands and Belgium. The platform caters to a broad audience including families, friends, and corporate groups, offering a wide range of activities such as sports, cultural events, and special outings. It features user reviews, promotional offers, and a reservation/payment system to facilitate bookings. Technically, the website employs modern web technologies including Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA, ensuring a functional and moderately optimized user experience with good mobile responsiveness. Security-wise, the site benefits from HTTPS, DNSSEC, and reCAPTCHA integration, but lacks visible security headers and published security policies, indicating room for improvement in security transparency and defense-in-depth. Overall, the domain's WHOIS data confirms a long-standing and legitimate presence, supporting the platform's credibility and trustworthiness.

A

Algoo

algoo.fr

10

Algoo is a French technology company specializing in open source software deployment, integration, and IT infrastructure management, particularly focused on Linux environments and collaboration tools. The company offers key services including the Tracim collaboration platform, Galae interoperable email service, IT infrastructure management, custom software development, and hardware sales. Positioned as a niche specialist in the French market, Algoo targets organizations seeking sustainable and sovereign open source solutions. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Matomo analytics, ensuring good mobile optimization and user experience. The site uses HTTPS with secure form submission practices, though lacks some advanced security headers. Analytics usage is privacy-conscious with Matomo, but cookie consent mechanisms are not evident, which may affect GDPR compliance. The WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information support legitimacy. Security posture is solid with encrypted communications and secure forms, but could be improved by adding security headers and publishing explicit security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is safe, professional, and trustworthy, with minor areas for compliance and security enhancement.

Inštitut Digitas is a Slovenian institute specializing in digital accessibility, providing services such as planning, assessments, training, and remote sign language interpreting. The organization targets companies and institutions aiming to comply with accessibility laws and foster inclusive digital environments. The website is built on WordPress with Elementor and Bootstrap, reflecting a modern and accessible technical infrastructure. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website presents a professional and trustworthy image with clear business focus and consistent branding.

F

Forward Slope

forwardslope.com

42

Forward Slope operates a professional website built on Drupal 8, featuring a consistent and modern design with integration of popular front-end libraries and Google Analytics for user tracking. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. The website lacks explicit business descriptions, contact information, and privacy or terms of service policies, which limits transparency and trust. Technically, the site is moderately optimized for mobile and performance but could benefit from enhanced security headers and privacy compliance measures. Overall, the security posture is average with room for improvement in policy disclosures and incident response readiness.

M

MiXiT

mixitconf.org

57

MiXiT is a specialized technology conference based in Lyon, France, focusing on ethics, diversity, and social responsibility within the tech industry. Founded in 2017, it hosts annual events featuring speakers, workshops, and sessions that engage developers, designers, and product managers. The conference emphasizes accessibility, safe environments, and eco-friendly practices, supported by a community-driven approach and sponsorships from notable companies. The website serves as an information hub for event details, ticketing, and multimedia content including podcasts and videos. Technically, the site uses modern web standards with Bootstrap and JavaScript, hosted by OVH sas, a reputable French provider. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. Overall, the site is professional and trustworthy but could enhance its security posture and compliance transparency.

S

Spelbolag Utan Svensk Licens

spelbolagutansvensklicens.co

52

Spelbolag Utan Svensk Licens operates a Swedish-language affiliate and informational website focused on betting and casino sites without a Swedish license. The site provides detailed reviews, comparisons, and guides to help Swedish bettors access international betting platforms that do not fall under Swedish regulatory restrictions. The business model centers on affiliate marketing and content provision, targeting a niche audience interested in broader betting options and fewer restrictions. Technically, the website is built on WordPress with common SEO and cookie consent plugins, leveraging Bootstrap and jQuery for frontend functionality. It uses Google Analytics and Tag Manager for visitor tracking and performance analysis. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. No signs of WAF or content blocking were detected, and the domain registration uses privacy protection typical for affiliate sites. Overall, the site is professionally designed, mobile-optimized, and provides relevant content with moderate trustworthiness. However, it lacks visible contact information and formal privacy or terms of service pages, which could be improved for better compliance and user trust.

C

captain-caz.net

captaincaz.org

59

Captain-caz.net is a French-language online casino review and affiliate marketing website launched in 2023. It targets French-speaking adult users interested in online gambling by providing casino reviews, bonus offers, and comparisons. The website positions itself as a top resource for reliable online casinos in 2025. Technically, the site is built on WordPress using Bootstrap and jQuery, with integrations for Google Tag Manager and Visual Website Optimizer for analytics and marketing. The hosting provider is not explicitly identified but DNS is managed via Cloudflare, enhancing DNS reliability and security. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. The site uses tracking and marketing tools that imply moderate user tracking. Overall, the website is professional and functional but would benefit from improved privacy and security practices.

MaxMind, Inc. is a well-established technology company specializing in IP geolocation, fraud prevention, and proxy detection services for online businesses. The company is recognized as the creator of GeoIP technology and serves over 100,000 businesses worldwide, offering scalable and customizable solutions powered by machine learning. Their business model focuses on B2B SaaS and data services with flexible pricing and free trials, targeting enterprises, SMBs, developers, and partners. Technically, the website demonstrates a mature digital infrastructure using modern technologies such as Google Tag Manager, HubSpot CMS and forms, Bootstrap framework, and Google Fonts. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices and structured navigation. Security measures include HTTPS enforcement, use of reCAPTCHA, and script nonce attributes, although explicit security headers and vulnerability disclosure mechanisms could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, GDPR compliance indicators, and user consent mechanisms. Contact information is primarily via contact forms, with no direct emails or phone numbers publicly listed. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract from the company's legitimacy given its market presence. Overall, MaxMind presents a professional, trustworthy, and technically sound online presence with strong business credibility and compliance. Strategic improvements could focus on enhancing security headers, publishing a security.txt file, and providing clearer incident response contacts to further strengthen trust and security culture.

C

Conférence des évêques suisses

eveques.ch

44

The website www.eveques.ch serves as the official digital presence of the Swiss Bishops' Conference, providing comprehensive information about the Catholic Church's activities, leadership, and societal engagement in Switzerland. It targets French-speaking Swiss Catholics and the broader public interested in religious affairs. The site offers news updates, document archives, and communication channels, positioning itself as a trusted institutional resource within the religious sector. Technically, the website is built on WordPress 6.6.2, leveraging popular plugins such as Contact Form 7 and Bootstrap for responsive design. The infrastructure supports moderate performance and good mobile optimization, with a clear navigation structure and professional design. Analytics are implemented via Google Tag Manager, indicating a moderate level of user tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several important security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. There is no visible incident response or vulnerability disclosure information, and cookie consent mechanisms are absent, which may affect full GDPR compliance. Overall, the website demonstrates a solid business credibility and trustworthy presence with room for improvement in security hardening and privacy compliance. Strategic enhancements in these areas would strengthen the site's resilience and user trust.

D

Diocèse de Lausanne, Genève et Fribourg

diocese-lgf.ch

48

The Diocese of Lausanne, Geneva and Fribourg operates an official website serving the Catholic community across multiple Swiss cantons. The site provides comprehensive information on sacraments, pastoral activities, community groups, formation, news, and practical resources such as mass schedules and contact directories. It targets parishioners and the general public interested in diocesan affairs. Technically, the website is built on WordPress with Elementor and Bootstrap, leveraging modern CSS frameworks like Tailwind and standard JavaScript libraries such as jQuery. The site demonstrates moderate performance and good mobile optimization, with a clear and professional design. Security posture is strong with HTTPS enforced and multiple security headers present, alongside indications of Wordfence security plugin usage. However, the site lacks visible cookie consent mechanisms and formal security or incident response policies, which are recommended for compliance and transparency. Overall, the domain registration and WHOIS data align well with the website's claims, supporting high legitimacy and trustworthiness.

L

La Doc - Librairie et médiathèque

catedoc.ch

50

La Doc - Librairie et médiathèque is a small, local library and bookstore service based in Fribourg, Switzerland, specializing in religious and liturgical materials. The website provides access to thematic collections aligned with liturgical seasons and offers user account management for borrowing and searching resources. The business appears community-focused with a clear target audience interested in religious education and media. Technically, the site uses a modern web stack including Bootstrap, jQuery, and Google Fonts, running on the NetBiblio WebOPAC platform. While the site is functional and well-structured, mobile optimization and accessibility are basic. Security posture is moderate with HTTPS enabled but lacking important security headers and anti-CSRF protections. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the site content and contact information support legitimacy. Overall, the site is suitable for its educational purpose but requires improvements in security and privacy transparency.

Spojené nástroje elektronické s.r.o. is a small Czech technology company specializing in electronic public procurement solutions. The company operates a platform aggregating public tenders in the Czech Republic, notably through the portal FEN.cz, and collaborates with government ministries on digitalization projects. Their market position is important within the Czech public procurement sector, serving businesses and public entities involved in tenders. The website reflects a professional business presence with clear contact information and a focused description of their services. Technically, the website uses a modern but basic technology stack including Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The site is moderately performant and mobile-optimized but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident. The absence of analytics and tracking scripts suggests minimal user tracking. From a security perspective, the site lacks visible security headers, privacy and cookie policies, and incident response information. HTTPS status is unknown from the data but should be verified. No forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the security posture is basic and could be improved with standard best practices. The overall risk is moderate with no critical vulnerabilities detected but notable gaps in privacy compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enforcing HTTPS, and publishing incident response contacts to enhance trust and compliance.

M

Mediamatis

mediamatis.com

56

Mediamatis is a French technology company specializing in information technologies and services, operating as the technological structure of Groupe Ficade. Their offerings include software development, mobile and web applications, audiovisual services, graphic design, and event management. The website is built on Joomla CMS with a responsive design using Bootstrap and T3 framework, indicating a moderate level of digital maturity. Tracking tools such as Google Analytics and Tag Manager are implemented, but no visible privacy or cookie policies are present, which is a compliance gap. Security posture is basic with HTTPS implied but lacking DNSSEC and security headers. The domain is well-established since 2009 and registered via Cloudflare, showing legitimacy and stability.

É

Église catholique – Fribourg

formulejeunes.ch

44

The website represents the official online presence of the Catholic Church in the canton of Fribourg, Switzerland. It serves as a regional religious authority providing pastoral services, community information, event announcements, and private member spaces. The organization targets the local Catholic community and the general public interested in church activities. The business model is non-profit and community service oriented, with a medium-sized organizational footprint. The website branding is consistent and professional, supporting trust and engagement.

F

framasoft.org

yakforms.org

58

Yakforms is an open-source software project developed and maintained by the French non-profit organization Framasoft. It provides users with a privacy-respecting alternative to proprietary online form builders, enabling easy creation, customization, sharing, and analysis of forms. The platform targets individuals, organizations, and administrations seeking control over their data and form management. The website is professionally designed, mobile-optimized, and uses modern web technologies including Bootstrap and jQuery, with Pelican as the static site generator. Hosting is provided by Gandi SAS, a reputable registrar and hosting provider. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and security headers are missing. Privacy compliance is moderate, with a privacy policy present but no cookie consent mechanism detected. No direct contact information or incident response details are provided on the site, which could be improved to enhance trust. Overall, the site is trustworthy, well-maintained, and serves a niche market in the open-source software domain.

S

Software Freedom Conservancy

fossy.us

53

The website 2025.fossy.us represents the FOSSY 2025 conference, a community-oriented event focused on free and open source software, hosted by the Software Freedom Conservancy. The event is scheduled for July 31st to August 3rd, 2025, at Portland State University. The site provides information about the conference, registration, sponsorship, and related logistics, targeting open source contributors and enthusiasts. The business model is non-profit and community-driven, with a clear focus on fostering open source software development and collaboration. Technically, the website uses a modern but straightforward tech stack including Bootstrap, jQuery, FontAwesome, and Tachyons CSS. The site is mobile-optimized with good navigation and professional design. External resources are loaded from reputable CDNs, and no major performance or accessibility issues are evident. However, some improvements could be made in accessibility and SEO optimization. From a security perspective, the site uses HTTPS (implied by the URL), but no explicit security headers were detected in the provided data. There is no visible security.txt or incident response contact information. The WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this type of non-profit event. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism on the site. Overall, the website is trustworthy and professionally presented, with a moderate to good security posture and privacy compliance. Recommendations include adding security headers, implementing cookie consent, and publishing vulnerability disclosure information to enhance trust and compliance.

Outreachy is a non-profit internship program focused on increasing diversity in the technology sector by providing paid, remote internships in free and open source software to individuals from underrepresented groups worldwide. The program is supported by sponsorships and donations and is affiliated with the Software Freedom Conservancy. The website clearly communicates its mission, internship details, and community engagement opportunities, targeting diverse applicants and mentors globally. Technically, the website is built on a modern stack including Django, Wagtail CMS, and Bootstrap, with client-side libraries such as jQuery and Popper.js. The site is mobile-optimized and presents good SEO and accessibility basics, although some improvements could be made in accessibility and performance tuning. Hosting appears to be managed via Dokku, indicating a self-hosted or PaaS environment. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries in the HTML content. However, security headers are not detected, and there is no visible security policy or incident response contact information. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism. WHOIS data is incomplete, which slightly reduces domain trustworthiness, but the website's professional presentation and association with a reputable parent organization mitigate concerns. Overall, Outreachy presents a trustworthy, professional, and mission-driven online presence with moderate technical maturity and a solid security baseline. Strategic improvements in security headers, privacy consent, and WHOIS transparency would enhance trust and compliance.

C

CleverDesign - CorchiaWolinerRhoda

cleverdesign.com

45

CleverDesign - CorchiaWolinerRhoda is a well-established boutique web and graphic design firm based in New York City, founded in 1980. The company specializes in mobile-friendly website development, logo creation, pitchbook templates, email campaigns, and marketing materials primarily serving clients in private equity, investment banking, hedge funds, and energy sectors. Their market position is strong within their niche, supported by a long domain age and a professional portfolio showcasing reputable clients. Technically, the website uses a modern tech stack including Bootstrap and jQuery, hosted on Winhost, with a custom CMS to empower clients to manage content without coding knowledge. The site is mobile-optimized and well-structured, though performance is moderate and accessibility is basic. Security posture is moderate; while the domain has transfer protection, DNSSEC is not enabled and no security headers were detected. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility.

IX.br is a key Brazilian Internet Exchange Point operator managed by NIC.br, providing critical infrastructure that enables direct interconnection between Autonomous Systems to optimize Internet traffic flow within Brazil. The website reflects a mature organization with a clear focus on technology and telecommunications sectors, offering services such as traffic aggregation, educational events, and security best practices. The site is well-structured, professionally designed, and targets network operators and Internet service providers in Brazil. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and SweetAlert2, and employs Matomo for analytics, indicating a moderate level of digital maturity and privacy awareness. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and implementing cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high legitimacy and trustworthiness.

A

AO Swag

goviksshop.com

61

The website goviksshop.merchorders.com serves as an official e-commerce platform for Portland State University branded merchandise, operated by AO Swag. It offers a variety of apparel, drinkware, and accessories targeting students, staff, and fans of the university. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized business model focused on licensed university retail. Technically, the site leverages modern frameworks such as Bootstrap and jQuery, integrates Google Analytics for user tracking, and employs Google reCAPTCHA to protect forms from abuse. Mobile optimization and accessibility features are well implemented, enhancing user experience across devices. Security posture is moderate; while HTTPS is implied and reCAPTCHA is used, the absence of key security headers and explicit cookie consent mechanisms suggests room for improvement. The WHOIS data for the subdomain is unavailable, which is typical for subdomains but slightly reduces trustworthiness. Overall, the site is safe, trustworthy, and compliant with basic privacy policies, serving its niche audience effectively.

A

Afriregister Tchad

afriregister.td

44

Afriregister Tchad operates as a regional domain registrar and web hosting provider primarily serving customers in Chad and other African countries. The company offers a range of services including domain registration across multiple ccTLDs and gTLDs, various hosting plans (Lite, Main, Reseller, VPS), SSL certificates, and customer support via chat and ticketing. The website is professionally designed, mobile-optimized, and includes clear navigation and contact information, supporting a positive user experience. The presence of ICANN accreditation logos adds trustworthiness to the business claims. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google reCAPTCHA for bot protection, and Mibew chat for live support. The site uses HTTPS, ensuring encrypted communications, but lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security hardening. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy and requires further verification. Security posture is moderate with good SSL configuration and secure form handling via reCAPTCHA, but the absence of published security policies and incident response information limits transparency. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website is safe, business-focused, and free of adult or questionable content. The risk assessment highlights the need to address WHOIS transparency, implement cookie consent for GDPR compliance, and enhance security headers. Strategic improvements in these areas will strengthen trust and compliance, supporting Afriregister Tchad's position as a reliable regional domain and hosting provider.

A

Afriregister Ltd

afriregister.rw

50

Afriregister Rwanda is a specialized domain registrar and web hosting service provider focused on African ccTLDs and generic TLDs. Established in 2013 and ICANN accredited, the company offers domain registration, various hosting plans, SSL certificates, and customer support primarily targeting businesses and individuals in Rwanda and the broader African region. The website demonstrates a consistent brand presence with clear service offerings and regional targeting through multiple country-specific portals. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google reCAPTCHA to secure forms. The site is mobile responsive and provides a good user experience with clear navigation and professional design. However, there is room for improvement in accessibility and SEO optimization. The hosting provider is not explicitly stated, but the infrastructure appears stable with moderate performance. From a security perspective, the site enforces HTTPS and integrates reCAPTCHA to mitigate automated abuse. Nonetheless, it lacks important security headers such as Content-Security-Policy and Strict-Transport-Security, which are recommended to enhance protection against common web attacks. The absence of a cookie consent mechanism also indicates partial privacy compliance, potentially impacting GDPR adherence. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no suspicious registration patterns. Overall, Afriregister Rwanda presents a trustworthy and professional online presence with a solid business model in the domain registration and hosting sector. Strategic improvements in security headers, privacy compliance, and accessibility would further strengthen its digital maturity and customer trust.

V

Verband Forschender Arzneimittelhersteller (vfa)

vfa-patientenportal.de

62

The vfa-Patientenportal is a German healthcare information portal operated by the Verband Forschender Arzneimittelhersteller (vfa), focusing on patient education, health topics, and fostering discourse on pharmaceutical and medical issues. The site targets patients, caregivers, and health-interested individuals in Germany, providing expert interviews, thematic articles, and a patient advisory board. Technically, the site uses modern web technologies including Bootstrap and jQuery, with Google Tag Manager for analytics. It is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enforced but lacks some security headers and explicit privacy and cookie policies. No direct contact emails or phone numbers are exposed, only a contact form is available. WHOIS data is minimal but consistent with the site's German healthcare focus. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

A

AFRIREGISTER S.A.

afriregister.com

52

Afriregister S.A. is a specialized domain registrar and web hosting provider established in 2006, focusing on African country code top-level domains (ccTLDs) and generic TLDs. The company offers a range of services including domain registration, transfers, multiple hosting plans, SSL certificates, and customer support. Their market position is that of a regional expert catering to businesses and individuals seeking domain and hosting services in Africa. The website is professionally designed with clear navigation and consistent branding, supporting a good user experience.

F

Floatleft

floatleft.org

64

Floatleft is a specialized nonprofit website development company focusing on Drupal and WordPress platforms. Established in 2004, it serves nonprofit organizations primarily in the United States, offering tailored web development services to meet the unique needs of the nonprofit sector. The company positions itself as a niche provider with expertise in nonprofit digital presence and SEO optimization, leveraging tools like Yoast SEO and Google Analytics to enhance client websites. Technically, the website is built on WordPress, hosted on Pantheon, and uses Cloudflare DNS services. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security-wise, the site uses HTTPS with domain status protections but lacks DNSSEC and security headers, indicating room for improvement in domain and web security practices. Privacy compliance is weak, with no visible privacy or cookie policies and no GDPR compliance indicators. Contact information is not explicitly provided, which may affect user trust and compliance. Overall, the website is professional and safe, but enhancements in privacy, security policies, and contact transparency are recommended.

Linux Day 2025 is a well-established annual event organized by the Italian Linux Society, focusing on free software, open source, and Linux community engagement across Italy. The website serves as an information hub for the event, promoting decentralized volunteer-driven activities and providing resources for organizers and participants. The site is professionally designed with consistent branding and clear navigation, targeting technology enthusiasts and the broader free software community in Italy. Technically, the website employs modern web technologies including Bootstrap, jQuery, Leaflet.js for mapping, and Matomo for privacy-conscious analytics. The site is mobile responsive and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some advanced security headers and formal incident response disclosures. From a security and compliance perspective, the site does not display explicit privacy or cookie policies on the analyzed page, which is a gap in GDPR compliance. Contact information is limited to an email address in metadata, with no phone or physical address provided. No vulnerability disclosure or security.txt files were found, indicating an opportunity to enhance transparency and incident handling readiness. Overall, Linux Day 2025's website is trustworthy and credible, reflecting a mature community-driven initiative with strong technical foundations but with some compliance and security best practice improvements recommended to further strengthen user trust and legal adherence.

T

Telesoft Project

telesoft.bg

50

Telesoft Project is a Bulgaria-based software development company specializing in bespoke software and web applications tailored to client needs globally. Their offerings include custom software development, business software integration, software testing, quality assurance, and web design services. The company targets businesses requiring tailored IT solutions and positions itself as a niche regional provider with international reach. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized with good design and navigation but lacks advanced accessibility features. Security posture is moderate; while no critical vulnerabilities are evident, the absence of HTTPS confirmation and security headers suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent with the business location, though WHOIS data is limited by GDPR privacy restrictions. Strategic recommendations include enhancing security headers, implementing HTTPS, publishing privacy policies, and improving accessibility to strengthen trust and compliance.

W

Wilk Elektronik S.A.

goodram.com

51

Wilk Elektronik S.A., operating under the GOODRAM brand, is a Polish manufacturer specializing in computer memory products including DRAM modules, SSDs, USB drives, and flash cards. The company targets consumer, industrial, and server markets with a diversified product portfolio and maintains a strong brand presence supported by ISO 14001 environmental certification. The website is professionally designed, multilingual, and provides comprehensive product information and corporate content. Technically, the site is built on WordPress using modern libraries such as jQuery, Bootstrap, and Owl Carousel, with Google reCAPTCHA v3 implemented for form security. Privacy and cookie policies are detailed and GDPR compliant, reflecting a mature approach to data protection. Security posture is generally strong with HTTPS enforced and secure form handling, though the absence of explicit security headers suggests room for improvement. The lack of WHOIS data for the domain reduces transparency but does not detract significantly from the site's legitimacy given the consistent branding and external social media presence. Overall, the website demonstrates a solid digital maturity with good user experience and compliance practices.

P

PoiData

poidata.xyz

58

PoiData is a Canadian-based technology company specializing in providing comprehensive global Point of Interest (POI) data. Their service includes continuously updated, high-density datasets with geocoded addresses, categories, and contact information, offered under flexible perpetual licenses and subscription models. The company positions itself as a leader in fresh and customizable POI data, targeting businesses and organizations requiring accurate geospatial data worldwide. Technically, the website employs modern front-end technologies such as Bootstrap and jQuery, hosted via Cloudflare, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, though improvements in security and privacy transparency are recommended.

V

vpsFree.cz z.s.

vpsfree.cz

48

vpsFree.cz is a Czech non-profit community association providing virtual private servers (VPS) to its members since 2009. The organization offers VPS hosting with defined parameters such as 4 GB RAM, 120 GB disk space, and 8 CPU cores, targeting individuals and organizations seeking affordable and community-driven VPS solutions. The website reflects a small-sized, technology-focused entity with a clear non-commercial business model and a strong community orientation. Technically, the site uses Bootstrap and jQuery frameworks, integrates Google Analytics and Piwik for tracking, and is hosted by MasterDC. The website is mobile-optimized with good navigation and content relevance but lacks some accessibility features. Security posture is moderate with HTTPS usage implied but missing explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data supports the legitimacy and long-term operation of the business.

C

Commune de Villars-sur-Glâne

villars-sur-glane.ch

55

The website www.villars-sur-glane.ch serves as the official digital presence of the Commune de Villars-sur-Glâne, a local government entity in Switzerland. It provides residents and visitors with access to municipal services, news, event information, and administrative resources. The site targets local community members, including families, seniors, and general residents, offering a comprehensive portal for civic engagement and information dissemination. The business model is public service-oriented, focusing on transparency and community support. Technically, the website is built on a modern WordPress CMS platform using Elementor for page building, integrating privacy-conscious analytics via Matomo and leveraging open-source mapping tools like Leaflet. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search visibility. Performance is moderate, with room for improvement in security headers and accessibility features. From a security standpoint, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. However, it lacks explicit privacy and security policies, and no advanced security headers were detected in the provided data. There is no visible vulnerability disclosure or incident response information, which are recommended for enhancing trust and compliance. Overall, the website is a trustworthy and professional government portal with solid business credibility and technical implementation. Strategic improvements in security policies, header configurations, and privacy documentation would further strengthen its posture and user trust.

R

Repaircafe

repaircafe.org

63

Repair Café is a global community-driven initiative focused on promoting the culture of repair to foster sustainability and reduce waste. The website serves as a platform to connect volunteers and participants worldwide to organize and attend repair events. The organization positions itself as a non-profit with a medium-sized global reach, emphasizing community engagement and environmental responsibility. Technically, the website is built on WordPress using modern plugins such as BuddyPress and Events Manager, with additional technologies like Vue.js and Algolia for enhanced user experience. The site is well-optimized for SEO and mobile devices, though some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses a cookie consent mechanism but lacks some security headers and explicit privacy and terms of service documentation. Overall, the site is trustworthy and professional, though it would benefit from enhanced privacy compliance and security best practices.

T

The C Plus Plus Alliance, Inc.

cppalliance.org

54

The C++ Alliance is a US-based non-profit organization founded in 2017 dedicated to supporting the evolution of the C++ programming language. It focuses on funding educational resources, maintaining open source C++ libraries, fostering a vibrant community, and promoting contributions to C++ standards. The organization is funded by a private endowment and does not currently accept public donations or sponsorships. The website presents a professional and consistent brand image with clear information about its mission, team, activities, and news updates. Technically, the website is built using modern web technologies including Jekyll as a static site generator, Bootstrap for styling, and integrates analytics tools such as Google Analytics and Plausible. It is hosted with DNS services via Cloudflare and registered through GoDaddy with privacy protection. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features and security headers. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized changes. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and cookie consent banners, which are important for compliance and user trust. No critical vulnerabilities or suspicious content were detected. WHOIS data aligns with the organization's profile, showing a legitimate and appropriately aged domain. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security headers, and transparency around data protection policies to improve its security posture and user trust.

Ecere Corporation is a Canadian-based small technology company specializing in high-performance geospatial visualization software, including the GNOSIS SDK, Cartographer, and Map Server products. Founded in 2005 and incorporated in Gatineau, Québec, the company offers software licensing, training, support, and custom solution development primarily targeting developers and organizations requiring advanced GIS visualization capabilities. Their market position is that of a niche provider with a focus on open-source and cross-platform technologies. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Font Awesome, and animation libraries, providing a good user experience with responsive design and clear navigation. However, there is no evidence of advanced CMS or hosting details. Performance is moderate with no major issues detected. SEO and accessibility are basic but adequate for the site’s scope. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled on the domain. The domain is protected with clientTransferProhibited status and privacy protection on WHOIS, which is justified for a small private company. No privacy, cookie, or incident response policies are published, indicating compliance gaps. No WAF or blocking mechanisms were detected, and no analytics or tracking scripts are present, suggesting minimal user tracking. Overall, the website is professional and trustworthy with moderate security posture and compliance. The main risks relate to missing privacy and security policies and lack of advanced security headers. Strategic improvements in these areas would enhance trust and compliance.

T

Transmission

transmissionbt.com

64

Transmission is an established open source BitTorrent client project founded in 2007, offering fast, lightweight, and native applications for macOS, Windows, Linux, and Unix platforms. The website serves as a distribution and community hub, providing downloads, add-ons, and links to GitHub and forums. The business model is volunteer-based and focused on privacy, with no advertising or tracking. Technically, the site uses modern front-end frameworks like Bootstrap and FontAwesome, is mobile optimized, and hosted with Cloudflare DNS services. Security posture is moderate; domain registration is well maintained with transfer protections, but the site lacks published privacy and cookie policies, security headers, and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and content-rich but could improve compliance and security transparency.

S

START International, Inc.

start.org

59

START International, Inc. is a well-established US-based non-profit organization founded in 1995, focused on providing training, research, education, and networking opportunities to strengthen scientific skills and leadership in sustainability and climate change solutions. The organization maintains a professional web presence with detailed program information, partnerships, and news updates, targeting researchers, educators, and sustainability professionals globally. The website leverages a modern WordPress CMS with common plugins and frameworks such as Bootstrap and jQuery, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and domain registration protections, though improvements are recommended in DNSSEC deployment, cookie consent mechanisms, and publishing explicit security policies. Privacy compliance is basic with a privacy policy present but lacking cookie consent. Overall, the site demonstrates high business credibility and trustworthiness with strong partner affiliations and consistent branding.

I

IKOMMERCE S.r.l.

ikom.it

50

IKOMMERCE S.r.l. is an Italian digital and e-commerce agency specializing in Magento-based e-commerce platforms, web marketing, multilingual customer service, and systems integration. With over 20 years of experience, the company targets businesses seeking comprehensive digital commerce solutions. Their website reflects a professional and consistent brand image with clear service offerings and contact channels. Technically, the site is built on WordPress with modern libraries and frameworks, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and consent mechanisms, though lacking explicit security policies and incident response details. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

M

Metodo S.r.l.

metodogroup.it

52

Metodo S.r.l. is a small Italian IT company based in La Spezia, specializing in IT assistance, maintenance, and custom software and website development. The company targets local businesses and organizations, offering a broad range of IT services including cybersecurity, GDPR compliance, cloud business solutions, and networking. Their market position is that of a regional IT service provider with a focus on tailored solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking, with a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers and DNSSEC are missing. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website reflects a credible and professional IT service provider with room for improvement in security policies and incident response transparency.

Bloomup, a business unit of Ethosfarm S.r.l., specializes in delivering tailored Odoo ERP solutions to modern businesses, leveraging over a decade of experience and more than 200 successful projects. Their market position is strengthened by certifications on the latest Odoo versions (17 and 18), offering services including analysis, configuration, development, training, and support. The website reflects a professional and consistent brand image targeting companies seeking efficient ERP implementations. Technically, the site is built on the Odoo CMS platform, integrates modern web technologies such as Bootstrap and FontAwesome, and is hosted on Odoo.com infrastructure. Performance and mobile optimization are good, with proper SEO and accessibility considerations. Security posture is solid with HTTPS enforced, CSRF protection, and recaptcha integration, though explicit security headers and incident response policies are not evident. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a named Data Protection Officer. Overall, the site is trustworthy, professional, and safe for general audiences.

P

PMG Pte. Ltd.

ivacy.com

68

Ivacy is a VPN service provider offering secure and anonymous internet access with a large global server network. The website highlights its partnership with PureVPN, indicating a strategic alliance to enhance service offerings. The business targets general internet users seeking privacy and security through subscription-based VPN services. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and features. Technically, the site uses WordPress CMS with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and cookie consent mechanisms are missing. WHOIS data is unavailable, which slightly reduces trust but the presence of trust indicators like Trustpilot ratings and a known company address supports legitimacy. Overall, the site is well-positioned in the VPN market with a solid technical and business foundation.

C

Coupon Mister

couponmister.com

64

Coupon Mister is a newly established coupon aggregator website launched in 2024, offering trending daily coupon codes for a variety of brands. The business model focuses on affiliate marketing by providing verified coupon codes and linking users to partner stores. The website targets online shoppers seeking discounts and promotional offers. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, Swiper.js, and Alertify.js, hosted behind Cloudflare DNS services. The site is mobile optimized with a good user experience and clear navigation. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to a contact form with no direct emails or phone numbers. Overall, the site is functional and trustworthy for its niche but could improve security and privacy practices.

T

Telit

telit.com

68

Telit is a global enterprise specializing in end-to-end IoT solutions, offering a broad portfolio of IoT modules, connectivity services, platforms, and custom engineering and manufacturing solutions. Their website demonstrates a mature digital presence with comprehensive content targeting businesses seeking IoT technology to accelerate digital transformation. The company positions itself as a leader in IoT enabling technologies with a focus on reducing time to market and costs for connected devices. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates advanced marketing and consent management tools such as Pardot and Osano, reflecting a high level of digital maturity. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though there is room for improvement in publishing explicit security policies and headers. The absence of WHOIS data limits full domain legitimacy verification, but the professional presentation and extensive content support a trustworthy business profile. Overall, the site is well-structured, mobile-optimized, and SEO-friendly, making it a reliable resource for IoT solutions.

P

Pengutronix e.K.

pengutronix.de

64

Pengutronix e.K. is a specialized German company providing embedded Linux consulting, kernel development, open source multimedia solutions, and training services primarily targeting industrial customers developing Linux-based devices. The company maintains a professional and content-rich website that clearly communicates its services and expertise, positioning itself as a niche player in the embedded Linux technology sector. The website is well-structured, mobile-optimized, and uses modern web technologies such as Bootstrap, jQuery, and PhotoSwipe to deliver a good user experience. From a technical perspective, the website employs HTTPS with good SSL configuration, modern JavaScript libraries, and responsive design. SEO practices are well implemented with proper meta tags and Open Graph data. However, some accessibility features could be improved. Security headers are not explicitly detected, and there is no visible security.txt or incident response contact information, which could be enhanced to improve security posture and transparency. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Contact information is clearly provided, including email, phone, and physical address, enhancing business credibility. No advertising or tracking services are detected, indicating a privacy-conscious approach. Overall, the website and domain appear legitimate and consistent with the company's business operations. The WHOIS data is minimal but does not raise concerns. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing a security.txt file, and providing explicit incident response contacts to further strengthen security and compliance.

V

vpsFree.cz z.s.

vpsfree.org

48

vpsFree.cz is a Czech Republic based non-profit association providing virtual private server (VPS) hosting services to its members. Established in 2010, it offers VPS with competitive specifications such as 4 GB RAM, 120 GB disk space, and 8 CPU cores for a membership fee of 12 euros per month. The organization targets individuals and entities seeking affordable, community-driven VPS hosting without commercial overhead. The website is professionally designed with clear navigation and mobile responsiveness, supporting a positive user experience. Technically, the site uses Bootstrap and jQuery frameworks and is hosted by MasterDC, a known hosting provider. Analytics are handled via Matomo, indicating some privacy awareness. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with domain transfer protections but lacks DNSSEC and HTTP security headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

S

SUSE

suse.com

72

SUSE is a well-established enterprise technology company specializing in open source software solutions, including Linux operating systems, cloud-native platforms, edge computing, and AI applications. The company targets enterprise IT professionals and businesses seeking robust, scalable infrastructure modernization. Their market position is strong, supported by a comprehensive product portfolio and consistent branding across digital channels. Technically, the website demonstrates modern infrastructure with responsive design, use of popular frameworks like Bootstrap, and integration of advanced analytics and consent management tools. Security posture is solid with HTTPS enforcement, security headers, and no visible vulnerabilities, though public security policies and incident response contacts are not found. Overall, the site reflects a mature digital presence with good privacy compliance and business credibility.

N

Netfarm S.r.l.

netfarm.it

50

Netfarm S.r.l. is an established Italian technology company specializing in open source software solutions, including mobile applications, scientific software, business integration, and Odoo ERP services. Founded in 2000, it serves primarily Italian SMEs and enterprises seeking reliable and innovative open source technology. The company maintains a strong market position supported by partnerships such as Bloomup and Ethos S.p.a, and holds ISO 9001 certification, underscoring its commitment to quality. The website reflects a professional and consistent brand image with clear service offerings and contact information.

V

VideoLAN

videolan.org

46

VideoLAN is a well-established non-profit organization known primarily for its flagship product, VLC media player, a free and open-source multimedia player supporting a wide range of formats and platforms. The organization also develops other multimedia tools and libraries targeting both general users and professionals. The website reflects a mature project with a global user base, supported by donations and community contributions. The business model is centered on open-source development and community engagement rather than commercial sales. Technically, the website employs modern web technologies including jQuery, Bootstrap, and slick carousel for UI components, alongside Google Analytics and Tag Manager for user tracking and analytics. The site is mobile-optimized and accessible, with a fast loading performance and clear navigation. Download links are tailored per platform, enhancing user experience. From a security perspective, the site uses HTTPS with good SSL configuration and anonymizes IP addresses in analytics to enhance privacy. Donation forms are securely integrated with PayPal. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in security best practices and privacy compliance. The WHOIS data is incomplete, which slightly impacts trust but is likely due to registry query limitations rather than malicious intent. Overall, VideoLAN's website demonstrates strong professionalism, technical maturity, and community trustworthiness. Strategic improvements in privacy compliance and security policy transparency would further enhance its security posture and user trust.