Security Directory

E

elPetit - festival internacional d'arts per a la primera infància

elpetit.cat

63

elPetit is an international arts festival focused on early childhood, operating primarily in Catalonia, Spain. The festival emphasizes live artistic experiences for young children and runs events across multiple cities. The website reflects a niche cultural organization with a clear target audience of families and early childhood educators. The digital infrastructure is built on modern web technologies including jQuery, Foundation, and Matomo analytics, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional web presence and active social media channels. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving direct contact information visibility.

S

SUBAN d.o.o.

silux.de

55

SILUX.DE is an established e-commerce platform specializing in automotive spare parts, targeting primarily the German market with regional presence in Slovenia and neighboring countries. The company offers a vast catalog of over 130,000 parts including lamps, mirrors, body components, cooling systems, and engine parts, supported by a 365-day return policy, positioning itself as a price-competitive retailer in the automotive aftermarket sector. The website is professionally designed with clear navigation and a mobile-optimized interface, facilitating a positive user experience for automotive parts buyers. Technically, the site employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Facebook SDK, Stripe for payments, and Klaro for cookie consent management. While the site uses HTTPS and some security best practices, there is room for improvement in security headers and explicit privacy policy publication. The site integrates multiple marketing and tracking tools, reflecting a moderate level of user tracking consistent with e-commerce standards. From a security perspective, the site demonstrates a good baseline with HTTPS and secure form handling but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected in the provided content. WHOIS data aligns with the business identity, showing consistent registration details and no privacy protection, supporting domain legitimacy. Overall, SILUX.DE presents a trustworthy and functional e-commerce platform with moderate technical maturity and security posture. Strategic enhancements in privacy compliance documentation, security headers, and incident response transparency would further strengthen its risk profile and customer trust.

S

SUBAN d.o.o.

silux-auto.it

57

Silux-auto.it is a professional e-commerce platform specializing in automotive spare parts and accessories, targeting primarily the Italian market with multi-country presence in Europe. The company, SUBAN d.o.o., offers a comprehensive catalog of over 130,000 parts with an extended return policy, positioning itself as a reliable retailer in the automotive aftermarket sector. The website demonstrates a mature digital infrastructure with modern tracking and marketing technologies integrated, including Google Analytics, Facebook Pixel, and Criteo retargeting services. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not published. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and a consent mechanism in place. Overall, the site is professionally designed, mobile-optimized, and provides clear contact information, supporting a trustworthy user experience.

L

Lietuvos žurnalistikos centras

lzc.lt

41

Lietuvos žurnalistikos centras (LŽC) is a Lithuanian organization specializing in journalism education, media research, and communication training. The website presents comprehensive information about their study programs, events, research activities, and expert team. The digital infrastructure is based on WordPress with modern plugins and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies are missing. WHOIS data is unavailable due to query limits, slightly reducing trust. Overall, the site is professional and trustworthy, serving a medium-sized educational and media sector audience.

N

Norwegian Refugee Council

nrc.no

65

The Norwegian Refugee Council (NRC) is a well-established independent humanitarian organization based in Norway, operating globally in over 40 countries to assist displaced persons and refugees. The website reflects a mature digital presence with comprehensive content about their mission, latest news, and global projects. The organization targets donors, partners, and the general public interested in humanitarian aid. Their business model is non-profit, focusing on aid delivery and expert deployment through their NORCAP program. The site is professionally designed with consistent branding and clear trust indicators such as certifications and social media presence. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, Matomo Analytics, Hotjar, and Azure Application Insights, indicating a sophisticated approach to analytics and user engagement. The CMS appears to be Episerver, supporting a structured and scalable content management environment. Performance and mobile optimization are good, with accessibility and SEO features well implemented. From a security perspective, the site enforces HTTPS and uses multiple security best practices, although explicit security headers were not fully confirmed in the HTML. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and verified, enhancing business credibility. The lack of public WHOIS data suggests privacy protection, which is justified for this type of organization. Overall, the NRC website demonstrates a high level of professionalism, security, and compliance suitable for a large humanitarian NGO. Strategic recommendations include enhancing visible security headers, publishing a vulnerability disclosure policy, and maintaining ongoing security audits of third-party scripts to mitigate risks.

D

Danish Cultural Institute

danishculture.com

56

The Danish Cultural Institute is a non-profit organization dedicated to fostering artistic and cultural encounters between Denmark and other countries. It operates internationally with branches in multiple countries and focuses on projects that promote equality, sustainable development, democracy, and civil society. The website reflects a well-structured and professionally maintained digital presence, leveraging WordPress CMS and common web technologies. Privacy and cookie policies are clearly presented with consent mechanisms, indicating good compliance with GDPR standards. Security posture is strong with HTTPS enforcement and security headers, though explicit incident response contacts and security policies are not found. The absence of WHOIS registration data reduces domain trustworthiness but does not detract significantly from the overall legitimacy based on content and external references.

R

RENAISSANCE NOW

renaissancenow-cai.org

44

The website 'RENAISSANCE NOW' is a small-scale arts and culture initiative focused on promoting art as a renewable human resource. It offers educational content such as a certificate program for cities on arts and policy, collections on arts in public service, and a public engagement platform. The target audience includes cultural organizations, policymakers, artists, and the general public interested in societal challenges addressed through art. The business model appears to be non-profit or educational, with a niche market position in arts advocacy and cultural policy education. Technically, the website is built using standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted on Bluehost with WordPress inferred from URL patterns. It uses Google Analytics for visitor tracking and includes video backgrounds for visual engagement. Mobile optimization and accessibility are basic but functional. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain registration protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There are no forms or input fields to assess for secure handling. Privacy and cookie policies are absent, and no contact or incident response information is provided, indicating gaps in compliance and transparency. Overall, the website is legitimate and consistent with a small arts organization but lacks comprehensive privacy, security, and contact information. Recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response details to improve trust and compliance.

C

Clientify

clientify.net

53

Clientify is a technology company offering a SaaS platform focused on CRM, marketing automation, and sales automation targeting corporate users. The website analyzed is primarily a login page with integration for Google OAuth and multiple marketing and analytics tools. The platform appears to be positioned as a professional tool for business users seeking to enhance their digital marketing and sales processes. The technical infrastructure leverages established web technologies such as Bootstrap, jQuery, and integrates with major analytics and advertising platforms including Google, Facebook, TikTok, and LinkedIn. While the site uses HTTPS and includes CSRF protections, some libraries are outdated, and explicit security headers are not evident, indicating room for security improvements. Privacy compliance is basic, with cookie consent implemented but no visible privacy policy or terms of service on the login page. Overall, the site is functional, moderately performant, and professionally branded but could enhance transparency and security posture.

2

2i Global Software

2isoftware.com

47

2i Global Software is a medium-sized technology company specializing in applications development, business intelligence, market research, and veterinary pharma services. Established in 2019 and headquartered in Malta, the company serves governments, educational institutions, and various businesses with custom software solutions and data-driven insights. Their market position is strong within their niche, supported by multiple live systems and key clients including government entities. Technically, the website is built on WordPress 6.1.7, enhanced with NitroPack for performance optimization, and integrates modern tools such as Google Tag Manager, MonsterInsights for analytics, and Google reCAPTCHA v3 for form security. The site demonstrates good mobile optimization, fast loading times, and solid SEO practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA, and maintains a security policy page. However, some security headers like Content Security Policy and X-Frame-Options are missing, and there is no cookie consent mechanism or vulnerability disclosure page, indicating room for improvement in compliance and transparency. Overall, the website is professional, trustworthy, and technically sound, with moderate privacy compliance. Strategic enhancements in security headers, privacy mechanisms, and incident response transparency would further strengthen their security posture and regulatory alignment.

HPE Aruba Networking is a leading enterprise technology provider specializing in security-first, AI-powered networking solutions. As a subsidiary of Hewlett Packard Enterprise, it offers advanced networking products and services including unified SASE, cloud-native network management, private 5G, and Security Service Edge (SSE). The company targets enterprise and business customers seeking secure, scalable, and intelligent networking infrastructure. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding aligned with its parent company. Technically, the site leverages WordPress CMS with modern frameworks and performance optimizations, ensuring fast load times and excellent mobile responsiveness. Security posture is strong with HTTPS enforcement, consent management, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting the company's market position as a trusted enterprise networking leader.

La Redoute Corporate website represents a well-established French e-commerce company specializing in home and fashion products. The company operates a vertically integrated business model, managing product creation, distribution, and delivery from France to a global customer base, primarily targeting women interested in French lifestyle products. The site reflects a large enterprise with a strong market position supported by its parent company, Groupe Galeries Lafayette. Technically, the website is built on WordPress with modern JavaScript libraries and SEO tools, showing good digital maturity and mobile optimization. Security posture is solid with HTTPS, cookie consent, and accessibility features, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, though direct contact details are limited to contact forms. Strategic recommendations include enhancing security headers, publishing incident response information, and adding vulnerability disclosure mechanisms.

T

Triona AB

triona.se

51

Triona AB is a Swedish IT company specializing in innovative IT solutions focused on logistics, infrastructure, and transport sectors. The company positions itself as a leading and reliable supplier combining domain expertise with specialized software products and expert consulting services. Their website reflects a professional and consistent brand presence with clear navigation and relevant business content. Technically, the site uses modern web technologies including Bootstrap, jQuery, and various JavaScript libraries, with moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers and vulnerability disclosure mechanisms. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security transparency and compliance documentation.

University College Isle of Man is a well-established educational institution serving the Isle of Man community with a broad range of educational offerings including further education, higher education, apprenticeships, and adult learning courses. The website reflects a medium-sized institution with a consistent brand presence and a clear focus on student services and community engagement. The institution positions itself as the primary provider of higher and further education on the island, supported by a history dating back to 1975. The website content is relevant and professionally presented, targeting students, adult learners, and local employers. Technically, the website employs a moderately modern technology stack including jQuery, Font Awesome, Owl Carousel, and Typekit fonts, hosted likely on a platform using Umbraco CMS. The site is mobile optimized with good SEO practices and a clear navigation structure. However, some technologies like jQuery 2.2.4 are outdated and could pose security risks. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS (implied by og:url https) and implements a cookie consent mechanism, indicating awareness of privacy compliance. However, no explicit security headers were detected in the HTML content, and there is no visible security policy or incident response contact information. No vulnerability disclosure or security.txt file is present. The site does not appear to use extensive tracking or analytics, which supports privacy compliance but limits marketing insights. Overall, the website is trustworthy and professional with a strong business credibility score. The main risks relate to potential security header omissions and the use of older JavaScript libraries. Strategic improvements in security policies, incident response transparency, and technical modernization would enhance the institution's digital maturity and security posture.

S

SIA SunGIS

sungis.lv

53

SunGIS is a Latvian technology company specializing in geospatial data processing, geographic information system (GIS) development, implementation, and customization. The company offers consulting and training services and develops interactive geographic maps and digital products such as Go GIS and GABALS.

H

Hilfswerk Österreich

hilfswerk.at

36

Hilfswerk Österreich is a large, well-established non-profit organization providing extensive health, social, and family services across Austria. The website reflects a professional and comprehensive digital presence, targeting a broad audience including elderly people, children, families, and caregivers. The organization maintains a strong market position as one of Austria's leading providers in its sector, supported by government funding and a wide range of services. Technically, the website is built on TYPO3 CMS with modern frontend libraries and includes accessibility and SEO best practices. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly undermines the site's security posture. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates high professionalism and trustworthiness but urgently requires SSL implementation to mitigate security risks.

S

Sensorbis GmbH

sensorbis.com

18

Sensorbis GmbH operates a cloud-based telemetry data management platform focused on Internet of Things (IoT) devices and sensors. The company provides subscription services enabling users to acquire, store, visualize, and export telemetry data with real-time charts, maps, and alert notifications. Their target audience includes IoT device operators, industrial machinery managers, and fleet tracking services. The business model centers on SaaS subscriptions with API and web interface management capabilities. The website content is professionally presented with consistent branding and relevant business descriptions, positioning Sensorbis as a niche player in the IoT telemetry cloud market. Technically, the website is built on ASP.NET WebForms with jQuery and Bootstrap, indicating a mature but somewhat dated technology stack. Performance is moderate to slow with a page load time exceeding 5 seconds and a large page size. Mobile optimization and accessibility are basic but functional. The site includes cookie consent mechanisms and privacy policy documentation, though GDPR compliance is not explicitly confirmed. Analytics tracking is present but disabled. From a security perspective, the site suffers from critical issues including the absence of a valid SSL certificate, missing DNS records, and lack of security headers. HTTPS is enforced in the application logic but without a valid certificate, exposing users to risks. No advanced security policies or incident response contacts are published. These vulnerabilities significantly reduce the security posture and trustworthiness of the site. Overall, Sensorbis GmbH presents a credible small technology company with a focused IoT telemetry service offering. However, critical security improvements are necessary to protect user data and enhance trust. Addressing SSL and DNS issues should be prioritized to improve the security score and user confidence.

B

Baustoffservice

baustoffservice.at

38

Baustoffservice is a small Austrian manufacturing business specializing in patented lightweight concrete products (VULKAN and LAVA). With over 30 years of industry experience, they serve architects, construction firms, and public space planners by providing half-finished concrete parts, furniture, and facade elements. Their website is built on the 1AND1/IONOS platform and uses standard web technologies including jQuery and Mapbox. While the site presents clear contact information and social media presence, it suffers from a critical security issue: the absence of a valid SSL certificate and HTTPS support, which severely impacts trust and security posture. Privacy compliance is basic, with a cookie notification but no detailed privacy or security policies. Overall, the site is functional and professionally designed but requires urgent security improvements.

S

Sekoia

sekoia.dk

33

Sekoia is a Danish healthcare software company providing a specialized app for care centers and social service providers to improve planning, documentation, and communication. The company is well-established with a mature domain and a clear market position supported by integrations with KMD Nexus and usage by multiple municipalities. The website is built on WordPress with modern marketing and analytics tools integrated, including consent management for GDPR compliance. However, the site currently lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability that undermines user trust and data protection. Privacy policies and cookie consent mechanisms are well implemented, and contact information is clearly presented. Overall, the business demonstrates good digital maturity but requires urgent security improvements to meet modern standards.

Komáromi Jókai Színház operates an online ticketing platform focused on theatrical performances and cultural events in Komárno, Slovakia. The website provides event listings, ticket purchasing options, and voucher issuance primarily targeting local Hungarian and Slovak-speaking audiences. The business model centers on direct online sales with integrated payment processing via Barion. Technically, the site uses a custom CMS with jQuery, Foundation framework, and several third-party scripts for UI and payment integration. However, the site suffers from a lack of HTTPS, resulting in a critical security vulnerability. The absence of privacy and terms of service pages indicates compliance gaps. Performance is suboptimal with slow load times and a large page size. Security posture is weak due to missing SSL, no security headers, and no email authentication records. Contact information is available but no company emails are published. Overall, the site is functional but requires urgent security and compliance improvements.

I

Interticket.pl

interticket.pl

40

Interticket.pl is a mature Polish e-commerce platform specializing in online ticket sales for concerts, theater, festivals, museums, and cinemas. Established in 2004, it serves primarily Polish-speaking customers with a broad offering of event tickets. The website integrates multiple marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, and maintains active social media profiles to engage its audience. However, the technical infrastructure shows signs of aging, with reliance on older JavaScript libraries and a custom CMS. Performance is suboptimal with slow page load times and a large page size. Critically, the site lacks a valid SSL certificate and does not enforce HTTPS, posing significant security risks.

I

Interticket Kft.

jegy.hu

40

Jegy.hu is a well-established Hungarian online ticketing platform specializing in cultural events such as theater, concerts, festivals, and sports. Founded in 2000, it serves a large audience primarily in Hungary with some regional presence. The platform offers extensive event listings, search and filtering capabilities, and supports affiliate marketing and gift vouchers. Technically, the site uses a custom CMS with modern JavaScript libraries and frameworks, providing a good user experience and mobile optimization. However, a critical security gap is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed with cookie consent mechanisms and comprehensive privacy policies. Overall, the site is professional and trustworthy but requires urgent security improvements.

L

Leagel S.r.l.

leagel.com

40

Leagel S.r.l. is a medium-sized manufacturing company based in San Marino specializing in the production and commercialization of semi-finished products and ingredients for gelato and pastry artisans. The company has a strong international presence and a well-established brand with over 20 years of experience. Their website reflects a professional and consistent brand image, offering multilingual content, downloadable catalogs, and recipe books to support their B2B customers. Technically, the website is built on WordPress with Bootstrap and integrates modern marketing and analytics tools such as Google Tag Manager and HubSpot. However, the security posture is weak due to the absence of a valid SSL certificate and modern TLS protocols, exposing the site to risks and reducing user trust. Privacy compliance is strong, with clear GDPR-aligned policies and consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Suomalainen Lakimiesyhdistys is a well-established Finnish legal association with a long history of supporting legal professionals, researchers, and students through publications, events, and grants. The website serves as an information hub for the association's activities, including event announcements and access to legal literature. The target audience is primarily Finnish legal academics and practitioners. Technically, the site is built on WordPress with common plugins but suffers from slow performance and lacks modern security configurations. The absence of a valid SSL certificate and security headers significantly weakens the site's security posture. Privacy compliance is poor, with no visible privacy or cookie policies. Overall, the site provides good content and business credibility but requires urgent improvements in security and privacy to meet modern standards.

C

Climate Resolve

climateplans.la

40

Climate Plans Los Angeles is a small, niche advocacy and informational website focused on promoting climate-conscious community planning within the City of Los Angeles. The site provides resources and information about local community plan areas and encourages integration of climate considerations into urban development. Technically, the site is built on WordPress with Elementor and uses common web technologies such as jQuery and Bootstrap. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security deficiency. The absence of privacy and cookie policies, as well as contact information, further reduces trust and compliance posture. Tracking technologies like Facebook Pixel and Google Analytics are present, indicating moderate user tracking without clear privacy disclosures. Overall, the site is functional but basic in content quality and technical implementation, with significant security and privacy gaps that should be addressed to improve user trust and regulatory compliance.

L

Landmark Trust Group

landmarktrustgroup.com

63

The website's overall security posture reveals significant gaps that could expose the business to data breaches, regulatory non-compliance, and reputational damage. Critical security headers are missing, undermining protection against common web attacks such as clickjacking, content injection, and cross-site scripting. GDPR compliance is notably weak, with missing cookie policies and consent mechanisms, risking fines and legal repercussions. The absence of documented information security frameworks, incident response, and business continuity plans highlights operational vulnerabilities according to NIS2 standards. Email security is relatively strong but could be improved further. SSL/TLS and DNS configurations require attention to maintain trust and secure communications. While network security appears robust, foundational web and compliance security improvements are urgently needed to safeguard the business and customer data.