Security Directory

S

SATOYA s.r.o.

satoya.cz

43

SATOYA s.r.o. is a Czech Republic-based IT service provider specializing in computer sales and servicing, IT outsourcing, web design, hosting services including webhosting, email, cloud, virtual and dedicated servers, and server housing. The company also develops custom software and hardware solutions, targeting businesses and individuals requiring reliable IT infrastructure and support. The website demonstrates a professional digital presence with detailed service descriptions, client references, and a regularly updated blog, indicating active engagement with its audience. Technically, the site is built on WordPress with modern plugins such as Smart Slider 3 and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data due to privacy protection slightly reduces trust but does not detract from the overall legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, publishing security and incident response information, and enhancing security headers and accessibility features.

S

Sprachliche Bildung im Kontext von Migration und Mehrsprachigkeit (BIMM)

bimm.at

58

BIMM (Sprachliche Bildung im Kontext von Migration und Mehrsprachigkeit) is a specialized educational network in Austria focused on promoting quality development and professionalization of educators teaching German as a second language and language education in migration contexts. It operates as a collaborative network of Austrian pedagogical universities, offering seminars, webinars, publications, and advisory services. The website reflects a well-maintained digital presence with a focus on educational content and community engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Bootstrap for responsive design. It uses external libraries like jQuery and CanvasJS for interactive elements. The site is mobile-optimized and includes accessibility considerations, though some improvements could be made. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data aligns well with the website's Austrian educational identity, supporting legitimacy. Overall, BIMM's website is a trustworthy, professional platform serving educators and institutions in Austria. Strategic recommendations include enhancing security headers, publishing a formal security policy, and maintaining regular updates to plugins and themes to ensure ongoing security and compliance.

C

Catering Team Majetić

cateringteammajetic.hr

46

Catering Team Majetić is a well-established catering company based in Zagreb, Croatia, with a strong family tradition dating back to 1998. The company specializes in high-quality catering services for weddings, corporate events, and private celebrations, operating both locally and across Europe. Their business model includes owning exclusive venues and collaborating with prestigious locations, positioning them as a premium service provider in the hospitality sector. The website reflects a professional and consistent brand image, supported by customer testimonials and media coverage. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern tracking tools like Google Tag Manager and Facebook Pixel integrated. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks some recommended security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional, with room for improvement in security and privacy transparency.

Q

Qualentum

qualentum.com

51

Qualentum is a Spanish company specializing in accelerating digital talent through apprenticeship and internship programs, primarily targeting junior tech and digital profiles. It operates as part of the Proeduca group and collaborates with educational institutions such as UNIR and corporate partners like VASS. The website is well-structured, professionally designed, and optimized for SEO, providing clear information about its services and target audiences. However, the absence of WHOIS registration data raises some concerns about domain legitimacy, although the business presence and content suggest a legitimate operation. Technically, the website is built on WordPress using modern tools like Elementor and Yoast SEO, with Google Tag Manager integrated for analytics. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website presents a professional and trustworthy front for a medium-sized education and technology business, but improvements in transparency, privacy compliance, and domain registration clarity are recommended to enhance trust and security.

S

Suzuki

suzuki.hr

49

Suzuki.hr is the official Croatian website representing Suzuki automobiles and motorcycles. The site provides information about Suzuki vehicles with a focus on affordability and quality, targeting general consumers interested in transportation solutions. The website is built on WordPress with modern SEO practices, including structured data and social media integration, indicating a moderate level of digital maturity. Cookie consent is managed via Cookiebot, demonstrating awareness of privacy compliance requirements. However, the absence of a privacy policy and contact information limits full compliance and user trust. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response contacts. Overall, the site is legitimate and professionally maintained but would benefit from enhanced privacy and security disclosures.

P

Poduzetnički centar Zagrebačke županije

pczz.hr

45

Poduzetnički centar Zagrebačke županije is a regional entrepreneurial support institution focused on creating a quality and user-oriented business environment in the Zagrebačka županija region of Croatia. The organization provides key services such as project management, credit guarantees, investment zone support, and advisory services for agriculture and rural development. The website reflects a medium-sized government or non-profit entity with a clear regional focus and a professional online presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Hosting is provided by TOTOHOST d.o.o., a Croatian hosting provider, which aligns with the regional focus. The site is mobile optimized, accessible, and SEO-friendly, with good performance and no detected blocking or WAF interference. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, there is no explicit security policy or incident response information published, and security headers are not detected, suggesting room for improvement in formal security posture documentation and technical hardening. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It serves its target audience effectively, providing relevant content and contact information. Strategic recommendations include publishing formal security policies, adding incident response contacts, and enhancing security headers to improve resilience and trust further.

P

Porto

portotheme.com

59

Porto is a well-established provider of WordPress themes, specializing in WooCommerce and multipurpose themes for businesses and developers. The website showcases a professional design with a focus on clean code and efficient theme solutions, targeting a global audience of website creators and e-commerce operators. The company leverages popular WordPress plugins and SEO tools to enhance user experience and site visibility. Technically, the site is built on WordPress with modern page builders and analytics integration, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and some security best practices, but lacks comprehensive security headers and explicit policies. The absence of WHOIS data and privacy/cookie policies presents compliance and trust challenges. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

W

World Heart Federation

world-heart-federation.org

69

World Heart Federation is a globally recognized non-profit organization dedicated to fighting cardiovascular disease and promoting heart health worldwide. The organization is formally recognized by the WHO and operates through advocacy, education, campaigns, and partnerships. Their website reflects a mature digital presence with comprehensive content targeting health professionals, policymakers, and the general public interested in cardiovascular health. The business model focuses on global health advocacy and community engagement. Technically, the website is built on WordPress with modern technologies including Cloudflare CDN, Google Tag Manager, and CookieYes for privacy compliance. The site is well-optimized for performance, mobile responsiveness, and SEO, demonstrating a high level of digital maturity. Multiple analytics and marketing tools are integrated with user consent mechanisms. From a security perspective, the site enforces HTTPS and uses Cloudflare services for bot management. While some security headers are not explicitly detected, the overall security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear cookie consent and GDPR adherence. However, incident response and security policy pages are not found, suggesting room for improvement in transparency. Overall, the website is trustworthy, professional, and secure, with a strong alignment between WHOIS data and business identity. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to sustain security and compliance.

D

Dreammachine

dreammachine.be

42

Dreammachine is a Belgium-based communication services provider specializing in digital media, video production, e-learning, and consulting for both B2B and B2C clients. Established in 2003, the company targets small and large organizations and institutions, positioning itself as a versatile media partner. The website reflects a professional and consistent brand image with good SEO and structured data implementation, supporting its market presence. Technically, the site is built on WordPress using Visual Composer and integrates modern tools such as Google reCAPTCHA and Google Analytics. Performance and mobile optimization are adequate, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. While the site does not expose vulnerabilities or sensitive data, it lacks a published privacy policy, terms of service, and incident response information, which are important for compliance and trust. Contact information is not clearly presented, which may hinder user engagement and credibility. Overall, Dreammachine's website is functional and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

A

AFS Intercultural Programs

afs.wales

62

AFS Intercultural Programs is a well-established non-profit organization specializing in study abroad and volunteer abroad programs for young adults and secondary school students. With over 70 years of experience, AFS offers scholarships, language courses, and a Global Competence Certificate to prepare participants for global citizenship and professional success. The website reflects a strong market position with comprehensive program offerings and a global network. Technically, the website is built on WordPress with modern plugins and integrations such as Gravity Forms, Google reCAPTCHA, and analytics tools. It uses Amazon Cloudfront CDN for hosting and delivers a responsive, accessible, and SEO-optimized user experience. The site employs security best practices including HTTPS, security headers, and form protections. Security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR. However, the site lacks a dedicated security policy or incident response page, which could enhance trust. Overall, the website is professional, trustworthy, and well-suited to its educational and non-profit mission. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure to further strengthen security transparency and compliance.

A

AFS Interkultur Sverige

afs.se

60

AFS Interkultur Sverige is a well-established non-profit organization based in Sweden, specializing in intercultural exchange programs including student exchanges, host family recruitment, and volunteer opportunities. The organization has a strong market position within the non-profit education sector, targeting youth and families interested in cultural exchange. Their website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the site is built on WordPress with modern SEO and security practices, including HTTPS and Google reCAPTCHA Enterprise integration. While security headers could be improved, the overall security posture is strong with no evident vulnerabilities. Privacy and cookie policies are present and GDPR compliant, supporting good privacy compliance. Contact information is transparent and complete, enhancing business credibility. The domain registration data aligns well with the organization's claims, reinforcing legitimacy and trustworthiness.

I

Intercultura-AFS Portugal

intercultura-afs.pt

62

Intercultura-AFS Portugal is a well-established non-profit organization dedicated to promoting intercultural learning and global education through international student exchange programs. The website serves as a comprehensive portal for students, families, and volunteers interested in participating in or supporting these programs. It offers detailed information about program destinations, application processes, scholarships, and testimonials, positioning itself as a trusted resource in the education sector in Portugal. Technically, the website is built on WordPress with modern SEO and security practices, including HTTPS and Google reCAPTCHA Enterprise integration, ensuring a secure and user-friendly experience. While the site lacks a dedicated security policy or incident response page, it maintains strong privacy and cookie compliance aligned with GDPR standards. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity, supporting its mission effectively.

G

Gativa

gatemait.cz

48

Gativa is a Czech-based company specializing in the implementation and integration of Helios ERP systems and related business automation solutions. Established in 1992, the company positions itself as a trusted partner for small to large enterprises in manufacturing, trade, and services sectors, offering tailored ERP solutions, consulting, and training. Their product portfolio includes Helios Inuvio and Nephrite ERP systems, as well as complementary solutions like MES and WMS. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on business process efficiency and automation. Technically, the website is built on WordPress using modern plugins such as Oxygen Builder, Yoast SEO, and Complianz GDPR for compliance. It employs Google Tag Manager for analytics and tracking, and the site is well-optimized for mobile and SEO. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. The WHOIS data is unavailable, which slightly reduces domain trustworthiness; however, the website content and business information are consistent and professional. No signs of malicious activity or content blocking were detected. Overall, Gativa demonstrates a solid business and technical foundation with room for improvement in transparency around security policies and incident response. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding a security.txt file to improve vulnerability disclosure transparency.

B

B & B Messe und Event Catering GmbH & Co. KG

messehusum-catering.de

47

B & B Messe und Event Catering GmbH & Co. KG operates a professional catering service specializing in trade fairs and corporate events in Husum, Germany. Their website offers full-service catering solutions including food, beverages, and equipment rental with an easy online booking system. The company positions itself as a regional specialist with strong partnerships in the hospitality and beverage sectors. The website is well-branded, consistent, and targets business clients organizing events. Technically, the site is built on WordPress with WooCommerce and several plugins supporting multilingual content, SEO, and user interaction. The hosting provider is inferred as webgo.de based on nameservers. Security posture is good with HTTPS and captcha protection on forms, though security headers and explicit policies are absent. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policy. Overall, the site is professional, trustworthy, and functional with moderate performance and good mobile optimization.

E

EinzigARTig

einzigartig-husum.de

51

EinzigARTig Husum is a small lifestyle event organizer based in Germany, operating a local lifestyle fair known as 'Die kleine Lifestyle-Messe'. The website is built on WordPress using the Divi theme and incorporates SEO best practices with the Yoast SEO plugin. It also uses Borlabs Cookie for cookie consent management, indicating awareness of privacy compliance requirements. The site has a moderate technical infrastructure with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. No privacy policy or terms of service pages were found, which is a compliance gap. Social media presence on Facebook and Instagram supports brand visibility. Overall, the website is professional and trustworthy for its size and market segment, but improvements in privacy and security documentation are recommended.

Q

Qualentum

edix.com

50

Qualentum is a Spanish company specializing in accelerating digital talent through apprenticeship-style programs that combine practical learning with paid work. It operates as part of the Proeduca group and targets both junior technology candidates and companies seeking to develop tech talent. The website is professionally designed using WordPress and Elementor, with good SEO and structured data implementation. However, the absence of WHOIS data raises questions about domain registration legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is safe, professional, and focused on education and technology talent development.

П

ПРОФИ КРЕДИТ България ЕООД

proficredit.bg

48

PROFI CREDIT Bulgaria EOOD operates as a fast credit provider offering installment loans ranging from 100 BGN to 5000 BGN with flexible repayment terms. The company targets Bulgarian individuals aged 18 to 80, providing quick loan approvals with minimal formalities. The website demonstrates a solid market position with over 17 years of experience and multiple physical offices across Bulgaria. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for marketing and analytics. Security posture is good with HTTPS enforced and GDPR compliance evident through privacy and cookie policies. No critical vulnerabilities were detected, and the site maintains trust through certifications and customer testimonials. Overall, the website is professional, secure, and compliant, supporting the company's credibility in the Bulgarian financial services market.

P

Plusto Websites

plustowebsites.com

45

Plusto Websites is a South African-based digital agency specializing in WordPress web development, hosting, and digital marketing services. Established in 2010, the company has developed over 800 websites globally, positioning itself as a trusted provider for businesses seeking cost-effective and evolving digital strategies. Their key services include web design, SEO, PPC advertising, user experience optimization, eCommerce solutions, and graphic design. The website reflects a professional and consistent brand image with clear navigation and client testimonials enhancing credibility. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, integrating Google Tag Manager, Google reCAPTCHA, and HubSpot for analytics and marketing automation. The site is mobile-optimized with good SEO practices and moderate performance. Hosting details are not explicitly stated, but the domain is registered with Tucows Domains Inc. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent management, though security headers and explicit security policies are absent. The security posture is solid but could be improved by adding security headers, incident response information, and a vulnerability disclosure mechanism. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR consent mechanisms. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, Plusto Websites presents a trustworthy and professional digital presence with room for enhanced security practices and transparency in incident response. Strategic recommendations include implementing security headers, publishing a security policy, enabling DNSSEC, and adding a security.txt file to improve security posture and trust.

N

NightsBridge

nightsbridge.com

10

NightsBridge is a medium-sized South African company providing a comprehensive SaaS property management solution tailored for accommodation providers across Africa. Their platform integrates front desk booking, channel management, direct booking engines, payment solutions, and PMS integration, supported by free training and customer support. The company positions itself as a trusted partner for thousands of hospitality businesses, emphasizing ease of use, increased direct bookings, and broad connectivity to online channels. Technically, the website is built on WordPress with a modern tech stack including popular plugins and integrations such as Yoast SEO, Google Analytics, Intercom, and Slider Revolution. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is solid with HTTPS enabled and no exposed sensitive data, but could be improved by adding explicit security headers and cookie consent mechanisms. The security posture is generally good, with no visible vulnerabilities or exposed sensitive information. However, the absence of a cookie consent banner and explicit privacy compliance features indicates room for improvement in regulatory adherence. Incident response and vulnerability disclosure information are not publicly available, which could be enhanced to build trust. Overall, the website and business present a professional and trustworthy image with strong business credibility and technical implementation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to further strengthen the security posture and regulatory compliance.

C

Campaign Monitor

campaignmonitor.com

57

Campaign Monitor is a well-established email marketing platform founded in 2004 and currently owned by Marigold. The company provides a comprehensive SaaS solution for businesses to create, send, and optimize email marketing campaigns, including features such as segmentation, personalization, marketing automation, transactional emails, and analytics. The website reflects a mature digital presence with strong branding, customer trust signals, and a broad set of integrations and marketing tools. Technically, the site is built on WordPress with modern frameworks like Tailwind CSS and integrates multiple analytics and tracking services, demonstrating a high level of digital maturity. Security-wise, the site enforces HTTPS, uses security headers, and implements reCAPTCHA, but lacks publicly disclosed security policies or incident response contacts, which could be improved. Overall, the website is professional, secure, and compliant with privacy regulations, though the absence of WHOIS data is a minor concern that does not detract significantly from its legitimacy.

P

P.P.H.U. KRAKBET MAREK TERMANOWSKI, KRZYSZTOF TERMANOWSKI SPÓŁKA JAWNA

krakbet.pl

10

Krakbet is a well-established concrete production and transport company based in Kraków, Poland, with over 20 years of experience. The company emphasizes high-quality products, advanced technology, and customer-oriented service. Their website reflects a professional digital presence with clear business information, certifications, and a portfolio of projects, positioning them as a leading local manufacturer in the construction materials sector. Technically, the site is built on WordPress with modern plugins and SEO optimizations, though there is room for improvement in security headers and DNS security. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, Krakbet demonstrates a solid security posture with HTTPS and reCAPTCHA integration but could enhance security by enabling DNSSEC and adding security headers. The website is accessible without WAF interference, and the domain registration data supports the legitimacy and longevity of the business.

Ł

Łazienki&Wnętrza

bomar2.pl

10

BoMar 2 operates as a regional retail showroom and online store specializing in bathroom products and interior design solutions across multiple cities in Poland. The company offers a wide range of bathroom fixtures, tiles, furniture, and accessories, targeting both consumers and professional designers. Their market position is supported by multiple physical locations and a dedicated online presence, including specialized panels for designers and wholesalers. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Smart Slider 3, and Cookiebot for consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks explicit security headers and formal security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms of service policies. Overall, the website is professional and trustworthy but could improve in transparency and security best practices.

B

B&S Sławomir Nowak

stabilny.net

51

Stabilny.net is a Polish internet services provider specializing in hosting, domain registration, virtual and dedicated servers, and backup solutions. Established in 2013, the company targets individuals and businesses seeking reliable and secure web hosting services within Poland. Their website reflects a professional and consistent brand image, emphasizing security, technical support, and infrastructure quality. The company maintains a local data center with 24/7 administration and advanced environmental controls, positioning itself as a trustworthy provider in the local market. Technically, the website is built on WordPress using popular plugins such as Visual Composer, LayerSlider, and Contact Form 7. It integrates multiple analytics and marketing tools including Google Analytics, Smartlook, and Salesmanago. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Performance is moderate, and SSL is properly configured, ensuring secure communications. From a security perspective, the site uses HTTPS and reCAPTCHA for form protection but lacks published security policies, vulnerability disclosure, and security headers. DNSSEC is not enabled, which is a recommended improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, stabilny.net presents a credible and professional business with a solid technical foundation and good market positioning. To enhance trust and compliance, the company should publish comprehensive privacy and cookie policies, implement security headers, and provide incident response information. These steps will improve their security posture and regulatory compliance, reducing risk and increasing customer confidence.

C

CRANE

crane.hr

9

CRANE.hr is the official website of the Croatian Investors and Business Angels Association, the oldest such organization in Croatia, focused on connecting private investors with innovative early-stage companies. The website serves as a platform for sharing news, events, and resources related to investment and entrepreneurship in Croatia. It targets private investors and startups seeking early-stage funding, positioning itself as a key national player in the investment ecosystem. The business model revolves around networking, knowledge sharing, and facilitating investments. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO, WPML for multilingual support, Contact Form 7 for contact forms, and WPBakery Page Builder for layout management. The site is hosted by a Croatian hosting provider, cyber_Folks d.o.o., and uses HTTPS with a valid SSL certificate. Performance and mobile optimization are good, though accessibility features are basic. SEO is adequately implemented with meta tags and structured data. From a security perspective, the site uses HTTPS and some security plugins (e.g., Wordfence), but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. Overall, the website is professional and trustworthy with good business credibility and content quality. However, improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

E

E-parapheurs

e-parapheurs.com

51

E-parapheurs is a French-based digital signature and document validation solutions provider targeting enterprises and public sector organizations. The company offers services to simplify and secure document signing workflows, supporting both simple signatures and complex validation circuits. The website is professionally designed using WordPress and Elementor, with modern SEO and privacy consent mechanisms in place. However, the absence of WHOIS registration data raises questions about domain legitimacy, although the website content and partner ecosystem suggest a legitimate business. Security posture is good with HTTPS and cookie consent, but could be improved with additional security headers and explicit privacy policies. Overall, the site presents a moderate risk profile with recommendations to enhance transparency and security.

A

Associacio Catalana de Municipis i Comarques

acm.cat

53

The website acm.cat represents the Associació Catalana de Municipis i Comarques, a regional government association in Catalonia, Spain, founded in 2006. It serves as a platform to provide information, training, consulting, and communication services to municipalities and local government entities. The site is professionally designed using WordPress CMS with common plugins such as Yoast SEO and Cookiebot for privacy compliance. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and DNSSEC. No explicit privacy policy or terms of service pages were detected, though cookie consent is present and GDPR compliant. Contact information is primarily via embedded forms, with no direct emails or phone numbers found. Overall, the domain registration data is consistent and supports the legitimacy of the organization. The site is safe for general audiences and maintains a good level of professionalism and trustworthiness.

U

UGT Catalunya

ugt.cat

60

UGT Catalunya is a regional labor union organization based in Catalonia, Spain, focused on advocating for workers' rights and social welfare. The website serves as an information portal for union members and the general public, providing updates on labor rights and union activities. The organization maintains a consistent brand presence and active social media channels, reinforcing its position as a key player in the regional labor movement. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, LayerSlider, Yoast SEO, and WP Rocket, indicating a modern and maintainable infrastructure. The site is secured with HTTPS and includes essential security headers, contributing to a good security posture. Performance and mobile optimization are adequate, though accessibility features could be improved. Security-wise, the site demonstrates good practices with HTTPS and security headers but lacks explicit privacy policies, terms of service, and incident response contacts, which are important for compliance and trust. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data is privacy protected, which is typical for non-profit organizations. Overall, the website is professional, trustworthy, and serves its audience well. Strategic improvements in privacy disclosures and incident response transparency would enhance compliance and user trust.

T

TTA Personal GmbH

tta-personaltransport.de

52

TTA Personal GmbH is a German-Spanish personnel recruitment company specializing in the placement of Spanish professional bus and truck drivers in Germany. Established in 2011, the company positions itself as a market leader with a large database of over 20,000 drivers and offices in Berlin, Munich, Granada, and Valencia. Their services include recruitment, language training, and placement of various transport-related professions. The website is professionally designed using WordPress and Elementor, with good SEO practices including structured data. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the company appears credible and trustworthy with a solid digital presence but should enhance privacy and security transparency.

I

Incusa

incusa.es

62

Incusa is a medium-sized manufacturing company specializing in the extraction and commercialization of high-purity feldspar and silica sand, serving industrial sectors such as ceramics, glass, foundry, and construction. The company operates internationally, distributing products in over 20 countries and is a subsidiary of the Saint-Gobain Group, indicating a strong market position and reputable backing. The website reflects a professional digital presence built on WordPress with Elementor, optimized for SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit privacy and security policy pages and security headers, which are recommended for compliance and enhanced protection. Overall, the website is trustworthy and well-structured, supporting the company's industrial business model and international reach.

V

Visiteur augmenté

visiteuraugmente.com

56

Visiteur augmenté is a French company specializing in training and enhancing the performance of pharmaceutical sales representatives. Founded in 2023 and part of the EXTREME LIFE group, it offers strategic consulting and innovative tools to pharmaceutical laboratories aiming to improve their sales force effectiveness. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. It integrates GDPR-compliant cookie consent and privacy policies, reflecting a mature approach to privacy and compliance. The technical infrastructure is modern, hosted by OVH, and uses standard analytics and marketing tools such as Google Analytics and Google Tag Manager. Security posture is adequate with HTTPS enforced, though additional security headers could improve resilience. No critical vulnerabilities or suspicious indicators were found. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

L

LUKA & BRAMER GROUP a.s.

lbg.sk

39

LUKA & BRAMER GROUP a.s. is a Slovak real estate investment and development company focused on enhancing infrastructure and quality of life in dynamically growing regions of Slovakia. Their business model emphasizes collaboration with partners, including startups and SMEs, with a focus on transactions typically exceeding 10 million euros. The website presents a professional image with clear business messaging and contact information, targeting investors and business partners in the real estate sector. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, with modern fonts and SEO plugins, though Google Analytics is present but not configured. Security posture is adequate with HTTPS enabled but lacks visible security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

E

ENVIROS

enviros.sk

60

ENVIROS is a Czech-based consulting company specializing in energy and environmental advisory services. The company positions itself as an experienced player with over 30 years in the market and is part of the Komerční banka Group, indicating a strong market presence. Their key services include ESG and sustainability consulting, energy consulting, environmental consulting, and support for grants and subsidies. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, though explicit contact details and security policies are limited in the visible content. WHOIS data is privacy protected, which is common for consulting firms, and does not raise immediate concerns. Overall, the site reflects a mature business with a solid digital presence.

B

Bäder Dunkelmann

baederdunkelmann.de

46

Bäder Dunkelmann is a well-established bathroom renovation and planning company serving Hamburg, Norderstedt, and surrounding areas. With over 55 years of experience, they offer comprehensive bathroom solutions including planning, renovation, and full project management with a focus on stress-free, dust-free implementation and fixed pricing. Their market position is that of a trusted regional specialist with a large showroom and a strong customer base. Technically, the website is built on WordPress with modern plugins and tracking tools, optimized for mobile and SEO. Security posture is good with HTTPS and consent management, though some security headers could be improved. Privacy compliance is strong with a clear privacy and cookie policy and GDPR consent mechanisms. Overall, the website is professional, trustworthy, and well-suited for its target audience.

A

ALPS Electric Czech, s.r.o.

alps.cz

54

ALPS Electric Czech, s.r.o. is a subsidiary of the multinational ALPS ALPINE CO., LTD., specializing in the development and manufacturing of electronic components and automotive infotainment systems. The website serves as a corporate portal providing information for suppliers, potential employees, and business partners. It reflects a medium-sized manufacturing entity with a clear B2B focus. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is professional, well-structured, and trustworthy, with no signs of blocking or WAF interference. WHOIS data is unavailable, likely due to privacy protection, but the website content aligns with a legitimate corporate entity. Strategic recommendations include enhancing security headers and publishing explicit security policies to further strengthen trust and compliance.

A

AFS Intercultural Programs

afs.org

68

AFS Intercultural Programs is a well-established international non-profit organization focused on intercultural learning and global citizenship development through exchange programs, education, volunteerism, and advocacy. The organization has a strong market position with a large global community and a comprehensive digital presence. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging modern technologies such as WordPress, Google Analytics, Hotjar, and Cloudflare CDN. Security posture is solid with HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although some security headers could be explicitly implemented and DNSSEC enabled for enhanced protection. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the domain registration and WHOIS data confirm the legitimacy and trustworthiness of the organization.

M

Monoplay

monoplay.eu

41

Monoplay is a well-established international contemporary dance festival based in Zadar, Croatia, specializing in solo dance performances and educational workshops. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimization. The festival targets dance professionals, students, and the general public interested in contemporary dance. While the site is professionally designed and content-rich, it lacks critical privacy and cookie policies, which affects compliance. Security posture is moderate with HTTPS enabled but missing some security headers. Contact information is primarily via forms, with no explicit emails or phone numbers published. Overall, the site is trustworthy and credible but would benefit from enhanced privacy compliance and security hardening.

T

Teatar EXIT

teatarexit.hr

41

Teatar EXIT is a well-established Croatian theatre company founded in 2003, specializing in provocative and innovative theatrical performances. The website serves as a digital platform to showcase their program, ticket sales, and festival events, targeting a general audience interested in cultural arts. The company maintains a consistent brand presence with active social media channels and a mobile app offering, indicating a moderate level of digital maturity. Technically, the site is built on WordPress with modern libraries and frameworks such as Bootstrap and jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS, GDPR-compliant consent mechanisms, and Google reCAPTCHA on forms, although there is room for improvement in implementing security headers and explicit incident response policies. Overall, the website is professional, secure, and compliant, with a high trustworthiness rating and no detected malicious content.

T

Tina Kadoic

tinakadoic.com

50

Tina Kadoic is a freelance filmmaker specializing in capturing dance, movement, and action, with a strong focus on creating dynamic dance visuals. The website positions Tina as an experienced professional with 13 years in the industry and a portfolio that includes work for major brands. The business model is service-oriented, targeting artists, creators, and dance studios needing specialized video content. The site is well-branded, visually appealing, and integrates multimedia content effectively to showcase expertise. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and content management capabilities. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Hosting and domain registration are stable and consistent with the business claims. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no explicit security or incident response policy published, which could be improved to enhance trust and compliance. Overall, the website presents a professional and trustworthy image with strong business credibility and good privacy compliance. Strategic improvements in security practices and explicit policy disclosures would further strengthen the security posture and user trust.

V

vermed G.m.b.H.

vermed.at

54

vermed G.m.b.H. is a specialized Austrian company established in 1993, focusing on organizing and managing medical conferences, congresses, and educational events. With over 30 years of experience, the company positions itself as a professional and innovative partner in the healthcare event sector, offering end-to-end services from planning to execution and supporting medical publications. The website reflects a mature digital presence built on WordPress, enhanced with SEO and GDPR compliance plugins, indicating a solid technical foundation. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although additional security policies and headers could improve resilience. Overall, the site is trustworthy, professionally designed, and compliant with relevant privacy regulations, supporting the company's credibility in its niche market.

H

Health and Environment Alliance

env-health.org

58

The Health and Environment Alliance (HEAL) is a European non-profit organization dedicated to ensuring that health evidence influences policymaking in environmental health. Their website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. HEAL offers advocacy, research projects, and campaigns focused on chemicals, climate, air quality, and pesticides, targeting policymakers and stakeholders in the health and environment sectors. Technically, the site is built on WordPress with modern plugins and tools such as Gravity Forms, Yoast SEO, and Google Analytics, indicating a well-maintained infrastructure. Security posture is solid with HTTPS and reCAPTCHA protections, though improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data transparency slightly reduces trust but does not outweigh the professional presentation and clear contact information. Overall, HEAL's website is a credible and authoritative platform for environmental health advocacy.

T

Tourism Office Pula

pulainfo.hr

43

Tourism Office Pula operates as the official tourism promotion entity for the city of Pula, Croatia, providing comprehensive information on local attractions, events, accommodation, and visitor services. The website is well-structured, multilingual, and designed to serve tourists and visitors seeking travel-related information. The business model is government-oriented, focusing on tourism promotion and visitor engagement. The site demonstrates a good level of digital maturity with modern WordPress infrastructure, SEO optimization, and accessibility features. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

B

BITWARE j.d.o.o.

bitware.hr

41

BITWARE j.d.o.o. is a Croatian software development company specializing in web and mobile application development, with a strong focus on client relationships and modern technologies. The company has a solid portfolio including projects for cultural institutions, energy companies, and retail businesses, positioning itself as a reputable local technology service provider. Their website is built on WordPress with modern frameworks and includes essential features such as contact forms with reCAPTCHA and cookie consent mechanisms. Security posture is adequate with HTTPS and spam protection, though improvements in security headers and incident response documentation are recommended. Overall, the company demonstrates a professional online presence with clear business information and a trustworthy domain registration history.

W

WYBE

wybe.fr

45

WYBE is a digital agency based in Lyon, France, established in 2017. The company offers digital strategy, web development, and creative digital solutions targeting businesses seeking professional digital services. The website is built on WordPress using Elementor, optimized with Yoast SEO and WPRocket for performance, and includes a cookie consent mechanism via Axeptio. The technical infrastructure reflects a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Overall, the website is professional and trustworthy but could improve transparency and security practices.

B

Bundesverband Altbauerneuerung e.V.

bakaberlin.de

44

Bundesverband Altbauerneuerung e.V. (BAKA) is a well-established non-profit organization based in Germany, focusing on sustainable building, energy efficiency, and education related to building renovation and climate protection. The website serves as a comprehensive platform offering knowledge sharing, networking, certification, and educational seminars targeted at professionals such as architects, engineers, energy consultants, and building owners. The organization leverages a modern WordPress-based infrastructure with WooCommerce for e-commerce functionalities and integrates various plugins for enhanced user experience and SEO. Security posture is solid with HTTPS enforcement, use of reCAPTCHA, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a professional and trustworthy digital presence aligned with the organization's mission and market position.

3

300.codes

300.codes

66

300.codes is a Polish software house specializing in web and mobile development using technologies such as PHP, Vue, React, Python, WordPress, and Webflow. The company positions itself as a boutique-quality software delivery provider focused on achieving marketing and sales goals for its clients. The website is professionally designed with good SEO and mobile optimization, leveraging modern frameworks and tools including Astro, Yoast SEO, Google Tag Manager, and Cookiebot for consent management. Security posture is solid with HTTPS enabled and cookie consent implemented, though explicit security headers and incident response information are absent. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional digital presence suitable for its business domain.

P

Pimec

pimec.org

10

Pimec is a well-established association representing micro, small, and medium enterprises in Catalonia, Spain. Founded in 2001, it serves as a regional SME representative organization providing support and advocacy for its members. The website is professionally designed using WordPress CMS and includes multilingual support and SEO optimization. The technical infrastructure includes modern plugins and Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and published security policies. The domain registration is consistent and trustworthy, reflecting the organization's long-standing presence. Overall, the website is a credible and professional platform for SME representation in Catalonia.

C

Cambra de Comerç de Barcelona

cambrabcn.org

10

Cambra de Comerç de Barcelona is a well-established chamber of commerce serving the business community in Barcelona and Catalonia. Founded in 2001, it operates as a non-profit organization providing business support, training, networking, and advocacy services. The website reflects a professional and consistent brand image targeting local businesses and entrepreneurs. The organization maintains a strong market position as a key regional business entity. Technically, the website is built on WordPress with modern plugins such as Gravity Forms, WooCommerce, and Yoast SEO, indicating a mature digital infrastructure. The site is moderately performant, mobile-optimized, and includes standard SEO and accessibility features. Hosting is provided by Nominalia Internet SL, a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA to protect forms. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security transparency and DNS security. The domain registration data supports the legitimacy and long-standing presence of the organization.

A

Asociace organizací v oblasti vězeňství

aoov.cz

47

Asociace organizací v oblasti vězeňství (AOOV) is a Czech non-profit association founded in 2019, focused on advocacy, knowledge sharing, and progressive reforms in the prison and criminal justice sector. The organization aims to support the integration of formerly incarcerated individuals into society and restore relationships disrupted by crime. The website reflects a professional and consistent brand presence with clear communication of its mission and activities, targeting organizations and professionals in the criminal justice field. Technically, the site is built on WordPress using Elementor and several plugins for SEO, user management, and event/calendar features, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the site is trustworthy, safe for general audiences, and provides clear contact information and social media links, supporting its credibility and outreach efforts.

T

Fitness a wellness | ToFitko

tofitko.cz

46

The website www.tofitko.cz presents a fitness and wellness business targeting a general audience primarily in the Czech Republic. The site is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity. The content is basic but relevant to the fitness and wellness sector, with no detected adult or explicit content. However, the absence of privacy, cookie, and terms of service policies suggests limited compliance with data protection regulations. Security posture is weak due to lack of security headers and no visible incident response or security policies. The WHOIS data is unavailable, which reduces trust and raises concerns about domain legitimacy. Overall, the site is functional but requires improvements in security and compliance to enhance trustworthiness and user protection.

P

PK - stavební s.r.o.

pkstavebni.cz

40

PK - stavební s.r.o. is a small Czech construction company specializing in transportation infrastructure such as roads, parking lots, sidewalks, and cycle paths. Founded in 2021, the company leverages over 15 years of prior experience in the sector. Their website presents a professional image with clear descriptions of services, a gallery of completed projects, and references to reputable partner companies, positioning them as a credible player in their niche market. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by WEDOS. It demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and privacy compliance features. The site uses HTTPS, ensuring secure communications, but does not provide privacy or cookie policies, which is a compliance gap. From a security perspective, the site shows a moderate posture with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and incident response information suggests room for improvement. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the company's founding date, supporting legitimacy. Overall, the website is functional, professional, and trustworthy for its business purpose but should enhance privacy compliance and security best practices to improve its risk profile and user trust.