Security Directory

RWE AG operates a comprehensive transparency platform providing detailed real-time data on electricity generation from its power plants across multiple countries, primarily Germany, the Netherlands, the UK, and the USA. The website serves as a free resource for the public and market participants, showcasing RWE's commitment to transparency and compliance with European energy market regulations. The platform uses modern web technologies including Angular and integrates consent management tools to ensure GDPR compliance. While the site is professionally designed and content-rich, the absence of WHOIS registration data for the domain raises questions about domain legitimacy, although the content and branding strongly align with RWE AG's corporate identity. Security posture is generally strong with HTTPS and consent mechanisms, but could be improved with explicit security headers and incident response information. Overall, the site is a valuable resource with moderate risk due to domain registration opacity.

R

RWE AG

rwe.asia

68

RWE AG is a major European energy company with a growing presence in China, focusing on renewable energy, energy trading, and technical advisory services. The website highlights its subsidiaries, RWE Supply & Trading (Shanghai) Co. Ltd. and RWE Technology International GmbH, emphasizing their roles in energy infrastructure and trading within China. The company targets industrial, commercial, and public sector clients, leveraging its extensive experience and global footprint. Technically, the website employs modern web technologies including jQuery, UIKit, and Usercentrics CMP for privacy compliance, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and secure forms, though additional security headers could enhance protection. Privacy policies and cookie consent mechanisms are present and GDPR compliant. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and content strongly support legitimacy. Overall, the site is professional, trustworthy, and well-aligned with RWE's corporate identity.

I

Invest North East England

investnortheastengland.co.uk

61

Invest North East England is a strategic inward investment agency supporting businesses to relocate and invest in the North East of England. It operates as part of the North East Combined Authority and provides free support services including a land and property database. The website presents a professional image with sector-specific information, testimonials from major companies, and multiple contact channels. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and security plugins, though some security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and well-positioned as a government-related business support platform.

N

North East Combined Authority

northeast-ca.gov.uk

72

The North East Combined Authority (NECA) is a regional governmental body serving the North East England area, focusing on regional governance, economic development, and transport infrastructure. The website serves as an official portal for residents and stakeholders, providing information and resources related to the authority's activities. The site is positioned as a key regional government entity with a medium organizational size and a focus on public sector services. Technically, the website employs modern web technologies including Vue.js, jQuery, Google Tag Manager, Hotjar for analytics, and OneTrust for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some technical details such as hosting provider and CMS are not explicitly identified. Performance is moderate, with a professional design and clear navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or vulnerability disclosures. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable due to .gov.uk domain privacy policies, but the domain's legitimacy is supported by its official government TLD and consistent branding. Overall, the website presents a trustworthy and professional digital presence for a government authority, with recommendations to enhance security posture by adding security headers, publishing security policies, and improving privacy policy visibility to strengthen compliance and user trust.

O

Offshore Wind Growth Partnership

owgp.org.uk

58

The Offshore Wind Growth Partnership (OWGP) is a UK-based non-profit organisation dedicated to accelerating the development of the offshore wind supply chain. Founded in 2019, OWGP provides funding and structured business support to UK companies, helping them grow, improve productivity, and compete globally in the offshore wind sector. The organisation also serves as the Industrial Growth Plan Delivery Body, aligning its initiatives with national priorities to support net zero and energy security goals. The website reflects a professional and consistent brand presence with clear messaging targeted at businesses involved or interested in offshore wind supply chain development. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is hosted by GoDaddy and uses HTTPS with good SSL configuration. While the site performs moderately well and is mobile optimized, there is room for improvement in accessibility and security headers. No blocking WAF or security challenges were detected, allowing full content access. From a security perspective, the site employs HTTPS and secure forms but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance and user trust. There is no evidence of incident response or vulnerability disclosure mechanisms, which could be enhanced to improve security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a trustworthy and professional front for OWGP, with strong business credibility and good technical foundations. Strategic improvements in privacy compliance, security headers, and incident response transparency would further strengthen the site's security posture and user trust.

E

Elavon UK

sagepay.com

70

Elavon UK is a well-established payment processing company operating under the parent organization U.S. Bancorp. The company provides a comprehensive suite of card payment solutions and merchant services tailored for businesses ranging from small retailers to large enterprises. Their market position is strong, supported by a large customer base across multiple countries and a wide range of industry-specific payment solutions. The website reflects a mature digital presence with professional design, clear navigation, and detailed service offerings. Technically, the site uses modern frameworks and technologies such as Adobe Experience Manager and Google Tag Manager, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a public security policy could enhance trust further. Overall, the site is trustworthy, compliant with GDPR, and provides multiple contact channels for customer support and sales.

V

Vårgrønn

vargronn.no

63

Vårgrønn is a specialized offshore wind energy company operating primarily in Northern Europe. It is a joint venture between Eni Plenitude and HitecVision, focusing on developing, constructing, operating, and owning offshore wind projects. The company positions itself as agile and ambitious with multiple large-scale projects underway or planned. Technically, the website is built on Webflow with modern JavaScript libraries and translation services, offering a fast, mobile-optimized, and accessible user experience. Security posture is moderate with HTTPS in use but lacking explicit security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trust slightly, but the company's partnerships and detailed project information support legitimacy. Overall, the website is professional and trustworthy, with room for improvement in privacy and security transparency.

MarramWind Ltd is a joint venture between ScottishPower and Shell New Energies UK focused on developing a large-scale floating offshore windfarm off the north-east coast of Scotland. The project aims to deliver up to 3 GW of renewable energy, powering over 3.5 million homes, and contributing to the UK's net-zero targets. The website provides detailed information about the project, partners, vision, and stakeholder engagement opportunities, reflecting a professional and credible business presence. Technically, the website is built on ASP.NET Web Forms and leverages modern JavaScript libraries such as jQuery, Bootstrap, and Modernizr, along with Google Fonts and Google Tag Manager for analytics. The site is mobile-optimized and accessible, though some SEO and security header enhancements could improve its digital maturity. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and a dedicated security policy or incident response contact. The WHOIS lookup failed due to a domain naming rule violation, which may be a querying artifact rather than a true registration issue, as the site is live and professional. Overall, the security posture is moderate but could be strengthened with additional controls and transparency. The overall risk assessment is low, with recommendations to implement security headers, cookie consent mechanisms, and publish security policies to enhance trust and compliance. The site is safe for general audiences and aligns well with its business objectives and market positioning.

B

Bundesministerium für Arbeit und Soziales (BMAS)

esf.de

62

The website www.esf.de is the official portal for the European Social Fund (ESF) in Germany, operated by the Bundesministerium für Arbeit und Soziales (BMAS). It serves as a comprehensive information and service platform providing details on funding programs, social integration, employment initiatives, and related EU projects. The site targets a broad audience including employees, unemployed persons, educational institutions, entrepreneurs, families, and other social groups. It is positioned as a key government resource for promoting employment and social cohesion through EU funding mechanisms. Technically, the site is built on the Government Site Builder CMS and employs modern web technologies such as jQuery, Bootstrap, RequireJS, and integrates a consent management platform (Consentmanager.net) for GDPR compliance. Analytics are handled via Etracker, with scripts loaded asynchronously to optimize performance. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS and uses a consent management platform to handle privacy and cookie policies. While explicit security headers are not visible in the HTML, the overall posture is strong with no exposed sensitive data or vulnerabilities detected. The WHOIS data aligns with a legitimate government domain, showing consistent registration and authoritative name servers. Overall, the website demonstrates a high level of professionalism, compliance, and trustworthiness, making it a reliable source for information on the European Social Fund in Germany.

H

Holii - Holistic Impact Incubator

holii.de

39

Holii - Holistic Impact Incubator is a small educational incubator project affiliated with Leuphana University in Germany, focused on supporting impact-driven startups and founders through a structured program involving design thinking, impact measurement, and financing. The website presents a professional and consistent brand image with clear descriptions of services and partnerships with multiple universities and research institutions. Technically, the site is built on WordPress using Elementor and related plugins, optimized for performance and SEO, and is mobile responsive. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, but could improve transparency and security practices.

F

FabLab Lüneburg e.V.

fablab-lueneburg.org

51

FabLab Lüneburg e.V. is a non-profit community maker and hack space established in 2015 in Lüneburg, Germany. It provides an open MakerSpace equipped with tools such as 3D printers and laser cutters, and a HackSpace focused on Free and Open Source Software (FOSS). The organization operates primarily on donations and memberships, fostering a collaborative environment for technology enthusiasts and hobbyists. The website is well-structured, content-rich, and targets local community members interested in technology and DIY projects. Technically, the website is built on WordPress 6.8.3 with common plugins like Jetpack and All-in-One Event Calendar. It uses modern web technologies including jQuery and Google Fonts, and implements HTTPS with good SSL configuration. The site is mobile-optimized and accessible, with a cookie consent mechanism compliant with EU regulations. Analytics are minimal and privacy-conscious, using Jetpack Stats. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. WHOIS data is unavailable due to privacy protection, which is justified for this non-profit entity. No suspicious or malicious indicators were found. Overall, the site demonstrates a good security posture for its type and size. The overall risk is low, with recommendations to enhance HTTP security headers and publish incident response information. The site is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable resource for its community audience.

W

Westsächsische Hochschule Zwickau

whz.de

68

The Westsächsische Hochschule Zwickau is a regional university of applied sciences in Germany offering a broad range of study programs in technology, economics, and quality of life disciplines. The website serves students, prospective students, alumni, and international visitors with detailed information about study offerings, research, and campus life. The institution positions itself as a practical and accessible higher education provider with a strong regional and international profile. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper, and integrates Matomo for analytics. The site demonstrates good mobile optimization, accessibility features including visual aids, and a comprehensive navigation structure. Hosting appears to be managed by academic or regional providers, consistent with the institution's profile. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly detailed, and security headers are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its educational mission effectively. Strategic improvements in security transparency and header implementation could further enhance its posture.

W

Westsächsische Hochschule Zwickau

techniknacht-zwickau.de

63

The website www.techniknacht-zwickau.de serves as an informational platform for the 'Lange Nacht der Technik' event organized by the Westsächsische Hochschule Zwickau. It targets technology enthusiasts, students, and the general public interested in science and technology events. The site provides event details, images, and partner information, positioning itself as a regional educational event organizer with strong academic and community ties. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery, Swiper.js, and Magnific Popup for interactive content. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the institution, indicating high legitimacy. Overall, the website presents a low-risk profile with good content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its posture and trustworthiness.

W

WHZ Racing Team

whz-racingteam.de

56

The WHZ Racing Team website represents a student-led Formula Student racing team affiliated with the Westsächsische Hochschule Zwickau in Germany. The team focuses on designing, building, and competing with innovative racing vehicles in international Formula Student competitions. The site targets students, motorsport enthusiasts, and potential sponsors, providing detailed information about the team, vehicles, events, and contact points. The business model is non-commercial, centered on education, technical development, and motorsport passion. Technically, the website is built on TYPO3 CMS with standard web technologies including jQuery and Magnific Popup. It uses HTTPS and integrates Piwik analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, accessibility and SEO optimizations are basic, and some modern security headers are missing. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance. No vulnerabilities or malicious content were detected. The WHOIS data aligns well with the university infrastructure, supporting legitimacy. Overall, the website is trustworthy and professional but could improve privacy compliance and security posture by adding cookie consent, security headers, and clear privacy/security policies.

E

EUROPE DIRECT Bayerischer Wald - Böhmerwald - Unterer Inn

europe-direct.de

43

EUROPE DIRECT Bayerischer Wald - Böhmerwald - Unterer Inn operates as a regional EU information and cultural engagement center serving the Bavarian-Bohemian border region. It provides citizens, students, and local communities with educational events, workshops, and cross-border cooperation initiatives to promote understanding of the European Union and its policies. The organization is part of the EUREGIO network and collaborates with universities, government bodies, and cultural institutions. The website is built on TYPO3 CMS and uses standard web technologies including jQuery and Bootstrap. It features event announcements, educational content, and contact information prominently, targeting a general audience interested in EU affairs.

B

Butzon & Bercker GmbH

dbk-shop.de

49

The website www.dbk-shop.de serves as the official online shop for the Deutsche Bischofskonferenz, the assembly of Catholic bishops in Germany. It primarily offers publications related to the Catholic Church, including official documents, pastoral letters, and scholarly works. The business operates in a niche non-profit sector focused on religious and ecclesiastical literature, targeting a general audience interested in Catholic Church materials. The site is professionally designed with clear navigation and consistent branding, reflecting its authoritative position in this domain. Technically, the website is built on the xt:Commerce platform version 6.6.11, utilizing modern web technologies such as jQuery, Bootstrap, OwlCarousel, and others to provide a responsive and accessible user experience. The site includes accessibility features and a cookie consent mechanism, indicating attention to user privacy and compliance. Performance is moderate with good mobile optimization. From a security perspective, the site enforces HTTPS and uses secure forms for user login and shopping cart operations. However, no explicit security headers were detected in the provided data, and there is no visible security or incident response policy. No vulnerabilities or suspicious activities were identified. Privacy compliance is strong with a comprehensive privacy policy and cookie consent. Overall, the website presents a low-risk profile with a solid business credibility and good technical implementation. Strategic improvements could include enhancing security headers and publishing an incident response policy to further strengthen trust and security posture.

G

Garant Group

garant.eu

53

Garant Group is a maritime services company specializing in ship maintenance and repair, marine life-saving and fire protection inspections, diving services, and mooring & lifting solutions. The company positions itself as a global solutions partner targeting maritime industry professionals and ship operators. The website is multilingual, primarily in English, with Latvian and Russian options, indicating a regional focus in the Baltic area. The business model is B2B, providing specialized maritime services with 24/7 availability, reflecting a medium-sized enterprise with consistent branding and good content quality. Technically, the website is built on the MODX CMS platform and employs modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The presence of Cloudflare-related cookies suggests the use of Cloudflare for hosting or CDN services. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident in the HTML content. There is no published security policy or incident response contact, and no vulnerability disclosure or security.txt file was found. The site uses several third-party scripts for analytics and marketing, which increases the tracking footprint but is managed transparently via consent. Overall, Garant.eu presents a professional and trustworthy online presence with good privacy compliance and a solid technical foundation. To enhance security posture and compliance, the company should consider publishing explicit security policies, implementing additional security headers, and providing incident response contacts. These steps will strengthen trust and reduce potential risks associated with third-party integrations and regulatory requirements.

E

EMCÉ Winches

emce.com

60

EMCÉ Winches is a well-established manufacturer specializing in high-quality lifting and pulling equipment such as winches and capstans, serving diverse industrial sectors including energy, marine, oil & gas, and renewables. The company has a strong market presence with over 80 years of experience and a medium-sized operational scale based in the Netherlands. Their website reflects a professional business model focused on custom engineering and global support services. Technically, the website is built on a Yii PHP framework with modern JavaScript libraries and analytics tools, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and CSRF protections but lacks DNSSEC and explicit security headers, and no published security or incident response policies were found. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

R

RoyalRoos B.V.

royalroos.com

60

RoyalRoos B.V. is a specialized maritime engineering company focused on green shipping solutions, including retrofit technologies to reduce emissions and fuel consumption. The company operates primarily in the Netherlands and Spain, serving clients in the maritime and offshore sectors. Their website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on Webflow with modern JavaScript libraries and uses HTTPS with good performance, though some security headers are missing. Privacy compliance is partially addressed with a privacy statement but lacks cookie consent mechanisms. The absence of WHOIS data raises some legitimacy concerns, but the presence of verifiable contact information and reputable client logos supports business credibility. Overall, the company appears legitimate and focused on sustainable maritime engineering.

S

Seazip Offshore Service BV

seazip.com

55

SeaZip Offshore Service BV operates as a maritime partner specializing in offshore service vessels, particularly Crew Transfer Vessels (CTVs), targeting the offshore energy and maritime sectors. The company positions itself as a provider of high-performance and safe offshore operations, with a business foundation dating back to 2016. The website reflects a professional maritime service provider with a clear focus on offshore operations expertise. Technically, the website is built on WordPress CMS and leverages modern web technologies including jQuery, Gravity Forms, Google Tag Manager, Google reCAPTCHA, and Foundation CSS framework. The site is mobile optimized and includes SEO best practices such as meta tags and structured data. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, explicit privacy and terms of service pages are absent, and no security headers were detected in the provided data. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the website presents a moderate risk profile with strengths in technical implementation and business professionalism but weaknesses in transparency of domain registration and privacy policy disclosures. Strategic recommendations include adding explicit privacy and security policies, implementing security headers, and clarifying domain registration details to enhance trust and compliance.

E

Welkom bij Oilandgas.nl

energyproduction.nl

47

The website www.oilandgas.nl serves as an informational resource focused on the Dutch energy production sector, specifically oil & gas, geothermal, and wind energy. It provides detailed industry data including exploration and production licenses, company directories, and sells related industry posters and books. The target audience appears to be industry professionals and companies operating within the Netherlands energy market. The business model centers on information dissemination and product sales related to the energy sector. Technically, the website is built on Joomla CMS using the Gantry5 framework, incorporating modern JavaScript libraries such as jQuery, jQuery UI, and Google reCAPTCHA v3 for bot protection. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. From a security perspective, the site uses HTTPS and Google reCAPTCHA but lacks visible security headers and published privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are provided, limiting transparency and trust. No vulnerabilities or malicious content were detected in the provided data. Overall, the website is functional and professional but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trustworthiness and regulatory adherence.

B

BRIDGES2000.NL

bridges2000.com

50

BRIDGES2000 is a Netherlands-based company specializing in the design, manufacture, and rental of safe bridge and gangway solutions primarily serving the maritime, offshore, civil engineering, and event sectors. The company emphasizes safety, fast delivery, and tailored solutions, supported by a strong market presence with thousands of satisfied customers and extensive experience. The website is built on WordPress using the Avada theme and integrates modern SEO and analytics tools, reflecting a moderate to advanced digital maturity. Security posture is generally good with HTTPS enabled and domain transfer protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

O

Oceantic Network

oceantic.org

61

Oceantic Network is a specialized business network focused on the offshore wind energy sector, providing industry stakeholders with networking opportunities, events, and informational resources. The website is built on WordPress and leverages modern web technologies including UIkit, FontAwesome, and Google Fonts, with DNS managed via Cloudflare and domain registration through GoDaddy. The site demonstrates good technical maturity with HTTPS enabled and SEO optimization via Yoast SEO Premium. However, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with domain protections in place but missing DNSSEC and security headers. The site extensively uses third-party tracking and marketing scripts without clear privacy disclosures, which may raise privacy concerns. Overall, the website is professional and relevant to its niche but would benefit from enhanced privacy and security practices.

B

Bayards Helipads

bayardshelidecks.com

49

Bayards Helipads is a specialized company designing, engineering, manufacturing, and installing advanced aluminium helicopter landing platforms for offshore and onshore applications, including hospitals and critical infrastructure. With over 40 years of experience and a global footprint spanning more than 70 countries, Bayards offers turnkey helideck solutions compliant with international aviation and safety standards. The website reflects a professional and well-structured digital presence with rich multimedia content and clear navigation. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and engaging user experience. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of security headers and a security.txt file suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall trust. Contact information and social media presence are clearly provided, supporting business credibility.

C

CSC crewing

csc-crewing.com

53

CSC Crewing is a well-established certified manning agency specializing in crew management, recruitment, and payroll services for the energy, maritime, and project staffing sectors. With over 27 years of history in maritime manning and a membership in the Oceanwide group, the company holds a strong market position in the Netherlands and internationally. Their website reflects a professional and business-focused approach, targeting companies requiring qualified personnel for offshore and onshore operations. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Yoast SEO, ensuring good SEO and user experience. The site is mobile-optimized, fast-loading, and integrates Google Tag Manager and Google reCAPTCHA for analytics and security. However, some security best practices like DNSSEC and security headers are missing, and there is no visible cookie consent mechanism. The security posture is solid with HTTPS enforced and form protections in place, but improvements are recommended in DNS security and HTTP headers. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration without privacy protection, which supports transparency. Overall, CSC Crewing presents a trustworthy and professional online presence with moderate to high digital maturity. Strategic enhancements in privacy compliance and security headers would further strengthen their posture and compliance with evolving regulations.

H

Holland Shipyards Group

hollandshipyardsgroup.com

61

Holland Shipyards Group operates as a maritime shipbuilding and services company specializing in new vessel construction, repair, conversions, and rentals. Their market position is that of an established medium-sized player in the Netherlands maritime sector, offering a broad range of vessel types including tugs, ferries, dredging vessels, and accommodation units. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on the Webflow platform, leveraging modern web technologies and analytics tools such as Google Analytics and Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks advanced security headers and published security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear consistent and trustworthy. Overall, the site scores well in content quality and privacy compliance but should improve security transparency and domain registration clarity.

T

Tricore Technical Services

tricore-ts.com

51

Tricore Technical Services is a UK-based company specializing in manpower solutions, installation, and maintenance services primarily for the renewable energy and oil & gas sectors. With over 25 years of industry experience, they position themselves as a market leader offering advanced digital project management tools and virtual reality training solutions. Their client base includes prestigious organizations, and they emphasize safety, innovation, and on-time delivery. The website is professionally designed using WordPress and Elementor, integrating modern marketing and analytics tools such as HubSpot and Microsoft Clarity. The site is mobile-optimized and SEO-friendly, providing a good user experience. However, the domain is very new and recently expired, which raises concerns about continuity and security. No explicit privacy policy or terms of service are found, though a comprehensive cookie consent mechanism is implemented. Contact information is primarily via a contact form, with no direct emails or phone numbers visible on the homepage. Security posture is generally good with HTTPS enabled, but improvements are recommended including domain renewal, DNSSEC activation, and publishing security policies. Overall, the website reflects a credible and professional business but requires attention to domain management and privacy compliance to enhance trust and security.

S

Sonardyne

sonardyne.com

62

Sonardyne is a well-established company specializing in underwater technology with over 50 years of experience. The company offers a broad range of products and services including underwater positioning, navigation, monitoring, communications, marine robotics, and custom engineering solutions primarily targeting energy, defense, and ocean science sectors. The website reflects a professional and comprehensive digital presence with clear branding and detailed content about their expertise and product offerings. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts could be improved. The absence of WHOIS domain registration data is a notable transparency gap, but the overall business credibility remains high based on website content and corporate affiliations. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving contact information visibility to strengthen trust and compliance.

T

Total Safety

totalsafety.com

66

Total Safety is a global enterprise specializing in advanced industrial safety solutions, including equipment rental, PPE distribution, specialized safety personnel, and compliance services. The company serves multiple sectors such as energy and transportation, positioning itself as a market leader with a broad portfolio and global footprint. Their website reflects a mature digital presence with professional design, comprehensive service offerings, and strong trust indicators including client logos and industry certifications. Technically, the site is built on WordPress with modern libraries and analytics tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and explicit security policies are recommended. Privacy compliance is partially addressed with cookie consent but lacks a clear privacy policy page. WHOIS data is missing, which is unusual and reduces trust slightly, but the overall business credibility remains high based on content and branding.

R

Rossi S.P.A

rossi.com

67

Rossi S.P.A is a well-established Italian manufacturing company specializing in gear reducers, gearmotors, and electric motors since 1953. Positioned as a world leader in their industry, they serve complex industrial applications with a broad product portfolio and digital services such as configurators and customer portals. The website demonstrates a mature digital infrastructure leveraging Sitecore CMS, Microsoft Azure hosting, and modern frontend technologies including Bootstrap and FontAwesome. Analytics and marketing tools like Google Analytics, Hotjar, and LinkedIn Insight are integrated with a strong cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data for the domain is a notable concern requiring verification to confirm domain legitimacy. Overall, the site is professional, user-friendly, and trustworthy, supporting a large industrial business with global reach.

M

Møllerodden AS

mollerodden.no

56

Møllerodden AS is a well-established Norwegian company specializing in quality lifting equipment for onshore and offshore applications. Founded in 1960, the company offers a broad range of products including blocks, sheaves, hooks, and swivels, with a focus on custom solutions and certified load testing. Their market position is strong within the energy and transportation sectors, supported by recognized certifications such as Achilles and DNVGL. The website reflects a professional business with clear contact information and product offerings, targeting industrial clients globally. Technically, the website is built on WordPress with WooCommerce, utilizing modern plugins like WPBakery Page Builder and Slider Revolution. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and formal security policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies or consent mechanisms, which could pose regulatory risks especially under GDPR. The absence of a vulnerability disclosure policy and incident response contacts also limits transparency and security readiness. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security governance. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing a vulnerability disclosure policy, and improving accessibility and SEO. These steps will strengthen compliance, security posture, and user trust.

G

Glomar Offshore B.V.

glomaroffshore.com

59

Glomar Offshore B.V. is a family-owned company operating a diverse fleet of purpose-built offshore support vessels, serving primarily the energy and maritime sectors in Europe, the Mediterranean, and North/West Africa. The company emphasizes sustainability, safety, and tailor-made vessel designs, positioning itself as a reliable mid-sized player in the offshore support vessel market with 21 vessels and over 250 crew members. The website reflects a professional and consistent brand image with detailed business and fleet information, supported by recognized certifications such as ISO 9001, ISO 14001, ISO 45001, and IMCA membership. Technically, the website is built on WordPress with modern libraries and good SEO and accessibility practices. Security posture is strong with HTTPS, reCAPTCHA protection, and domain transfer restrictions, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is basic with clear privacy and cookie policies but lacks explicit consent mechanisms. Overall, the site is trustworthy, well-maintained, and suitable for its target audience.

N

Nortek

nortekgroup.com

64

Nortek is a specialized technology company focused on oceanographic and subsea navigation solutions, offering advanced Doppler Velocity Log (DVL) and Acoustic Doppler Current Profiler (ADCP) technologies. The company targets marine scientists, oceanographers, and subsea navigation professionals, positioning itself as a key player in the marine technology sector. The website reflects a professional and consistent brand image with good content quality and relevant business descriptions. Technically, the site employs modern frontend technologies such as Tailwind CSS, Vite, and jQuery, hosted behind Cloudflare with HTTPS enabled, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent management via Cookiebot, though there is room for improvement in security headers and published policies. Overall, the site is trustworthy and well-maintained but lacks explicit privacy and security policy documentation.

Victoria Trading Bohemia, spol. s r.o. is a Czech-based private transport and forwarding company established in 2013. The company specializes in domestic and international road freight transport, forwarding services, and warehousing solutions. Their website presents a professional image with clear business information, including contact details and physical addresses in Prague and Králův Dvůr. The company operates its own fleet and offers consulting services related to warehousing processes. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, providing a modern and responsive user experience. Security posture is adequate with HTTPS enabled and a cookie consent banner implemented, but lacks advanced security headers and explicit security policies. No privacy policy or terms of service pages were found, indicating room for compliance improvements. Overall, the website is functional, professional, and trustworthy, serving its target audience of businesses requiring transport and logistics services.

B

Bioveta, a.s.

bioveta.cz

45

Bioveta, a.s. is a modern pharmaceutical company specializing in the production of veterinary and human medicines with a global presence, exporting to over 90 countries. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. The business targets veterinary professionals, farmers, and distributors, offering a broad catalog of veterinary pharmaceuticals and related services. Technically, the website uses common web technologies such as jQuery, Google Analytics, and Facebook SDK, and is built on the WebRedakce CMS platform. It demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and explicit security policies. The security posture is moderate with a well-implemented cookie consent mechanism and no visible vulnerabilities in the HTML content. However, the absence of WHOIS data limits domain legitimacy verification, which is a concern for trust assessment. Overall, the website is functional, professional, and compliant with GDPR cookie consent requirements but could improve in security transparency and domain registration clarity.

Jítravský Dvorec is a Czech hospitality business offering a wide range of services including apartment-hotel accommodation, wellness, restaurant and pub dining, equestrian facilities, conference rooms, and a bakery. The company targets tourists, families, corporate clients, and wellness seekers, positioning itself as a regional provider of comprehensive leisure and event services. The website is built on WordPress with modern plugins and technologies, featuring good design, mobile optimization, and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data limits full trust assessment of the domain registration, but the website content and contact information indicate a legitimate business. Strategic recommendations include improving security headers, adding vulnerability disclosure mechanisms, and enhancing accessibility compliance.

R

RENOKAR - CNC s.r.o.

renokarcnc.cz

41

RENOKAR - CNC s.r.o. is a Czech medium-sized manufacturing company specializing in automotive sector services, including CNC machining and development of robotic production lines. The company has a history of over 20 years and focuses on processing aluminum profiles, pressure die-castings, and steel forgings. Their website is professionally designed using WordPress and Elementor, featuring multilingual support and good SEO practices. The technical infrastructure includes modern plugins and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although additional security headers could enhance protection. WHOIS data is unavailable, likely due to privacy protection, but the website content and business information support legitimacy. Overall, the site is well-structured, GDPR compliant, and trustworthy for its target industrial audience.

O

Opidum – reality a.s.

bytyprezletice.cz

51

The website bytyprezletice.cz represents a real estate development project by Opidum – reality a.s., focusing on the sale of 57 apartments near Prague. The company positions itself as a regional real estate developer with a clear target audience of home buyers and investors in the Prague vicinity. The site provides comprehensive information about the project, location, and available units, supported by interactive elements and a contact mechanism for customer engagement. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, indicating a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting the business's credibility and customer trust.

G

GK-Solutions s.r.o.

gk-solutions.cz

57

GK-Solutions s.r.o. is a specialized company providing comprehensive solutions for equestrian sports facilities in the Czech Republic. Their services include construction and outfitting of stables, riding arenas, outdoor enclosures, and delivery of related technologies. The company supports clients from initial concept through project realization, including consulting with architects and project planners. The website reflects a professional and focused business with a clear target audience of equestrian facility owners and professionals. Technically, the site is built on WordPress with Elementor and uses modern plugins for SEO, performance, and GDPR compliance. Security posture is good with HTTPS and cookie consent mechanisms, though additional HTTP security headers could enhance protection. The absence of WHOIS data limits domain trust verification, but the site content and structure suggest a legitimate business. Contact information is clearly provided, and the site integrates Google Analytics and Tag Manager for tracking. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations.

C

Czech Equestrian Team

c-e-t.cz

46

The Czech Equestrian Team website serves as the official online presence for the national equestrian team of the Czech Republic. It focuses on promoting the team, its riders, and related equestrian projects, targeting enthusiasts and stakeholders in the equestrian sports community. The site is built on WordPress with modern plugins such as Elementor and WP Rocket, indicating a moderate level of digital maturity and performance optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust verification, but the professional design, consistent branding, and official social media presence support legitimacy. Overall, the site is functional and professional but could improve in privacy compliance and security transparency.

P

Prague Playoffs

pragueplayoffs.com

40

Prague Playoffs is a professionally presented event website dedicated to the 2025 edition of the Prague Playoffs, a major equestrian show jumping event held at the O2 Arena in Prague. The site serves as a comprehensive information hub for attendees, participants, and fans, offering detailed program schedules, ticketing options, VIP services, news updates, and media accreditation. It is closely associated with the Global Champions Tour and Global Champions League, indicating a strong position within the international equestrian sports community. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various JavaScript libraries for UI components and analytics. It integrates multiple tracking and marketing tools such as Google Analytics, Facebook Pixel, and Google Ads conversion tracking, reflecting a mature digital marketing approach. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, no security headers were detected in the provided data, and there is a lack of visible privacy and cookie policies, which are important for GDPR compliance and user trust. The WHOIS data is missing or unavailable, which raises questions about domain registration legitimacy, though the website content itself appears professional and trustworthy. Overall, Prague Playoffs presents a credible and well-maintained digital presence for a significant sporting event, but it would benefit from enhanced transparency in privacy practices, improved security headers, and clearer contact information to strengthen its security posture and compliance.

L

LIPNO REAL s.r.o.

lipno-invest.com

49

Lipno Invest operates as a specialized real estate investment and development company focused on properties around Lake Lipno in the Czech Republic. The company offers construction, sale, and rental of resorts, houses, and apartments directly on the lake, emphasizing architectural quality and natural surroundings. It is part of the Group Dorn-Fussenegger and has a family-owned business background with over 20 years of market presence. The website reflects a professional and consistent brand image targeting investors and buyers interested in lakeside real estate. Technically, the website uses modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for security on forms. The site is mobile optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. However, no CMS or hosting provider details are explicitly detected. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Cookie consent is implemented with granular user controls. However, no explicit security policy or incident response information is found, and security headers are not detected, which are areas for enhancement. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the website is safe, professional, and trustworthy for general audiences with a strong business focus on real estate investment. The main risk is the lack of WHOIS transparency, which should be addressed to improve trustworthiness and compliance.

L

Lipno Rent s. r. o.

lipno-rent.com

49

Lipno Rent s. r. o. is a family-owned company operating in the hospitality and real estate rental sector, specializing in holiday accommodation on Lipno Lake in the Czech Republic. The company is part of the Gruppe Dorn-Fussenegger and offers a range of services including property rental, management, recruitment, and related real estate services. The website is professionally designed with multi-language support and integrates Google Maps for property visualization. It maintains a clear privacy and cookie policy with GDPR compliance and provides transparent contact information including phone, email, and physical addresses. However, the domain WHOIS data is not publicly available, which raises some concerns about domain registration transparency.

N

NexGen IT s.r.o.

lipno-real.com

47

Lipno Real is a specialized real estate business focusing on luxury and investment properties around Lipno Lake in the Czech Republic. The website presents a professional portfolio of houses, apartments, and plots for sale, targeting affluent buyers and investors interested in this recreational area. The business model centers on brokerage and property sales with additional rental services. The company behind the website appears to be NexGen IT s.r.o., likely the developer or operator of the site. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics, Google Tag Manager, Google Consent Mode, and Tawk.to chat widget. The site is mobile-optimized with good SEO practices and moderate performance. SSL is properly configured ensuring secure HTTPS connections. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could improve its security posture. Privacy compliance is basic; no explicit privacy or cookie policies were found, and GDPR compliance indicators are minimal. Contact information is available but limited to an email address and contact forms, with no phone numbers or physical addresses explicitly listed. The WHOIS data for the domain is unavailable, indicating either a very recent registration or privacy protection, which slightly reduces trustworthiness. Despite this, the website content and professional presentation support the legitimacy of the business. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy disclosures and security headers to improve compliance and security posture.

D

DATEX II

datex2.eu

51

DATEX II is a European standard organization focused on traffic and travel information exchange. The website serves as a hub for specifications, implementations, user domains, documentation, and educational resources related to the DATEX II standard. It targets stakeholders in the transportation sector across Europe, providing authoritative content and event information. The site is built on a WordPress platform using modern themes and plugins, ensuring a good user experience and mobile optimization. Security measures include HTTPS and Google reCAPTCHA for form protection, but lack explicit security policies and vulnerability disclosures. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

C

Czech Space Portal

czechspaceportal.cz

70

The Czech Space Portal serves as the official information and coordination platform for space activities in the Czech Republic, managed under the Ministry of Transport. It provides comprehensive news, event calendars, databases, and strategic information related to national and European space initiatives. The portal targets companies, academia, students, and the general public interested in space industry developments within the Czech Republic. The business model is government-coordinated information dissemination and industry support, positioning it as an authoritative national resource in the space sector. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. It employs Google reCAPTCHA for form security and implements GDPR-compliant cookie consent mechanisms. The site demonstrates good mobile optimization and accessibility, though some improvements in security headers and direct contact information could enhance its posture. Security-wise, the portal uses HTTPS with strong SSL configuration and has implemented cookie consent and anti-bot measures. However, the absence of WHOIS data and lack of explicit security headers slightly reduce its trust score. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the Czech Space Portal is a trustworthy, professional government site with good content quality and technical implementation. The main risk lies in the missing WHOIS data, which should be investigated to ensure domain legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clearer contact information to improve trust and compliance.

E

ERTICO - ITS Europe

itsworldcongress.com

54

The ITS World Congress Birmingham 2027 website represents a major international event organized by ERTICO - ITS Europe, focusing on intelligent transport systems and mobility innovation. The event targets a global audience of industry experts, exhibitors, and partners, offering extensive networking, exhibition, and knowledge-sharing opportunities. The website is professionally designed with clear branding, comprehensive event details, and calls to action for participation and partnership. Technically, the site is built on Drupal CMS with modern JavaScript libraries such as Swiper.js and jQuery, and integrates Matomo analytics and Mailchimp for marketing and user engagement. The site is mobile optimized and accessible, with good SEO practices and a cookie consent mechanism compliant with GDPR. Security-wise, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain is missing, which is typical for subdomains but slightly reduces trustworthiness. Overall, the site demonstrates a strong security posture with room for improvement in security headers and incident response transparency. The overall risk is low, with recommendations to enhance security headers, publish security policies, and consider a security.txt file to improve trust and compliance. The site is safe, professional, and trustworthy for its intended audience.

G

Git

git-scm.org

54

Git-scm.com is the official website for Git, a widely used free and open source distributed version control system. The site provides comprehensive resources including documentation, tools, community links, and download options for Git software. It targets developers and IT professionals seeking efficient version control solutions. The website is mature, well-branded, and positioned as a leader in the version control market with a strong open source community backing. Technically, the site is built using the Hugo static site generator and leverages modern JavaScript libraries such as jQuery and jQuery UI. It is hosted behind Cloudflare DNS and likely CDN services, ensuring fast performance and good availability. The site is mobile optimized and has a clear navigation structure, though accessibility features are basic. SEO optimization is present but could be enhanced. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, DNSSEC is not enabled, and no explicit security headers or policies are published on the site. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and provides valuable content for its audience. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear security and incident response information to enhance compliance and trust.

C

Czechtour

czechtour.net

39

The website www.czechtour.net represents an established chess tournament series in the Czech Republic, active since 2001. It organizes multiple international chess festivals including the well-known CZECH OPEN Pardubice. The site targets chess players and their families, offering tournament participation and accommodation discounts. Technically, the site uses Plume CMS with common JavaScript libraries and Google Analytics for visitor tracking. However, it lacks visible privacy and cookie policies, and no contact information is explicitly provided on the main pages. Security posture is weak due to missing HTTPS confirmation and absence of security headers. WHOIS data is unavailable or the domain is not found in the registry, raising concerns about domain legitimacy and registration status. Overall, the site provides relevant content but requires improvements in security, privacy compliance, and transparency to enhance trust and compliance.

M

Montenegro Chess Federation and the European Chess Union

eycc25.me

46

The European Youth Chess Championship 2025 website serves as the official online presence for a major youth chess event organized by the Montenegro Chess Federation and the European Chess Union. It provides comprehensive event details including registration, official information, venue, accommodation, travel, rules, prizes, and contact pages. The site targets youth chess players and national federations across Europe, positioning itself as a key resource for participants and stakeholders. Technically, the site is built on WordPress with popular plugins like Slider Revolution and WPBakery Page Builder, delivering a modern and responsive user experience with good SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic with a privacy policy and cookie consent banner present, but lacks detailed GDPR compliance indicators or terms of service. Overall, the site is professional, trustworthy, and well-aligned with its event purpose, though it could benefit from enhanced security and compliance transparency.