Security Directory

T

Timothée Giet and others

gcompris.net

66

GCompris is a well-established educational software suite targeting children aged 2 to 10, offering over 100 activities across various learning domains such as arithmetic, reading, science, and games. The project is community-driven and hosted by the KDE community, distributed under the GNU AGPL license, and supported by donations and patronage. The website reflects a mature and consistent brand with professional content and clear navigation. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Matomo analytics, hosted on OVH infrastructure. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and cookie consent mechanisms. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is trustworthy, safe for general audiences, and well-positioned within the educational software niche.

M

Mowbray Court Hotel London

mowbraycourt.com

47

Mowbray Court Hotel London operates as a budget 3-star hotel located in Earls Court, London, catering primarily to corporate and leisure travelers. The hotel offers a range of room types with amenities such as free Wi-Fi, air conditioning, and continental breakfast. The website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for booking and GDPR compliance. The site demonstrates good SEO practices with structured data and social media integration. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and a published privacy policy. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy and requires further verification. Overall, the website presents a professional and trustworthy front for the hotel business but should address compliance and security gaps to enhance trust and legal standing.

I

ImageMagick Studio LLC

imagemagick.org

58

ImageMagick Studio LLC operates the ImageMagick website, providing a powerful open-source software suite for digital image processing, editing, and conversion. The company targets web developers, graphic designers, and researchers, offering command-line tools and APIs for versatile image manipulation. The website reflects a mature, well-established project with a strong community presence and open-source ethos. Technically, the site uses modern web technologies including Bootstrap and Google services, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent management, though improvements in security headers and DNSSEC are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, though it lacks explicit terms of service and incident response contacts.

T

The GTK Team

gtk.org

57

The GTK Project is a well-established open-source initiative providing a free, cross-platform widget toolkit for creating graphical user interfaces. Maintained by the GTK Team under the GNOME Foundation, it serves a global developer audience with comprehensive language bindings and a rich set of UI components. The website reflects a mature project with consistent branding, excellent content quality, and a strong community focus. Technically, the site leverages modern web technologies including Bootstrap, jQuery, and Jekyll, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional, supporting the GTK project's reputation in the open-source ecosystem.

R

ReactOS Deutschland e.V.

reactos.org

60

ReactOS Deutschland e.V. operates the ReactOS project, an open-source reimplementation of the Windows operating system aimed at running Windows applications and drivers in a trusted open-source environment. The project targets developers and users interested in an alternative to Windows, leveraging community contributions and donations to sustain development. The website reflects a well-established project with a history dating back to 2000, supported by consistent domain registration and active community engagement through forums, chat, and social media. Technically, the website is built using the Hugo static site generator, Bootstrap framework, and common web libraries such as jQuery and Photoswipe. The site is mobile-optimized with good SEO practices and clear navigation, although accessibility features are basic. Performance is moderate, with no major issues detected. The site uses HTTPS with a valid SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced security. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and domain transfer protection. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for compliance with privacy regulations such as GDPR. No critical vulnerabilities or malware indicators were found, and the domain registration data supports the legitimacy of the project. Overall, ReactOS.org is a credible and professional website representing a niche open-source technology project. Strategic improvements in privacy compliance, security headers, and explicit security policies would enhance trust and regulatory adherence.

Performance Marketing Unlocked is a professionally managed event platform operated by Haymarket Media Group Limited, focusing on performance marketing conferences, networking, and awards. The website targets marketing professionals across various disciplines and offers rich content about events, speakers, partners, and registration opportunities. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and is hosted on Microsoft Azure, with a CMS identified as Orchard Core. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is generally good with HTTPS enabled and no exposed sensitive data, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The missing WHOIS data for the domain is a notable anomaly, reducing trust slightly, but the association with Haymarket Media Group supports legitimacy. Overall, the site is a credible, well-maintained marketing event platform with moderate to high trust and security levels.

Performance Marketing World Awards is a professional industry platform operated by Haymarket Media Group Limited, focused on recognizing excellence in performance marketing through annual awards. The website offers detailed information about award categories, entry deadlines, judges, sponsors, and event details, targeting marketing professionals and agencies. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and Microsoft Azure hosting, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site demonstrates strong business credibility and content quality but lacks WHOIS transparency, which slightly impacts trust assessment.

P

Pera Wallet LDA

perawallet.app

69

Pera Wallet LDA operates a leading Algorand blockchain wallet platform offering secure, open source, and community-driven services. Their product suite includes mobile and web wallets, token swapping, NFT management, dApp connectivity, and Ledger hardware wallet integration. The company targets Algorand users and crypto enthusiasts, positioning itself as a trusted and user-friendly gateway to the Algorand ecosystem. Technically, the website is well-built using modern frameworks like Bootstrap and jQuery, hosted on AWS S3, and optimized for mobile and SEO. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response details are not published. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

P

PDX Web Properties, LLC

pdxwebproperties.com

52

PDX Web Properties, LLC is a small technology company focused on producing Python-related podcasts and training resources. Founded in 2014 and based in Portland, Oregon, the company is led by Michael Kennedy, a seasoned software developer. Their key offerings include the 'Talk Python To Me' podcast, the 'Python Bytes' podcast, and a professional online training platform for Python developers. The company targets Python developers and technology enthusiasts, positioning itself as a niche leader in Python community media and education. Technically, the website uses a modern frontend stack including Bootstrap, Font Awesome, and jQuery, hosted on bunny.net infrastructure. The site is mobile optimized and presents good design and user experience, though accessibility and SEO optimizations are basic. No CMS or analytics tools are detected, indicating a lightweight and straightforward technical implementation. From a security perspective, the domain is well-managed with transfer and update protections, but lacks DNSSEC and security headers. The website does not publish privacy, cookie, or security policies, which limits compliance posture. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement features. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the nature of the business and content, but strategic improvements in privacy compliance, security headers, and DNS security would enhance trust and resilience. The website is safe, professional, and trustworthy with no signs of malicious or adult content.

A

Advertising Association

adassoc.org.uk

67

The Advertising Association is a well-established UK industry association representing advertisers, agencies, media owners, and tech companies. It serves as a key advocate and policy influencer for responsible advertising, providing research, events, and member networking services. The website demonstrates a mature digital presence with comprehensive content, good SEO, and modern web technologies. The technical infrastructure is based on WordPress with common plugins and frameworks, hosted by GoDaddy. Security posture is solid with HTTPS and reCAPTCHA, though some security headers could be improved. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service in the provided content. Overall, the site is professional, trustworthy, and aligned with its business purpose.

D

Design.ee

design.ee

51

Design.ee is a small Estonian-based design and development agency specializing in brand development, UX research, UI creation, graphic design, and web development primarily for games and commerce applications. The company has an established market presence since 2010 and targets businesses seeking creative and technical design solutions. The website is built on WordPress using modern technologies such as Bootstrap and WPBakery Page Builder, with integrated Google Analytics and Tag Manager for tracking. The site is mobile optimized and SEO friendly with structured data implemented. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. Contact information is limited to phone and physical address with no email or contact form visible. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

S

SOVZ

sovz.cz

47

The website www.sovz.cz represents a Czech government-affiliated initiative focused on the National Strategy for Public Procurement in the Czech Republic. It serves as an informational and educational platform to support responsible public procurement practices, modernization of public investments, and compliance with relevant legislation. The site targets public sector entities, procurement professionals, and suppliers within the Czech Republic. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced UI and GDPR compliance. The website is well-structured, mobile-optimized, and includes cookie consent mechanisms aligned with EU regulations. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though it lacks some advanced security headers and explicit incident response policies. The absence of WHOIS data limits domain trust assessment, but the official government backing and content quality support legitimacy. Overall, the site is professional, compliant, and serves its public sector audience effectively.

H

Hotelsterren

hotelsterren.nl

63

Hotelsterren is a specialized service provider focused on the official classification of hotels in the Netherlands according to European standards. The company offers a web application called 'Klasse' to assist hotels in managing their classification process and compliance with 270 European norms. With over 1,200 hotels classified, Hotelsterren holds a strong market position as a trusted authority in the hospitality sector. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its target audience of hotel owners and travelers. Technically, the website is built on WordPress with modern technologies including Bootstrap, React, and jQuery. It leverages Cloudflare for security and performance, Google Analytics and Facebook Pixel for tracking, and includes a cookie consent mechanism compliant with GDPR. Security posture is strong with HTTPS enforced and bot mitigation via Cloudflare Turnstile and Google reCAPTCHA, though some security headers could be explicitly added for enhanced protection. Overall, the website demonstrates good privacy compliance, business credibility, and technical maturity. No critical vulnerabilities or suspicious content were detected. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness. Strategic improvements could focus on publishing formal security policies and enhancing accessibility features.

Groen Centraal is a collaborative network of nine conference centers located in the Utrechtse Heuvelrug region of the Netherlands, providing meeting and event venues in a green, forested environment. The website targets business customers seeking professional conference and meeting spaces, emphasizing accessibility and natural surroundings. The business model focuses on venue rental and event hosting, positioning itself as a regional leader in hospitality services for corporate events. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates analytics and consent management tools such as Google Tag Manager and Cookiebot. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is moderate, with HTTPS enabled and cookie consent implemented, but lacking some advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in security policies and contact transparency are recommended.

C

CLC-VECTA Centrum voor Live Communication

clcvecta.nl

54

CLC-VECTA Centrum voor Live Communication is a well-established Dutch industry association serving companies and professionals involved in organizing, accommodating, and facilitating trade fairs, congresses, meetings, events, incentives, and entertainment. The organization positions itself as a key player in the live communication sector in the Netherlands, offering knowledge sharing, networking, member services, legal support, and lobbying activities. The website reflects a professional and consistent brand image with comprehensive content targeted at industry professionals and member companies. Technically, the website is built on the Umbraco CMS platform and leverages a modern front-end stack including jQuery, Bootstrap, and various UI plugins such as Revolution Slider and Owl Carousel. The site is mobile-optimized with good SEO practices and moderate performance. Hosting is provided by Internet Service Europe B.V., with domain registration dating back to 2009, indicating a mature online presence. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which could be improved. No explicit security policies or incident response contacts are published, and no cookie consent mechanism is detected despite GDPR compliance indicated by the privacy policy. No vulnerabilities or exposed sensitive data were found in the provided content. Social media integration is present but no analytics or tracking scripts were identified. Overall, the website demonstrates a solid business credibility and content quality with room for improvement in security best practices and privacy compliance mechanisms. The domain registration and WHOIS data support the legitimacy and consistency of the business identity.

Y

YOIN excellent meeting places

yoinexcellentmeetingplaces.com

54

YOIN excellent meeting places is a specialized certification and advisory organization focused on conference and event venues, providing independent quality assessments and facilitating knowledge sharing within the hospitality sector. The business is relatively new, founded in 2021, and is supported by the sector association CLC-VECTA, enhancing its credibility and industry integration. The website presents a professional image with clear navigation, multilingual support, and relevant content targeting venue professionals and event stakeholders. Technically, the site uses modern web technologies such as Bootstrap and jQuery, hosted by a reputable provider, and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the domain registration and WHOIS data align well with the business profile, indicating legitimacy and trustworthiness.

D

Přehledné vzdělávání s rozhledem – putování-poznání-prožitek

dalekohled.cz

42

The website dalekohled.cz is an educational platform focused on providing clear and insightful learning experiences, including educational excursions and summer camps primarily targeting school-age children and educators in the Czech Republic. The site is built on WordPress using standard technologies such as Bootstrap and jQuery, offering a responsive and user-friendly interface. However, it lacks advanced SEO and accessibility features and does not implement structured data or Open Graph metadata. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are explicitly provided, limiting transparency and trust. No analytics or advertising scripts were detected, indicating minimal user tracking but also a lack of marketing tools. Overall, the website appears legitimate and consistent with its domain age and educational purpose. However, it would benefit from improved security practices, privacy compliance, and clearer contact information to enhance trustworthiness and user confidence.

P

Petr Syrný

kulturne.com

47

Kulturne.com is a well-established regional cultural media platform founded in 2008, focusing on cultural events and activities in South Bohemia, Czech Republic. It offers a comprehensive calendar of events, articles, photo reports, and promotional services for cultural happenings. The website is managed by Petr Syrný and maintains a consistent brand presence with active social media channels and newsletter subscriptions. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries, hosted by a reputable provider (WEDOS Internet, a.s.). Security posture is good with HTTPS enabled and partial security headers, though improvements such as DNSSEC and cookie consent mechanisms are recommended. The site is free from adult or explicit content and targets a general audience interested in culture and events. Overall, the platform demonstrates a solid business credibility and technical maturity suitable for its niche.

P

publis.de

appimage.org

63

AppImage.org is an established open source project founded in 2010 and registered under the organization publis.de in Germany. The website provides a platform and tools for packaging Linux desktop applications into portable, self-contained AppImage files that run across multiple Linux distributions without installation. The project targets Linux users and application developers seeking a simplified distribution method. The site features community engagement through forums, live chat, and GitHub repositories, supported by testimonials from notable Linux figures, enhancing its credibility and market position within the Linux ecosystem. Technically, the website employs a modern tech stack including Bootstrap, FontAwesome, jQuery, and embedded YouTube videos, delivering a responsive and user-friendly experience optimized for desktop and mobile. Hosting is stable with a reputable registrar, though DNSSEC is not enabled. The site lacks advanced security headers and privacy policies, indicating areas for improvement in compliance and security posture. No forms or tracking scripts are present, reflecting a privacy-conscious design. Security-wise, the site benefits from HTTPS (assumed from URL), absence of exposed sensitive data, and minimal attack surface due to lack of user input forms. However, missing security headers and lack of documented security or incident response policies suggest moderate security maturity. The WHOIS data is consistent and trustworthy, supporting the legitimacy of the domain and organization. Overall, AppImage.org presents a professional, trustworthy, and technically sound platform with room to enhance privacy compliance and security best practices. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

A

Ad Net Zero Limited

adnetzero.com

64

Ad Net Zero Limited is a UK-based organization dedicated to driving sustainability within the advertising industry by providing a structured five-point Action Plan and a Foundational Pathway self-assessment tool. The company collaborates with global industry leaders and agencies to reduce emissions related to advertising production, media planning, and messaging. Their website reflects a mature digital presence with strong SEO, modern technology stack, and good mobile optimization. Security posture is solid with HTTPS and domain protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the company presents a trustworthy and professional image with strong industry partnerships.

Ruslan Spivak's website is a well-established personal blog and educational resource focused on programming, mathematics, and software development. It targets software developers and learners seeking deep technical knowledge and practical insights. The site offers high-quality content including detailed book notes, tutorials, and a newsletter subscription service, positioning itself as a niche educational platform with a strong reputation in its domain. Technically, the site is built using modern front-end technologies such as Bootstrap and jQuery, hosted on DigitalOcean, and employs Google Analytics and Disqus for analytics and comments respectively. The site is performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security-wise, the site uses HTTPS and has domain registration protections but lacks DNSSEC and security headers, and does not publish privacy or cookie policies, which are areas for improvement. Overall, the site is trustworthy and professional but could enhance its privacy compliance and security posture.

P

PyCoder’s Weekly

pycoders.com

68

PyCoder’s Weekly is a well-established online newsletter service focused on delivering weekly Python programming news and articles to a large community of over 171,000 subscribers. Founded in 2012, it serves Python developers and enthusiasts with curated content via a free email subscription model. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience and strong market positioning within the Python community. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and Google Analytics for tracking, hosted with Cloudflare DNS and registered via NameCheap. The site is mobile optimized and uses HTTPS with CSRF protection on forms, indicating a reasonable level of digital maturity. However, some improvements could be made in accessibility and security headers to enhance protection. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and domain transfer protection. There are no visible vulnerabilities or exposed sensitive data. However, the absence of DNSSEC, security policies, incident response contacts, and cookie consent mechanisms suggests room for improvement in compliance and transparency. Overall, PyCoder’s Weekly presents a trustworthy and professional online presence with a solid foundation but could benefit from enhanced security policies and privacy compliance measures to further strengthen its risk posture.

R

Real Python

realpython.com

68

Real Python is a well-established online education platform specializing in Python programming tutorials, courses, books, and community engagement. Founded in 2012 and operated by DevCademy Media Inc., it serves a broad audience of developers, data scientists, and machine learning engineers. The platform offers a comprehensive suite of learning resources including video courses, quizzes, podcasts, and mentoring services, positioning itself as a leading provider in the Python education market. The website demonstrates consistent branding and high-quality content, appealing to learners at all skill levels.

T-Hub is a leading innovation ecosystem based in India, established in 2015, that connects startups, corporates, academia, investors, and government entities to foster disruptive innovation and entrepreneurship. The website reflects a mature and professional digital presence built on WordPress with Elementor, featuring rich content about their programs, partnerships, and services. The technical infrastructure includes modern web technologies and analytics tools such as Google Tag Manager and Microsoft Clarity, supporting moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is limited, with no visible privacy or cookie policies or consent mechanisms. Overall, the website is trustworthy and well-positioned in its market segment but would benefit from enhanced security and privacy transparency.

Nikola is an established open-source static site generator project founded in 2013, providing a Python-based tool for developers and content creators to build static websites efficiently. The website serves as a comprehensive resource with documentation, add-ons, and community support channels, positioning itself as a niche but mature player in the static site generation space. The business model revolves around free software distribution with community-driven development and support. Technically, the site is built with modern web standards including Bootstrap and FontAwesome, and leverages Cloudflare DNS for hosting infrastructure. The site is performant, mobile-optimized, and accessible, with a clean and professional design. Analytics are minimal, using StatCounter, and no intrusive advertising or tracking is present. From a security perspective, the site uses HTTPS and domain status locks but lacks DNSSEC and security headers. No forms collect sensitive data on the main page, and no explicit security or incident response policies are published. Privacy compliance is limited, with no cookie consent mechanism and only a basic license page serving as a privacy reference. Overall, the website is trustworthy and professional, suitable for its technical audience. However, improvements in privacy compliance, security headers, and vulnerability disclosure policies would enhance its security posture and user trust.

Y

YMCA 175

ymca175.com

50

YMCA175 is a global youth leadership event organized by YMCA Europe and hosted by YMCA England & Wales, targeting young leaders aged 16-35 worldwide. The event focuses on workshops, seminars, and leadership training to empower youth and foster global change. The website is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, serving a non-profit sector audience effectively.

K

Knack

knack.com

75

Knack is a well-established no-code application development platform that enables businesses to build, automate, and scale operations without coding. The company offers a unified platform combining database management, workflow automation, forms, and front-end design, targeting a broad range of industries including government, non-profit, and technology sectors. With over 6,000 users and a medium-sized company profile, Knack positions itself as a leading SaaS provider in the no-code space. The website is professionally designed, content-rich, and optimized for SEO and mobile use, reflecting a mature digital presence. Technically, the website leverages WordPress CMS with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, HubSpot, and various ad networks. The site uses HTTPS with good SSL configuration and includes several security best practices, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. From a security and compliance perspective, Knack provides comprehensive privacy and cookie policies with GDPR compliance indicators. However, the absence of WHOIS domain registration data raises concerns about domain transparency and trustworthiness, which slightly impacts the overall risk assessment. No explicit incident response or vulnerability disclosure information is publicly available. Overall, Knack presents a strong business and technical profile with a secure and user-friendly website. The main risk lies in the lack of publicly available domain registration details, which should be addressed to enhance trust. Strategic recommendations include improving security headers, publishing incident response contacts, and ensuring WHOIS transparency to bolster credibility.

C

Comundi

comundi.fr

56

Comundi is a well-established French professional training organization specializing in the development of professional skills through a wide range of training programs, consulting services, e-learning modules, and events. The company targets professionals and organizations seeking certified and innovative training solutions. Their market position is strong, supported by recognized certifications such as Qualiopi and a broad client base including major corporations. Technically, the website employs modern web technologies and analytics tools, ensuring a good user experience with mobile responsiveness and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in explicit security headers and published security policies. The absence of WHOIS data reduces transparency but does not detract significantly from the overall credibility based on website content and branding. Overall, Comundi presents a professional and trustworthy online presence suitable for its educational sector.

Scena Performance is a small, specialized event organization company focused on trail running, triathlon, and endurance sports events primarily in Northern California and globally. The company operates a WordPress-based website that provides event information, registration links, and blog updates to its target audience of endurance athletes and sports enthusiasts. The business model centers on organizing and promoting endurance sports events ranging from 5K to 50K races and related festivals. The website demonstrates consistent branding and a good level of content quality, supporting its niche market position. Technically, the website uses a modern WordPress CMS with Bootstrap for responsive design, jQuery, and several marketing and analytics tools including Google Analytics and Facebook Pixel. The site is hosted likely via GoDaddy, with a valid SSL certificate ensuring HTTPS security. Performance is moderate with good mobile optimization and basic accessibility features. SEO is enhanced by Yoast SEO plugin and structured data (JSON-LD) implementation. From a security perspective, the site enforces HTTPS but lacks DNSSEC and explicit security headers, which are recommended for improved security posture. There is no visible security policy or incident response information, and cookie consent mechanisms are absent, indicating partial privacy compliance. Tracking scripts are present but without clear user consent mechanisms, which may pose compliance risks under GDPR. The domain WHOIS data is consistent with the business claims, showing a long-standing registration without privacy protection, supporting legitimacy. Overall, the website is functional, professional, and trustworthy for its business purpose but would benefit from enhanced security practices and privacy compliance improvements to reduce risk and increase user trust.

C

cathkathcatt.ch

cathkathcatt.ch

43

cathkathcatt.ch is a multilingual Catholic media platform serving the Swiss Catholic community across German, French, and Italian language groups. The website provides news, job listings, and advertising space related to Catholic institutions in Switzerland. The platform is built on WordPress and uses common web technologies such as Bootstrap, jQuery, and integrates tracking tools like Google Tag Manager, Facebook Pixel, and Mouseflow. The website's content is minimal on the main page, with a 'Nothing Found' message indicating possible content gaps or misconfiguration. Contact information is limited to a contact form page without direct emails or phone numbers. No privacy or cookie policies are found, and no security headers are implemented, although HTTPS is enforced. The site links to partner domains representing language variants and job listings for Catholic institutions.

V

Vysoká škola technická a ekonomická v Českých Budějovicích

vstecb.cz

53

Vysoká škola technická a ekonomická v Českých Budějovicích (VŠTE) is a public higher education institution located in the Czech Republic, specializing in technical and economic disciplines. The university distinguishes itself by a strong emphasis on practical education, offering accredited bachelor and master degree programs. It serves students primarily from the Czech Republic and international students through exchange programs. The institution maintains a medium-sized presence with various subsidiaries including a basic and nursery school, sports clubs, and student organizations. The website reflects a professional and well-structured digital presence with comprehensive information about academic programs, admissions, and student services. Technically, the website is built on WordPress CMS with modern plugins such as Yoast SEO, WPBakery Page Builder, and Cookiebot for cookie consent management. It uses Bootstrap for responsive design and integrates Google Analytics and Facebook Pixel for analytics and marketing. The site is mobile-optimized and accessible, with clear navigation and ARIA attributes enhancing usability. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain registration trust verification, but the website content and official contact details support legitimacy. Overall, VŠTE's website is a reliable and professional digital asset supporting its educational mission. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance. The site is safe for general audiences with no adult or questionable content detected.

L

LUMI consortium

lumi-supercomputer.eu

70

The LUMI website represents a large-scale European supercomputing consortium providing high-performance computing resources and AI services to researchers and industry. The site is well-structured, professionally designed, and targets a technical audience involved in HPC and AI innovation. The technical infrastructure is based on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and privacy page. The absence of terms of service and security policy pages is noted but does not critically impact trust. Overall, the website reflects a credible and mature digital presence aligned with its business goals.

Q

QuickpageX

quickpagex.ch

48

QuickpageX is a Swiss-based service providing flexible website solutions tailored primarily for institutional clients such as church communities and aid organizations. The company emphasizes ease of use by allowing clients to focus on content creation while managing technical aspects including domain registration and email accounts. Their market position is niche, focusing on privacy-conscious institutions with a subscription-based business model that includes a free trial period and annual fees. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating privacy-friendly tools like Matomo analytics and OpenStreetMap instead of Google services. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some advanced security headers and a published security policy. Privacy compliance is strong with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

K

Katholisches Medienzentrum

blogs-kath.ch

51

Blogs kath.ch is a Swiss Catholic church blog platform operated by the Katholisches Medienzentrum, providing current and relevant content for the Catholic community in Switzerland. The site serves as a niche media platform offering blog hosting, news, job listings, and advertising space related to Catholic church activities. Technically, the website is built on WordPress 6.7.1 with modern frameworks like Bootstrap and uses analytics tools such as Matomo and Mouseflow, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks security headers and a formal vulnerability disclosure mechanism. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche but could improve security and privacy practices.

C

cath.ch

cath.ch

58

cath.ch is a well-established Swiss Catholic news portal serving the French-speaking Catholic community with news, commentary, multimedia, and community services. The site is professionally designed and offers a broad range of content including news from Switzerland, Vatican, and international Catholic affairs. It operates on a WordPress CMS with a modern tech stack including Bootstrap and various analytics and marketing tools. The website demonstrates a good level of digital maturity with mobile optimization and clear navigation. Security posture is adequate with HTTPS and some security best practices, though improvements are recommended such as implementing a Content-Security-Policy and publishing incident response contacts. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and credible, with clear contact information and social media presence.

K

Known, Inc.

withknown.com

48

Known, Inc. operates with a focus on providing an open source social publishing platform that enables individuals and groups to collaboratively publish blog posts, photos, and media on their own sites with syndication to social networks. The company targets users interested in decentralized and multi-author blogging solutions, leveraging the Indieweb movement. The website positions Known as a niche player in the social publishing technology sector with a small but consistent presence since 2014. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Fonts, and Google Analytics, hosted on AWS infrastructure. The site is mobile responsive and well-structured, though some accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and important security headers such as Content-Security-Policy. No explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Tracking via Google Analytics is active without visible user consent. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security headers, DNSSEC, and privacy consent would enhance trust and compliance.

C

Calta Elektro

caltaelektro.cz

42

Calta Elektro is a well-established Czech retailer specializing in premium electrical appliances from brands such as Miele, Jura, Liebherr, and Bora. Founded in 1990, the company operates physical stores and showrooms in Milevsko and Písek, alongside an e-commerce platform. Their business model focuses on retail sales supported by kitchen studio and lighting services, targeting consumers seeking high-quality branded products. The website reflects a professional and consistent brand image with clear navigation and relevant content for their audience. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, and Google reCAPTCHA v3, hosted likely by REG-ZONER. The site is mobile-optimized and uses secure HTTPS connections. However, some security best practices such as security headers and published privacy/cookie policies are missing, indicating room for improvement in compliance and security posture. From a security perspective, the site shows good practices like HTTPS and CAPTCHA usage but lacks explicit security headers and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is consistent with the business claims, showing a long-standing domain registration that supports legitimacy. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security hardening to meet modern standards and regulations.

Firma Trkovský s.r.o. is a Czech Republic-based small manufacturing company specializing in the production and supply of equipment for bakeries and the food industry, as well as metal fabrication services including piping, flanges, and sheet metal processing. Founded in 1990, the company has a long-standing presence in its sector and targets bakery businesses and related industries. The website serves as a professional digital presence showcasing their services and contact information. Technically, the website is built on WordPress using common plugins such as Contact Form 7, Slider Revolution, and Visual Composer. The hosting is likely provided by WEDOS, consistent with the domain registrar and nameservers. The site is moderately optimized for mobile and performance, with a good design and clear navigation, though some technical debt is evident due to outdated WordPress core and plugins. From a security perspective, the site uses HTTPS but lacks explicit security headers and does not display privacy or cookie policies, indicating compliance gaps with GDPR and other data protection regulations. No incident response or vulnerability disclosure information is present. Contact forms are implemented but without visible advanced security measures. Overall, the security posture is moderate but could be improved significantly. The overall risk assessment suggests the website is legitimate and professional but requires enhancements in privacy compliance, security best practices, and technical updates to reduce potential vulnerabilities and improve trustworthiness. Strategic recommendations include updating software, implementing security headers, adding privacy and cookie policies, and establishing incident response contacts.

Z

ZVVZ GROUP, a.s.

zvvz.cz

61

ZVVZ GROUP, a.s. is a leading Czech industrial company specializing in the development, manufacturing, delivery, installation, and servicing of equipment primarily for environmental protection, including flue gas cleaning, filtration, ventilation, nuclear energy, HVAC, and pneumatic transport. The company has a long history dating back to 1948 and operates a group of subsidiaries and partner companies, positioning itself as a major player in the energy and manufacturing sectors. The website reflects a professional B2B business model targeting industrial clients and investors. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel, and is built on the VOX.AREA CMS platform. It is mobile optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. The site uses HTTPS with a strong SSL configuration and implements cookie consent mechanisms, demonstrating compliance with GDPR and related privacy regulations. From a security perspective, the site shows good practices including HTTPS enforcement, privacy policies, and ISO 27001 certification. However, the absence of explicit security headers and public vulnerability disclosure policies indicates room for improvement. No critical vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data reduces transparency and trust slightly but does not negate the legitimacy indicated by the website content and business presence. Overall, the website is professional, secure, and compliant with privacy standards, serving its industrial audience effectively. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response contacts, and improving accessibility features to further strengthen the security posture and user trust.

W

Wellit s.r.o.

wellit.sk

57

Wellit s.r.o. is a Slovakian technology company specializing in web development, e-commerce solutions, custom web applications, cloud repositories, and hosting services. Established in 2010 and operating under the Wellit brand since 2012, the company targets businesses seeking modern, user-friendly digital solutions. Their market position is that of a small but established technology service provider emphasizing innovation and partnerships. Technically, the website is built on WordPress 4.7.29 using Cherry Framework and Bootstrap, incorporating common JavaScript libraries like jQuery and FlexSlider. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No hosting provider details were identified from the content. From a security perspective, the site uses HTTPS but lacks important security headers and a cookie consent mechanism, which impacts GDPR compliance. The WordPress version is outdated, posing potential security risks. No explicit security policies or incident response contacts are published, limiting transparency. No vulnerabilities or exposed sensitive data were detected in the visible content. Overall, the website is professional and business-focused with good content quality and navigation. However, improvements in privacy compliance, security best practices, and technical modernization are recommended to enhance trust and reduce risk.

K

Katholisches Medienzentrum

kath.ch

49

kath.ch is a well-established Catholic news portal serving the German-speaking Swiss audience with current and relevant content on religion, politics, and society. It operates as a non-profit media service under the Catholic Media Center on behalf of the Roman Catholic Church in Switzerland. The website offers diverse content including news articles, podcasts, videos, job listings, and event information, positioning itself as a leading Catholic media outlet in Switzerland. The site maintains consistent branding and provides clear contact information, reinforcing its trustworthiness and professional standing. Technically, the website is built on WordPress 6.7.1 with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience. It integrates multiple analytics and tracking tools such as Matomo, Google Tag Manager, Facebook Pixel, and Mouseflow, enabling moderate user tracking. The site is mobile-optimized with good navigation clarity and SEO practices, although accessibility features are basic. From a security perspective, kath.ch enforces HTTPS with strong SSL configuration and implements several security headers. It uses reCAPTCHA v3 to protect forms and avoids exposing sensitive data. However, it lacks a cookie consent mechanism and publicly available security or incident response policies, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, kath.ch demonstrates a strong business credibility and security posture suitable for its non-profit media role. Strategic recommendations include implementing explicit cookie consent, publishing security policies, and enhancing accessibility to further improve compliance and user trust.

R

Reformiert GL

reformiert-gl.ch

60

Reformiert GL operates as a regional media platform delivering news and information related to the Evangelical Reformed Church in the Canton of Glarus, Switzerland. The website targets church members and the local community, providing thematic articles, event agendas, and e-paper services. The business model is non-profit media focused on religious and cultural content, with a consistent and professional brand presence. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a responsive and user-friendly experience. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with a clear privacy policy and cookie consent. Overall, the website is trustworthy, well-maintained, and serves its niche audience effectively.

M

Multi Digital

magnet.jetzt

57

The website magnet.jetzt is a regional media platform focused on delivering news, cultural content, and spiritual topics primarily for the Appenzellerland region in Switzerland. Operated by Multi Digital, it offers editorial articles, e-paper access, podcasts, and community event information. The site targets German-speaking audiences interested in local news and cultural affairs. The business model revolves around content publication and partnerships with cantonal media outlets, positioning itself as a trusted regional news source. Technically, the site employs modern web technologies including Bootstrap for responsive design, jQuery, Google Tag Manager, and Google Analytics for tracking, and CookieConsent.js for privacy compliance. The site is mobile optimized with a moderate performance profile and basic accessibility features. Security measures include HTTPS enforcement and reCAPTCHA integration, though security headers and incident response policies are not evident. From a security and compliance perspective, the site implements a cookie consent mechanism with opt-in for tracking cookies, and a privacy policy page compliant with GDPR principles. However, WHOIS data is unavailable or malformed, limiting domain trust verification. No security.txt or explicit incident response contacts are found. The site shows no signs of malicious or adult content, maintaining a safe rating for general audiences. Overall, magnet.jetzt presents as a professional, regionally focused media outlet with good content quality and privacy compliance. Security posture is adequate but could be improved by adding security headers and formal vulnerability disclosure mechanisms. The lack of WHOIS transparency slightly reduces trust but does not outweigh the positive indicators from site content and contact information.

K

Kirchenbote der Evangelischen Landeskirche Thurgau

kirchenbote-tg.ch

61

Kirchenbote TG is a regional media outlet operated by the Evangelische Landeskirche Thurgau, providing news and information focused on church, society, culture, and spirituality within the Thurgau canton of Switzerland. The website offers a variety of content including news articles, e-paper editions, photo and video galleries, and community resources. It targets residents interested in regional and church-related topics, positioning itself as a trusted local media source with a clear organizational backing. Technically, the website employs modern web technologies such as Bootstrap for responsive design, jQuery for interactivity, and integrates Google services including reCAPTCHA v3 and Google Analytics for security and analytics purposes. Cookie consent is implemented with an opt-in mechanism, supporting GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and includes cookie consent and bot protection mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the legitimacy of the domain with consistent registrant information matching the website's organizational identity. Overall, Kirchenbote TG demonstrates a solid digital presence with good content quality, technical implementation, and privacy compliance. Strategic recommendations include enhancing security headers, improving accessibility features, and formalizing security policies to further strengthen trust and compliance.

M

Medienportal Kirchenbote

kirchenbote-sg.ch

61

The website kirchenbote-sg.ch serves as a regional news portal focused on church-related news and cultural topics for the canton of St. Gallen, Switzerland. It provides a variety of articles, thematic sections, and community resources, targeting residents and church community members. The site maintains partnerships with other cantonal church news portals, enhancing its regional media presence. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and a cookie consent mechanism with opt-in compliance. Security posture is good with HTTPS enforced and basic security best practices, though additional HTTP security headers could improve protection. Privacy compliance is strong with a clear privacy policy and cookie consent. Contact information is transparent and includes physical addresses, phone numbers, and emails. Overall, the site is professional, trustworthy, and well-positioned in its niche regional media market.

The GSA Platform, operated by GAZ-SYSTEM S.A., is a specialized online platform facilitating auctions and secondary market transactions for gas transmission capacity and LNG terminal services across Europe. It serves gas transmission operators, market participants, and LNG terminal operators, providing tools for booking long-term capacity and managing incremental capacity. The platform is positioned as a key player in the European energy sector, offering transparent and regulated capacity allocation services. Technically, the website employs a modern but moderate tech stack including Bootstrap, jQuery, and Font Awesome, hosted by OVH SAS. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security practices include CSRF tokens and cookie consent mechanisms, but there are notable weaknesses such as password input fields not using secure input types and lack of visible security headers. From a security perspective, the platform demonstrates a reasonable posture with encrypted communications (assumed HTTPS), but improvements are needed in input handling and security header implementation. Privacy compliance is supported by accessible privacy and cookie policies, with GDPR considerations evident. Contact information is comprehensive, enhancing business credibility. Overall, the platform is a professional, trustworthy service with a solid business model and clear market focus. Security and privacy practices are adequate but could be enhanced to meet higher standards. No critical vulnerabilities or blocking mechanisms were detected, allowing full content analysis.

F

Founders4Founders is under construction

founders4founders.cz

48

Founders4Founders.cz is a website currently under construction, targeting investors and startups in the Czech Republic. The site appears to be a small-scale project or startup founded in 2021, with minimal public-facing content and no active business services visible. The website uses WordPress with an under construction plugin and basic frontend technologies such as Bootstrap and Font Awesome. Hosting is likely provided by Forpsi, a Czech hosting provider, as inferred from the nameservers. The technical infrastructure is basic, with no advanced frameworks or analytics detected. Security posture is weak, with no visible HTTPS confirmation, security headers, or privacy policies. There is no contact information or forms, limiting user engagement and trust. Overall, the site is not yet operational and lacks critical compliance and security features.

M

Meinhart Kabel Österreich GmbH

meinhart.at

55

Meinhart Kabel Österreich GmbH is a well-established European leader in cable distribution and logistics, specializing in energy and data cables. With over 40 years of experience, the company serves a broad industrial clientele across multiple sectors including energy, automotive, and construction. The website is professionally designed using TYPO3 CMS and incorporates modern technologies such as Bootstrap and Usercentrics for consent management. Google Analytics 4 is used for user tracking with moderate privacy compliance. Security posture is good with HTTPS enforced and basic security headers present, though additional headers and explicit security policies could enhance protection. The absence of WHOIS data limits domain trust analysis but the company's extensive business presence and multiple European subsidiaries support legitimacy. Overall, the website is high quality, user-friendly, and business credible.

S

Schweizerische Gesellschaft für Ernährung SGE

sge-ssn.ch

80

The Schweizerische Gesellschaft für Ernährung SGE is a well-established Swiss non-profit organization focused on nutrition education, advocacy, and public health promotion. With a history spanning over 60 years, the organization provides comprehensive nutrition information, educational resources, events, and membership services targeting the general public and professionals interested in healthy eating. The website reflects a mature digital presence with multilingual support and a clear focus on user engagement through newsletters, publications, and an online shop. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, leveraging modern frameworks like Bootstrap and jQuery. It integrates Mapbox for mapping and Matomo (Piwik) alongside Facebook Pixel for analytics and marketing tracking. The site is well-optimized for mobile devices and SEO, with proper meta tags and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements essential security headers. It employs a cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not present, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It serves its non-profit mission effectively while maintaining a secure and user-friendly online environment.