Security Directory

C

Concours Mondial de Bruxelles

cmsauvignon.com

46

Sauvignon Selection by CMB is a prestigious international wine competition dedicated exclusively to Sauvignon wines, organized by Concours Mondial de Bruxelles. The website positions itself as a world reference for wine competitions, targeting wine producers, sommeliers, distributors, journalists, and consumers interested in Sauvignon wines. It offers services such as wine registration, medal ordering, and publishing competition results, supported by a strong partnership and media ecosystem. The business is medium-sized, founded in 2021, and operates primarily in the hospitality sector with a global reach. Technically, the website is built on WordPress using a custom theme, leveraging modern technologies such as Bootstrap 5, SVG graphics, and analytics tools including Matomo and Google Tag Manager. The site is well optimized for mobile devices, has fast performance, and good SEO and accessibility features. Hosting is provided by OVH sas, a reputable provider. From a security perspective, the site enforces HTTPS and has domain protections like clientDeleteProhibited and clientTransferProhibited statuses. However, DNSSEC is not enabled, and security headers are not explicitly visible, indicating room for improvement. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. No incident response or vulnerability disclosure information is provided. Overall, the website is professional, trustworthy, and well maintained, with a mature audience focus due to its alcohol-related content. Strategic recommendations include enhancing privacy and security policies, enabling DNSSEC, and publishing incident response contacts to improve trust and compliance.

A

Avril

avril.com

70

Avril is a major French industrial group specializing in oils and plant proteins, with a strong commitment to sustainability and serving the earth through addressing climate and demographic challenges. The company operates multiple subsidiaries and brands, offering services across renewable energies, food production, specialty chemicals, agricultural solutions, incubators, and investments. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, cookie consent management, and privacy-focused analytics (Matomo), but lacks some advanced security headers and explicit security policies. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the overall business credibility and trust signals are strong. Privacy compliance is well implemented with clear cookie policies and GDPR adherence. Overall, the site presents a secure and trustworthy digital front for a large industrial enterprise.

F

Fachverband Biogas

biogas-liefert.de

36

Biogas liefert is an educational and advocacy website operated by Fachverband Biogas, focusing on promoting biogas as a sustainable and flexible energy source in Germany. The platform provides informative content aimed at a general audience interested in renewable energy and the energy transition. The site is positioned as a niche player within the energy sector, leveraging official biogas branding and social media channels to reach its audience. Technically, the website uses modern JavaScript modules and SVG graphics, hosted on servers associated with kasserver.com. The site is mobile-optimized with a good user experience but lacks advanced technical frameworks or CMS indications. Security posture is basic, with no evident security headers or published policies, and no forms or data collection mechanisms are present. Privacy and cookie policies are absent, which impacts compliance and trust. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures.

S

SiteOne, s.r.o.

siteone.cz

56

SiteOne, s.r.o. is a Czech-based digital agency specializing in design, development, and digital transformation services. The company positions itself as a stable partner for businesses seeking to translate their business goals into smart digital solutions. Their website demonstrates a professional and modern design, showcasing a strong portfolio of clients and testimonials, indicating a solid market presence in the technology sector. The company targets businesses looking for comprehensive digital solutions including web design, UX/UI, CMS and CRM integration, and technical consulting. Technically, the website employs modern JavaScript frameworks and tracking technologies such as Google Tag Manager, Google Analytics, Hotjar, and Microsoft Clarity. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, the absence of WHOIS data raises questions about domain registration transparency. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy and security best practices. Security headers are partially observed, but explicit CSP headers and security.txt files are not detected. No vulnerabilities or exposed sensitive data were found in the content. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main concern is the lack of WHOIS transparency, which should be addressed to enhance trustworthiness. Strategic recommendations include improving security header implementation, publishing incident response contacts, and adding vulnerability disclosure policies.

I

IÖB - Servicestelle

ioeb-innovationsplattform.at

57

The IÖB Innovationsplattform is a government-backed Austrian platform designed to connect public sector buyers with innovative companies. It serves as a showcase for innovations and facilitates public procurement challenges and a marketplace for novel products and services. The platform is supported by key Austrian ministries and the Bundesbeschaffung GmbH, positioning it as a central hub for innovation in public procurement within Austria. The website is professionally designed, content-rich, and offers multiple services including challenges, innovation presentations, and a newsletter to engage its target audience of public authorities and innovative enterprises. Technically, the site is built on TYPO3 CMS, uses modern analytics and marketing tools, and is optimized for mobile and accessibility. Security posture is strong with HTTPS, cookie consent, and secure forms, though it lacks explicit security policy and incident response contacts. Overall, the platform demonstrates high trustworthiness and professionalism, suitable for its government and innovation ecosystem role.

V

Väre Oy

vappi.fi

63

Väppi® is a Finnish energy app developed by Väre Oy, providing users with personal energy coaching to monitor and optimize their electricity consumption. The app integrates with energy providers such as Väre, Kuopion Energia, and Savon Voima, offering real-time consumption data, billing management, and renewable energy options. The website is professionally designed, mobile-optimized, and provides clear user guidance and partner information. Technically, the site uses modern frameworks like Next.js and React, hosted on AWS infrastructure, ensuring good performance and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with accessible privacy and cookie policies. Overall, the site and business demonstrate high credibility and trustworthiness.

O

OLC systems s.r.o.

olc.cz

50

OLC systems s.r.o. is a Czech Republic-based software development company specializing in custom software solutions, production monitoring, and production management. The company targets businesses requiring tailored software and outsourcing development services. Their website presents a professional image with clear contact information and a focus on technology services. The technical infrastructure is built on WordPress CMS with modern web technologies and includes Google Tag Manager for analytics and marketing. The website is mobile-optimized and uses HTTPS, indicating a baseline of security awareness. However, the absence of WHOIS data and explicit privacy or security policies reduces transparency and trust. Security posture is adequate but could be improved by adding security headers and formal policies. Overall, the website is functional, professional, and safe for general audiences, but domain registration details should be verified for full trust.

P

Recovery - psychoterapie

psychoterapie-recovery.cz

55

The website www.psychoterapie-recovery.cz presents a professional mental health service provider specializing in psychotherapy, addiction counseling, and support for various psychological crises. The site targets individuals seeking mental health assistance in the Czech Republic, offering detailed therapist profiles and clear service descriptions. Technically, the site is built using modern frameworks such as Next.js and React, with good mobile optimization and a clean design. However, the absence of privacy and cookie policies, lack of visible security headers, and missing WHOIS domain registration data present concerns regarding compliance and trustworthiness. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures to improve user trust and regulatory compliance.

O

Ofir d.o.o.

ofir.hr

63

Ofir d.o.o. is a well-established Croatian technology company founded in 2001, specializing in IT support, web development, digital marketing, and training services. The company serves a growing client base with a clear vision of facilitating digital transformation. Their market position is strengthened by over 200 satisfied clients and partnerships with reputable organizations. Technically, the website leverages modern frameworks such as Next.js and React, with WordPress as the backend CMS, indicating a mature and scalable digital infrastructure. The site is well-optimized for mobile and SEO, providing an excellent user experience. Security posture is solid with HTTPS and Cloudflare DNS usage, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with GDPR, supported by ISO 9001 certification and transparent contact information.

L

Home | Luxembourg. Our Common Ground.

luxembourg-ourcommonground.lu

53

The website 'Luxembourg. Our Common Ground.' serves as a cultural and promotional platform highlighting Luxembourg's diversity, multilingualism, and inclusive society. It targets a general audience interested in Luxembourg's heritage, culture, and tourism. The site features rich multimedia content including images, videos, and interactive galleries, supported by modern web technologies such as Typekit fonts, Glide.js carousels, and lazy loading for performance optimization. Cookie consent is managed via CookieYes, indicating some level of privacy compliance. However, the absence of explicit privacy policy, terms of service, and contact information limits transparency and user trust. The WHOIS data is unavailable due to a malformed domain query, which reduces confidence in domain legitimacy but does not necessarily indicate malicious intent. Overall, the site is professionally designed and well-branded, with strong cultural and tourism messaging.

B

Base1

base1.lu

52

Base1 is a youth-focused makerspace and creativity hub based in Luxembourg, offering open access to a makerspace, workshops, and events for young people aged 8 to 30. The organization supports a wide range of creative projects including drone building, coding, video production, and more, fostering innovation and learning in a community environment. The website is multilingual, primarily in French, and integrates modern web technologies with WordPress CMS and various plugins for multilingual support, forms, and cookie management. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published privacy and security policies. The domain registration aligns well with the organization's Luxembourg location and youth focus, indicating legitimacy. Overall, the site is professional, user-friendly, and trustworthy, though improvements in privacy compliance and security transparency are recommended.

F

Festival des Cabanes

cabanes.lu

56

The Festival des Cabanes website represents a youth-focused architecture competition organized in Luxembourg, targeting young people aged 12 to 26. The event is supported by recognized local organizations such as the Service national de la jeunesse and the Ordre des Architectes et Ingénieurs-conseils, positioning it as a niche cultural and educational initiative. The website content is professionally presented, with clear information about the event, its objectives, and timelines, supporting good user engagement and trust. Technically, the site is built on WordPress with modern front-end technologies and is mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy and cookie policies, which are critical for GDPR compliance. Overall, the site is trustworthy and well-suited for its purpose but would benefit from enhanced privacy compliance and security hardening.

ERGO is a well-established insurance provider in Latvia offering a wide range of insurance products for both private individuals and businesses. Their services include vehicle insurance (OCTA, KASKO), health, travel, accident, property, life insurance, and pension products. The company targets Latvian residents and businesses, positioning itself as a comprehensive insurer with a strong local presence and customer support infrastructure. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, Usercentrics for cookie consent management, and Genesys for customer messaging. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Privacy compliance is well addressed through explicit cookie consent mechanisms and a comprehensive privacy policy. From a security perspective, the site enforces HTTPS and uses consent-based tracking, minimizing privacy risks. However, it lacks publicly visible security policies and incident response contacts, which could enhance trust and preparedness. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is solid but could benefit from additional transparency and security headers. The overall risk assessment is low, with the website demonstrating professionalism, compliance, and technical maturity. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture and user trust.

EM-Immobilien is a small real estate company based in Vienna, Austria, specializing in property management and brokerage services. The website serves as a basic informational portal targeting individuals and businesses seeking real estate services locally. The company branding is moderately consistent, with a focus on personal and individual service as indicated by the tagline and logo. The website content is primarily in German and includes references to key services such as property management and real estate brokerage. However, the site lacks comprehensive business contact details and formal privacy or terms of service documentation.

S

Suomen Ympäristökeskus

itameri.fi

65

The website itameri.fi is an official Finnish government environmental portal managed by Suomen Ympäristökeskus (Finnish Environment Institute). It provides educational and informational content about the Baltic Sea, targeting the general public interested in environmental data, nature, and maritime conditions. The site offers multilingual support in Finnish, Swedish, and English, enhancing accessibility for a broader audience. The business model is informational and service-oriented, focusing on environmental awareness and data dissemination. Technically, the website is built on WordPress and employs modern web technologies including Google Tag Manager for analytics and CookieHub for cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Security posture is solid with HTTPS enforced and no exposed sensitive data, though DNSSEC is not implemented and some security headers could be improved. From a security and compliance perspective, the site lacks explicit privacy and terms of service pages, which slightly reduces privacy compliance scores. No contact emails or phone numbers are directly visible, which may impact user trust and support accessibility. The WHOIS data confirms the domain is legitimately registered to the Finnish Environment Institute with consistent registration details and a long domain age, indicating high legitimacy. Overall, the website is trustworthy, professionally maintained, and serves an important governmental informational role. Strategic improvements include publishing clear privacy and terms policies, enhancing DNS security with DNSSEC, and adding explicit security headers to strengthen the security posture further.

S

Suomen ympäristökeskus

syke.fi

65

Suomen ympäristökeskus (Syke) is a Finnish governmental environmental research and expert center providing comprehensive environmental data, research, and services. The website serves as a portal for information about their activities, projects, publications, and open job positions, targeting environmental professionals, authorities, researchers, and the general public interested in environmental issues. The organization has a strong market position as a key national environmental authority in Finland, with a large operational size and a 30-year history. Technically, the website is built on Drupal 10, uses modern web technologies including SVG graphics, Google Tag Manager for analytics, and CookieHub for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not published. Overall, the site demonstrates a mature digital presence with strong privacy compliance and business credibility. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. No suspicious or malicious indicators were found. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing direct contact options for security matters.

S

STUDENT AGENCY TRAVEL k.s.

regiojethotels.cz

55

Regiojethotels.cz is a professionally managed hospitality website operated by STUDENT AGENCY TRAVEL k.s., offering a network of hotels, cottages, and pensions primarily in the Czech Republic and Austria. The business targets families, skiers, tourists, and corporate groups seeking self-service lodging with half-board dining options. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated with Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is trustworthy, user-friendly, and well-positioned in its niche market.

K

Kubíček Factory s.r.o.

kubicekvisionair.com

56

Kubíček Visionair, operated by Kubíček Factory s.r.o., is a leading Czech manufacturer specializing in custom inflatables with over 30 years of experience and a portfolio exceeding 20,000 products. Their market position is strong within the manufacturing sector, targeting businesses and organizations needing inflatables for events, advertising, and artistic purposes. The company emphasizes quality craftsmanship, user-friendly designs, and expert technical support. Technically, the website is modern, mobile-optimized, and uses contemporary JavaScript frameworks like Alpine.js, with Google Tag Manager and cookie consent mechanisms implemented for privacy compliance. Security posture is solid with HTTPS and cookie consent, though DNSSEC is not enabled and security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence. Strategic recommendations include enhancing DNS security, adding security headers, and publishing a formal security policy and incident response contacts.

P

Promon

promon.io

76

Promon is a specialized mobile and desktop application security company with nearly two decades of experience, offering no-code solutions that protect apps, APIs, and SDKs across multiple industries including finance, healthcare, gaming, and government. Their product suite includes runtime protection, code obfuscation, app attestation, and asset protection, supported by recognized certifications such as EMVCO and ISO 27001. The website is professionally designed, mobile-optimized, and built on HubSpot CMS with modern analytics and consent management tools. Security posture is strong with HTTPS and privacy mechanisms, though explicit security headers and incident response contacts are not publicly visible. WHOIS data shows privacy protection typical for tech firms, with no suspicious indicators. Overall, Promon presents a credible, trustworthy, and technically mature digital presence.

P

Promon

promon.co

76

Promon is a specialized mobile app security company offering a comprehensive suite of products designed to protect mobile, desktop, and SDK applications from tampering, reverse engineering, and fraud. With nearly two decades of experience, Promon serves a diverse set of industries including finance, healthcare, gaming, and government. Their solutions emphasize no-code integration, operational efficiency, and multi-layered protection. The website reflects a mature digital presence with strong branding, rich content, and a focus on enterprise customers. Technically, the site uses modern technologies such as HubSpot CMS, Google Tag Manager, and Cookiebot for consent management, ensuring good performance and compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit privacy policies and terms of service pages are not found in the provided content, which slightly impacts privacy compliance scoring. Overall, Promon demonstrates a high level of professionalism and trustworthiness in the mobile app security market.

B

Bundesverband der Deutschen Luft- und Raumfahrtindustrie e.V. (BDLI)

bdli.de

61

The Bundesverband der Deutschen Luft- und Raumfahrtindustrie e.V. (BDLI) is a prominent German aerospace industry association representing a broad spectrum of companies from engineering service providers to international system manufacturers. The website serves as the official digital presence, providing industry news, campaigns, event information, and member services. It targets industry stakeholders, policymakers, and professionals interested in aerospace and defense sectors. Technically, the site is built on Drupal 10, leveraging modern analytics (Matomo) and consent management (Usercentrics), ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's authoritative market position.

G

Groove

groovehq.com

60

Groove is a SaaS company providing a simple yet powerful help desk software solution targeted primarily at small and growing businesses. Positioned as a top-rated alternative to enterprise tools like Zendesk, Groove offers key services including a shared inbox, knowledge base, live chat, reporting, and integrations. The website demonstrates a strong market presence with over 2,000 customers and 12,500+ support agents using the platform daily. Technically, the site employs modern analytics tools such as PostHog and Google Tag Manager, and is well-optimized for performance and mobile devices. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data transparency slightly reduces trust but does not negate the professional and credible business presentation. Overall, Groove presents a mature digital presence with solid business credibility and technical implementation.

C

Czater

chater.app

62

Chater is a Polish-based technology company offering a comprehensive SaaS platform that integrates multiple customer communication and marketing automation tools such as live chat, callback, video chat, chatbot, e-assistant, and e-calendar. The platform targets businesses seeking to streamline customer engagement and improve sales and service efficiency. With over 25,000 customers, Chater positions itself as a trusted all-in-one solution provider in the customer service technology market. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress and modern web technologies. Security posture is solid with HTTPS, cookie consent, and spam protection on forms, though explicit security and privacy policies are not found in the provided content. WHOIS data confirms legitimacy with consistent registrant information matching the business location and branding.

Mediaplus.pl is a Polish media or digital marketing company website featuring a visually rich homepage with video background and graphical content. The site includes social media links to LinkedIn and Facebook and a partner link to groupone.pl, indicating business partnerships. However, the site lacks textual content describing the business, contact details, or legal policies, limiting transparency and user trust. Technically, the site uses modern HTML5 and CSS with Google Fonts and SVG graphics but lacks active analytics or tracking scripts. Security posture is minimal with no visible security headers or privacy policies, and no HTTPS information was provided. Overall, the site is accessible without WAF or blocking mechanisms but requires improvements in privacy compliance, contact transparency, and security best practices to enhance trust and compliance.

A

Agencja Interaktywna r360

r360.eu

65

Agencja Interaktywna r360 is a professional digital marketing agency based in Poland, specializing in Google Ads, Facebook Ads, social media management, content marketing, website creation, and event promotion. The agency holds a Google Partner certification, indicating recognized expertise and competence in managing Google advertising campaigns. Their website demonstrates a strong market position with a medium-sized team and a portfolio of reputable clients, supported by their affiliation with Grupa MTP. Technically, the website uses modern web technologies including AngularJS, Google Tag Manager, and responsive design, ensuring good user experience and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and a formal security policy is absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

P

Plastech

plastech.pl

45

Plastech operates as a well-established Polish online portal dedicated to the plastics and packaging industry, providing comprehensive news, B2B marketplace services, company directories, event listings, and forums. The website targets professionals and businesses within manufacturing, recycling, and packaging sectors, positioning itself as a key industry information hub since 2002. The business model revolves around content provision and advertising services, supported by a network of industry partners. Technically, the website employs modern web technologies including Bootstrap 5 and Cloudinary for image hosting, ensuring fast performance and excellent mobile optimization. The site demonstrates good SEO and accessibility practices, with structured navigation and rich content. While the CMS is not explicitly identified, the custom implementation appears robust and professional. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not published, and security headers are not evident in the HTML content. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture but with room for improvement in transparency and policy documentation. Overall, Plastech presents a trustworthy and professional online presence with high content quality and business credibility. The absence of contact emails and phone numbers on the main page suggests reliance on contact forms and social media channels for communication. Strategic recommendations include publishing detailed security policies, incident response information, and enhancing security headers to further strengthen trust and compliance.

I

IDEA Expo

ideaexpo.pl

64

IDEA Expo is a Polish-based event services company specializing in trade fair booth construction and event organization, serving clients across Poland and Europe. The company has a strong market presence supported by over 30 years of experience and is part of the larger Grupa MTP. Their services include booth construction, eco-friendly stands, multimedia, and technical event services. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses AngularJS and integrates Google Analytics and Tag Manager for tracking, hosted by OVH SAS. Security posture is moderate with HTTPS implied but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies, though a consent management script is present. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Recommendations include publishing privacy and cookie policies, enabling DNSSEC, and improving security headers to enhance trust and compliance.

G

GARDENcity Restaurants & Catering

garden-city.pl

63

GARDENcity Restaurants & Catering is a medium-sized hospitality business based in Poznań, Poland, offering restaurant dining, event hosting, and catering services. The company operates multiple restaurant concepts and event spaces, with recognition including a Michelin Guide recommendation for one of its restaurants. The website is professionally designed, mobile-optimized, and integrates modern JavaScript frameworks and analytics tools. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy policies. The domain registration is consistent with the business history and shows no suspicious patterns. Overall, the digital presence supports a trustworthy and established hospitality brand.

V

Vaillant Group

vaillant150.com

49

Vaillant Group is a globally recognized leader in heating technology, celebrating 150 years of innovation and sustainability. The website analyzed is a dedicated campaign site highlighting the company's mission, vision, and sustainability initiatives, including partnerships with WWF and SOS Children's Villages. The company emphasizes eco-friendly heating solutions such as heat pumps, hybrid systems, and hydrogen heating, positioning itself as a market leader in the energy sector. Technically, the site employs modern web technologies, is well-optimized for mobile, and integrates GDPR-compliant consent management. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled. No critical vulnerabilities or suspicious content were detected. Overall, the site reflects a professional, trustworthy, and mature digital presence aligned with Vaillant's corporate values.

E

Eli Lilly and Company

lilly.pl

74

Eli Lilly and Company operates the localized Polish website www.lilly.com/pl to provide information about its pharmaceutical products, therapeutic areas, and corporate responsibility. The site targets healthcare professionals and patients in Poland, offering detailed content about the company's values, products, and safety information. The website demonstrates a mature digital infrastructure using modern JavaScript frameworks and includes comprehensive privacy and cookie consent mechanisms, reflecting compliance with GDPR and local regulations. Security posture is good with HTTPS and consent management, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and well-maintained, supporting Eli Lilly's market position as a leading pharmaceutical enterprise.

H

HWSW Informatikai Hírmagazin

hwsw.hu

40

HWSW.hu is a Hungarian IT news magazine providing comprehensive coverage of information technology topics including news, product tests, videos, podcasts, and career opportunities. The website targets IT professionals and technology enthusiasts primarily in Hungary. It operates as an online media platform with advertising and event promotion as key revenue streams. The site is well-established with consistent branding and good content quality. Technically, it employs standard web technologies such as Google Analytics and Disqus for comments, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and CSRF protections, though lacking explicit security policies or vulnerability disclosure mechanisms. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

R

Ringier Axel Springer Polska sp. z o.o.

raspaid.pl

56

Onet Premium is a subscription-based digital media platform operated by Ringier Axel Springer Polska sp. z o.o., offering access to premium journalistic content from multiple well-known Polish media brands. The platform targets Polish-speaking users interested in high-quality news, podcasts, and exclusive editorial content. The website demonstrates a professional and consistent brand presence with a clear business model focused on content aggregation and subscription revenue. Technically, the site employs modern web technologies including Google Analytics, Tag Manager, Gemius, and a paywall system by Piano, ensuring a mature digital infrastructure. Security posture is strong with HTTPS enforced and consent management implemented, though some security headers and explicit security policies are absent. Privacy compliance is robust, with comprehensive privacy and cookie policies and GDPR consent mechanisms in place. Overall, the site is trustworthy and well-positioned in the Polish media market.

P

Parallax Design

parallaxdesign.com.au

59

Parallax Design is a specialized creative agency based in Australia focusing on branding, strategy, digital, and packaging services primarily for the drinks industry including wine, spirits, and beer. Their website showcases a strong portfolio of clients and projects, indicating a well-established market position within their niche. The company targets both small and large businesses in the beverage sector, offering tailored branding solutions that emphasize quality and market relevance. Technically, the website employs modern JavaScript frameworks and integrates analytics and user behavior tracking tools such as Hotjar and Google Tag Manager, reflecting a mature digital infrastructure. However, the absence of visible privacy and cookie policies suggests room for improvement in privacy compliance. Security posture is generally good with HTTPS enabled, but the lack of security headers and vulnerability disclosure information indicates potential areas for enhancement. Overall, the website is professional, content-rich, and trustworthy, with a moderate to high AI-assessed security and compliance score.

E

Eclipse SRL

turnmyfigma.com

64

TurnMyFigma.com is a specialized service website offering conversion of Figma design files into pixel-perfect Webflow and Shopify websites, including a combined service called Smootify. The business appears to be newly established in 2024, targeting designers and businesses seeking efficient design-to-web development solutions. The website is professionally designed using Webflow, enhanced with SVG logos and Lottie animations, and hosted with Cloudflare DNS services. However, it lacks critical compliance documents such as privacy and cookie policies, which are essential for GDPR and general privacy compliance. Security posture is moderate with HTTPS enabled and domain transfer protections, but missing security headers and incident response information reduce overall security maturity. Contact information is limited to a company email address with no phone or physical address provided. Overall, the site is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

S

Sitetech Solutions Ltd T/A SiteName

sitehost.co.nz

56

SiteHost, operated by Sitetech Solutions Ltd T/A SiteName, is a New Zealand-based hosting provider specializing in cloud containers, virtual private servers, dedicated servers, and domain registration services. The company targets New Zealand businesses and developers, offering a range of scalable hosting solutions with a strong emphasis on performance and customer satisfaction. The website reflects a mature business with over 20 years in the industry and a significant customer base hosting over 30,000 websites. Technically, the website employs modern web technologies including Alpine.js and Tailwind CSS, delivering a fast, mobile-optimized, and accessible user experience. The infrastructure appears self-hosted with a focus on performance and usability. SEO and metadata are well implemented, supporting good search engine visibility. From a security perspective, the site uses HTTPS and has a domain status of OK, but lacks DNSSEC and explicit security headers. No privacy or cookie policies were found, indicating room for improvement in compliance and transparency. No incident response or vulnerability disclosure information is published, which could be enhanced to build trust. Overall, SiteHost presents a professional and trustworthy hosting service with strong business credibility and technical maturity. Strategic improvements in privacy compliance, security policy publication, and DNS security would further strengthen their security posture and customer trust.

H

Hunton Andrews Kurth LLP

hunton.com

73

Hunton Andrews Kurth LLP is a well-established global law firm with over 120 years of history, serving clients primarily in the energy, financial services, real estate, and retail sectors. The firm operates through 18 offices worldwide and employs over 900 professionals. Their business model focuses on providing comprehensive legal services with a collaborative approach, targeting corporate clients and industries requiring specialized legal expertise. The website reflects a mature digital presence with professional design, clear navigation, and extensive content that supports their market position as a leading law firm. Technically, the website employs modern web technologies including Google Tag Manager for analytics and OneTrust for cookie consent management, indicating a commitment to privacy compliance and user experience. The site is mobile-optimized, accessible, and SEO-friendly, though no specific CMS or hosting provider was identified. Performance is moderate, with good use of modern image formats and SVG graphics. From a security perspective, the site uses HTTPS with strong SSL configuration and includes security headers, enhancing protection against common web threats. However, there is no publicly available security policy or incident response information, nor a vulnerability disclosure program, which could be areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website presents a low-risk profile with high business credibility and professionalism. The absence of WHOIS data for the exact www.hunton.com domain is noted but does not detract from the legitimacy of the firm given the comprehensive and consistent website content. Strategic recommendations include publishing explicit security policies, establishing a vulnerability disclosure channel, and enhancing transparency around data protection officer contacts and certifications.

5

543 Website Design

543websitedesign.co.nz

60

543 Website Design is a small New Zealand-based professional web design and digital marketing agency founded in 2015. They offer affordable, high-quality website design, branding, SEO, social media management, and online advertising services targeting small businesses across New Zealand. Their business model includes both professional design services and a DIY website builder option, positioning them as a versatile and accessible provider in the NZ market. The website content is well-structured, professional, and rich with client testimonials and trust signals, reflecting a strong market presence and customer focus. Technically, the website leverages modern web technologies including JavaScript, service workers for PWA capabilities, and integrates multiple marketing and analytics tools such as Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Google Tag Manager. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a mature digital infrastructure. However, explicit privacy and cookie policies are not found, which is a gap in compliance and user transparency. From a security perspective, the site uses HTTPS and employs service workers, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain reduces trust slightly, though the website content and business information are consistent and credible. Overall, the site demonstrates a good security posture but would benefit from enhanced privacy compliance and security transparency. The overall risk assessment is moderate-low risk with recommendations to implement privacy and cookie policies, add security headers, publish incident response information, and verify domain registration details. These steps will improve trust, compliance, and security posture, supporting the company’s professional image and customer confidence.

H

Hodgson Russ LLP

hodgsonruss.com

59

Hodgson Russ LLP is a well-established Am Law 200 law firm providing comprehensive U.S. legal services to clients across the United States, Canada, and Europe. The firm emphasizes sophisticated legal solutions and has a large team of attorneys and support staff covering over 90 practice groups. Their market position as a top 200 law firm reflects a strong reputation and broad service offering. The website is professionally designed with clear navigation and modern web technologies, including Google Analytics and Tag Manager for analytics and tracking. The site is mobile optimized and accessible, providing a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a public security policy are absent. WHOIS data is unavailable, which slightly reduces trust but the overall professional presentation and active social media presence support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and providing direct contact information for security incidents to improve trust and compliance.

G

Grafyska

grafyska.nl

64

Grafyska is a small creative design agency based in the Netherlands, founded in 2020. The company specializes in graphic design, web design, and social media marketing services aimed at businesses seeking distinctive and effective visual communication. Their website demonstrates a strong brand identity with professional design and clear navigation, targeting business clients who want to enhance their marketing presence. The site includes customer testimonials and links to social media channels, reinforcing trust and engagement. Technically, the website employs modern web technologies including JavaScript, CSS, SVG graphics, and Alpine.js for interactivity. It is mobile-optimized and performs well with fast loading times. The site uses multiple tracking and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Pinterest Tag, but lacks a cookie consent mechanism, which is a privacy compliance gap. The domain is secured with HTTPS and anonymizes IP addresses in analytics, reflecting a moderate privacy posture. From a security perspective, the website has a good SSL configuration but lacks security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business claims, showing a domain registration date in 2020 and no privacy protection, which supports legitimacy. Overall, the security posture is adequate but could be improved with additional headers and privacy controls. The overall risk assessment is low, with the main recommendations focusing on enhancing privacy compliance by implementing cookie consent, adding security headers, and publishing security and incident response policies. These improvements would strengthen trust and reduce potential compliance risks while maintaining the website's professional and user-friendly experience.

V

VRT

ketnet.be

76

VRT MAX is the official online streaming platform of VRT, the public broadcaster in Belgium. It offers a wide range of video content including live TV, on-demand programs, and specialized kids content under the Ketnet brand. The platform targets a general audience with a strong emphasis on family-friendly and children’s programming. VRT MAX holds a leading position in the Belgian media market as a trusted public service provider. Technically, the website employs modern web technologies such as React, asynchronous JavaScript bundles, and CSS variables. It supports single sign-on (SSO) authentication and provides mobile-optimized experiences including dedicated iOS and Android apps. The platform is performant, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses SSO for user authentication. It publishes a responsible disclosure policy, indicating a proactive security posture. However, explicit security headers like CSP and HSTS are not detected in the provided data, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is professionally designed, trustworthy, and secure with a high AI-assessed score. The lack of WHOIS data is due to .be domain privacy restrictions but does not detract from the legitimacy of the site. Strategic recommendations include enhancing security headers, publishing a security.txt file, and expanding incident response contact channels to further strengthen security and trust.

C

CS-Cart

cs-cart.com

66

CS-Cart is a well-established eCommerce platform provider specializing in multi-vendor marketplace software solutions for B2B and B2C markets. The company serves over 40,000 customers globally, offering a range of products including marketplace builders, online store builders, custom marketplace development, and managed hosting services. Their website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site employs modern web technologies, including Google Tag Manager, Sendinblue, and Yandex Metrika, and is optimized for mobile devices with fast performance and good SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and visible security policies, which could be improved. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website's content and third-party ratings support its legitimacy. Overall, CS-Cart demonstrates a mature digital presence with room for enhancement in privacy and security transparency.

J

Job Seeker Pty Ltd

jora.com

63

Jora operates as a global job search aggregator, partnering with multiple regional job boards across continents including Africa, Asia, Australia/New Zealand, and Latin America. The company, identified as Job Seeker Pty Ltd, provides a platform to simplify job searching worldwide. The website is professionally designed with a clear focus on job seekers and offers localized versions for various countries. Technically, the site uses modern web technologies including Google Tag Manager and Cloudflare for analytics and hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and CSRF protections, though explicit security headers and privacy policies are missing. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its professional presentation and partnerships.

D

DevPress

devpress.be

50

DevPress is a Belgian technology company specializing in custom WordPress website development and integrations tailored for creative agencies. Founded in 2023, it positions itself as a reliable technical partner delivering pixel-perfect, SEO-optimized, and easy-to-manage websites. The company emphasizes seamless integration with CRM, ERP, and other systems to enhance client experiences. The website reflects a professional and consistent brand image with clear contact channels and a focus on quality service delivery. Technically, the website leverages WordPress with Gravity Forms, jQuery, and Piwik PRO analytics, hosted likely on a LiteSpeed server environment. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO. Security measures include HTTPS, anti-spam plugins, and consent management, though explicit security headers could be improved. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is addressed with a cookie policy and consent mechanism, though a dedicated privacy policy page was not found. The domain registration data aligns with the business claims, supporting legitimacy. Overall, DevPress presents a trustworthy and professional digital presence suitable for its target market. Strategic improvements in security headers and explicit privacy documentation would further enhance trust and compliance.

C

Courtside 1891 - Basketball Live Streams and Highlights

courtside1891.basketball

72

Courtside 1891 is a specialized media platform offering live and on-demand basketball streaming services globally, focusing on major basketball competitions such as FIBA Eurobasket, Asia Cup, AmeriCup, and AfroBasket. The platform targets basketball enthusiasts and sports viewers, providing subscription-based and freemium content models. The website demonstrates a consistent brand presence with professional design and clear navigation, supporting a medium-sized operation in the media sector. Technically, the site employs modern web technologies including service workers for PWA capabilities, lazy loading for images, and integrates analytics and marketing tools such as Google Tag Manager and Hotjar. The presence of a Content Security Policy and HTTPS indicates a good baseline security posture, although additional security headers could enhance protection. Cookie consent is managed via OneTrust, reflecting attention to privacy compliance, though explicit privacy and terms of service documents are not clearly linked. Security-wise, the platform shows a mature approach with encrypted connections and some security best practices, but lacks visible incident response contacts or vulnerability disclosure mechanisms. The absence of WHOIS data limits domain trust assessment, which slightly reduces overall credibility. No adult or questionable content is present, making the site safe for general audiences. Overall, Courtside 1891 presents a solid digital presence with room for improvement in transparency and security policy publication. Strategic recommendations include enhancing security headers, publishing clear privacy and terms policies, and providing contact channels for security incidents to strengthen trust and compliance.

Z

Zelfmoord 1813

zelfmoord1813.be

51

Zelfmoord 1813 is a Belgian non-profit organization dedicated to suicide prevention and mental health support. The website offers multiple channels for help including a 24/7 helpline (1813), chat, email support, and self-help resources. It also provides training and publications for healthcare professionals and engages volunteers. The organization is well-positioned in the healthcare sector in Belgium, supported by recognized partners and government entities. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience.

The website www.casinobonusesindex.ca is a specialized affiliate and informational platform focused on providing Canadian online casino players with comprehensive guides, reviews, and listings of casino rewards, bonuses, and VIP programs. It targets the Canadian gambling market with localized content and multiple language alternate sites. The site is professionally designed with consistent branding, updated content, and a clear navigation structure that supports user engagement and conversion through affiliate links. Technically, the site employs modern web standards, including optimized fonts, SVG logos, and JavaScript-based tracking via Cloudflare Zaraz. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, direct contact information and explicit terms of service are not prominently available, which could be improved for enhanced business credibility. Security posture is good with HTTPS and no visible vulnerabilities, but could benefit from additional security headers and incident response details. Overall, the site presents a trustworthy and professional resource for Canadian online casino enthusiasts.

S

SimplyBook.me

simplybook.it

71

SimplyBook.me is a well-established SaaS provider specializing in online appointment booking and scheduling solutions for service-based industries worldwide. Founded in 2011, the company offers a comprehensive platform including booking websites, widgets, client and admin mobile apps, payment processing, and multi-channel integrations. The business targets a broad audience of small to medium enterprises seeking efficient scheduling and client management tools. Their market position is strong, supported by thousands of customers and positive testimonials. Technically, SimplyBook.me employs modern web technologies with a focus on performance, mobile optimization, and accessibility. Hosting is provided by Linode with DNS managed accordingly. The website integrates multiple analytics and marketing tools such as Google Tag Manager, LinkedIn Insight, and Reditus affiliate tracking, demonstrating digital maturity and marketing sophistication. From a security perspective, the company maintains a robust posture with ISO 27001 certification and GDPR compliance. HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. However, some security headers could be improved, and a formal vulnerability disclosure policy is absent. Privacy policies and cookie consent mechanisms are comprehensive and transparent. Overall, SimplyBook.me presents a low-risk profile with strong business credibility, technical soundness, and good privacy and security practices. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen trust and compliance.

B

Bundesinstitut für Arzneimittel und Medizinprodukte (BfArM)

bfarm.de

66

The Bundesinstitut für Arzneimittel und Medizinprodukte (BfArM) is a German federal government agency responsible for the regulation and oversight of pharmaceuticals and medical devices. The website serves as an authoritative source of information for healthcare professionals, pharmaceutical companies, researchers, and the general public. It offers comprehensive content on drug approval, clinical trials, pharmacovigilance, medical device regulation, and opium control. The site is well-structured with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the website is built on the Government Site Builder CMS, optimized for accessibility and mobile responsiveness. It employs modern web standards including HTML5, CSS, and SVG graphics. The site uses HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. Minimal tracking is performed via Matomo analytics, focusing on anonymous statistics. From a security perspective, the site enforces HTTPS and uses session and consent-based cookies. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident in the provided data. There is no published security policy or incident response contact, which could be improved. The WHOIS data is minimal but consistent with a government-managed domain, indicating legitimacy. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It poses low risk from a security and privacy standpoint but could enhance its security posture by publishing explicit policies and implementing additional security headers.

M

Mental Health Innovations

giveusashout.org

68

GiveUsAShout.org is the official website for Shout, the UK's first and only 24/7 free, confidential mental health text service. Operated by the non-profit Mental Health Innovations, the platform provides crisis support via text messaging, alongside online resources and community engagement opportunities such as fundraising and volunteering. The website is professionally designed with clear navigation, strong branding consistency, and a focus on accessibility and user experience. It targets individuals in the UK seeking immediate mental health support or wishing to contribute to the cause. The business model relies on donations and volunteer support, positioning Shout as a leading mental health crisis intervention service in the UK. Technically, the website leverages modern web technologies including SVG graphics, JavaScript, and a CDN hosted on DigitalOcean, with DNS managed via Cloudflare. The site is mobile-optimized, fast-loading, and SEO-friendly. While no major CMS or frameworks are explicitly detected, the custom implementation appears robust and well-maintained. Security posture is good with HTTPS enforced and domain status protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong, with comprehensive privacy and cookie policies and a consent mechanism in place. From a security perspective, the site shows no signs of vulnerabilities or malicious content. The WHOIS data indicates privacy protection for the domain registration, which is justified given the non-profit nature. The domain age aligns with the organization's founding date, supporting legitimacy. No incident response or vulnerability disclosure policies are publicly available, representing an area for improvement. Overall, the site demonstrates a mature security and privacy posture suitable for its sensitive mental health support services. The overall risk assessment is low, with recommendations to enhance DNS security, publish security policies, and implement additional HTTP security headers to further strengthen defenses. The website effectively balances user privacy, accessibility, and trustworthiness, making it a reliable resource for mental health crisis support in the UK.