Security Directory

A

Aquaponik s.r.o.

aquaponik.cz

43

Aquaponik s.r.o. operates a specialized e-commerce and consulting platform focused on aquaponic farming systems and related products in Central Europe, primarily the Czech Republic. The company offers a range of products including aquaponic systems, water treatment, measurement devices, and hydroponics supplies, targeting both B2B customers and aquaponics enthusiasts. The website presents a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses a modern JavaScript stack including jQuery, Google Tag Manager, and Owl Carousel, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. The absence of WHOIS data reduces transparency and trustworthiness, but the website content and business information appear legitimate. Overall, the site is well-positioned in its niche with room for security and compliance enhancements.

Stredná odborná škola Pruské is a Slovak secondary vocational school specializing in agricultural and horticultural education, including niche fields such as kynology. The institution operates under the regional government of Trenčiansky samosprávny kraj and offers a variety of study programs, vocational training, and extracurricular activities. The website serves as an information portal for students, parents, and the community, providing news, event updates, galleries, and virtual tours. The school maintains active social media channels and uses EduPage for student management. Technically, the website is built on the BUXUS CMS platform and employs modern web technologies including Google Tag Manager, YouTube APIs, and Bootstrap Icons. The site is mobile-optimized with good SEO and accessibility features, although accessibility could be improved. Cookie consent and privacy policies are implemented in compliance with GDPR, reflecting a mature approach to privacy and user consent. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. However, it lacks explicit security policies and incident response information, which could be improved to enhance trust and preparedness. The WHOIS data aligns well with the website content, confirming legitimacy and consistent registration details. Overall, the website is professional, trustworthy, and well-maintained, serving its educational mission effectively. Strategic improvements in security transparency and contact information could further strengthen its posture.

O

Ocmis Irrigazione S.p.A. a Socio Unico

irtec-irrigazione.it

55

Ocmis Irrigazione S.p.A. is an Italian company specializing in irrigation technology and manufacturing, operating multiple brands including Irtec. The company offers a broad portfolio of irrigation equipment such as hose reels, pivot systems, pumps, and gearboxes, targeting agricultural businesses and irrigation professionals. The website reflects a medium-sized enterprise with a consistent brand presence and membership in industry associations like EIMA. Technically, the site is built on Drupal 8 with modern JavaScript libraries and frameworks, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published incident response policies. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the overall business credibility and website professionalism mitigate this risk. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust and compliance.

D

Dieci srl

dieci.com

51

Dieci srl is a manufacturer specializing in telehandlers, forklifts, concrete mixers, and dumpers primarily serving the agriculture and construction sectors. The company offers a broad product range including stationary, articulated, and rotating machinery, targeting professional users in farming, construction, mining, and emergency services. The website is multilingual, professionally designed, and includes resources such as downloadable brochures, dealer networks, newsletters, and digital service portals (DTS and DCS). Technically, the site uses modern web technologies including Bootstrap, jQuery, and various UI libraries, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit incident response information. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional, professional, and trustworthy from a business perspective but could improve security and transparency aspects.

Winhost is a specialized web hosting provider focusing on Microsoft Windows hosting environments, particularly ASP.NET and .NET Core applications. The company offers a range of hosting plans tailored to different customer needs, including shared hosting, managed WordPress hosting, and private SQL server hosting. Their market position is that of a niche provider catering to developers and businesses requiring Windows-based hosting solutions. The website demonstrates a professional and consistent brand presence with clear service offerings and customer testimonials, supported by a strong TrustPilot rating.

T

TwoDo

twodo.cz

62

TwoDo is a small but established digital agency specializing in website, e-commerce, and custom CMS development, serving notable clients such as Ensana Hotels, Netflix, and HBO. Their business model focuses on delivering professional digital solutions that convert visitors into loyal customers through UX/UI design and in-house production. Technically, the website is built on a modern Angular framework, hosted with Cloudflare DNS, and uses Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enabled and domain transfer protection, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy or cookie policies. Overall, the website is professional, trustworthy, and well-positioned in the technology services sector.

P

Pandra

pandra.app

54

Pandra is a French technology company operating a SaaS platform that requires user authentication via a login page. The website is built using modern web technologies including Angular, CKEditor, Chart.js, and integrates Google Analytics and Stripe for analytics and payment functionalities. The platform targets a general audience and appears to be a small-sized business with a focus on providing digital services. The website content is primarily in French and includes a link to legal information hosted on a subdomain. Security posture is moderate with HTTPS enforced but lacks visible security headers and comprehensive privacy or cookie policies on the login page. No contact information or incident response details are provided, which limits transparency. The domain registration is privacy protected, which is common for tech startups, and no suspicious patterns were detected. Overall, the website is functional but could improve in privacy compliance and security best practices.

L

LDStudio

belol.cz

49

Belol.cz is a Czech Republic-based small business specializing in intelligent photo booth rental services for events. The website presents a professional and engaging platform targeting event organizers and attendees seeking quality entertainment and memorable photo experiences. The business positions itself as a niche provider with a focus on fun and quality service. Technically, the site employs a moderate technology stack including jQuery, Swiper.js, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and some security headers implied, though improvements are recommended in header implementation and library updates. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy but would benefit from enhanced privacy transparency and updated security practices.

B

Bobyhall.cz

bobyhall.cz

43

Bobyhall.cz operates as a multifunctional sports, cultural, and entertainment complex located in Brno, Czech Republic. The website presents a professional and well-structured platform showcasing event spaces, restaurant services, and cultural programming. The business targets a general audience interested in hosting or attending events in a versatile venue. The domain age and WHOIS data align well with the business claims, supporting legitimacy. Technically, the site is built on WordPress using the Avada theme and integrates modern plugins for GDPR compliance and social media feeds. Analytics and marketing tools include Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and incident response contacts suggests room for improvement. Overall, the website is trustworthy, compliant with privacy regulations, and professionally maintained.

P

POŽÁRY.cz

pozary.cz

50

POŽÁRY.cz is a specialized Czech media portal dedicated to firefighting news, emergency interventions, firefighting technology, education, and community engagement. It serves firefighters, emergency responders, and the general public interested in fire safety within the Czech Republic. The website offers news articles, podcasts, an e-shop, and discussion forums, supported by numerous industry partners and sponsors. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and Matomo analytics, with a responsive design optimized for mobile devices. Security practices include HTTPS usage and secure cookie settings, though the absence of explicit security headers and privacy policies indicates room for improvement. The WHOIS data is unavailable, which reduces domain registration transparency but does not detract from the professional presentation and trust signals on the site. Overall, POŽÁRY.cz is a credible and well-maintained media platform with moderate technical maturity and a solid business presence in its niche.

Mapa dobra is a Czech non-profit support platform dedicated to showcasing entities supporting Linka bezpečí, a helpline for children and youth. The website serves as a public map and listing of municipalities and companies that contribute to this cause, reinforcing community engagement and awareness. The platform is modest in size and scope, targeting the Czech Republic audience with a focus on social good and public service. Technically, the website employs standard web technologies including Google Maps API for geolocation visualization, Google Tag Manager and Google Analytics for tracking, and Font Awesome for iconography. Hosting is provided by a Czech hosting provider, and the domain is registered with a Czech registrar, consistent with the website's regional focus. The site is mobile-optimized and presents a clean, professional design with clear navigation. From a security perspective, the site uses HTTPS and integrates common analytics tools but lacks explicit security headers and formal privacy or cookie policies. No contact information or incident response channels are provided, which limits transparency and user trust in security matters. The WHOIS data is consistent and transparent, indicating a legitimate and stable domain registration. Overall, the website is a trustworthy and well-intentioned platform with good content quality and business credibility but would benefit from enhanced privacy compliance, security policies, and contact transparency to improve user trust and regulatory adherence.

L

Linka bezpečí, z.s.

klublinkyvbezpeci.cz

50

Klub Linky v bezpečí is a Czech non-profit organization dedicated to supporting children and young people facing difficult life situations through a free, anonymous helpline service. Established since 1994, the organization has handled over 10 million calls and provides continuous 24/7 support. The website serves as a membership club platform to keep supporters informed about risks facing youth and offers detailed anonymized stories illustrating the impact of their work. The organization is well-positioned in the Czech non-profit sector with strong government and foundation partnerships.

L

Linka bezpečí, z.s.

rodicovskalinka.cz

62

Rodičovská linka is a Czech non-profit organization providing free crisis help and social counseling to parents, family members, and adults acting in the interest of children. With over 23 years of operation, it holds a strong market position in child welfare and mental health support. The website offers multiple contact channels including phone, chat, and email, and provides educational resources and multimedia content to its audience. The organization emphasizes anonymity, professionalism, and respect in its services. Technically, the website is built on the Liferay CMS platform, using modern JavaScript libraries and integrates common analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and accessible, with good SEO practices.

K

Kodak Alaris

alarisworld.com

71

Kodak Alaris is a well-established technology company specializing in information capture and document processing solutions. The company targets enterprise and government sectors, providing intelligent digital transformation tools including scanners and software. Their website reflects a mature digital presence with multi-language support and professional branding. Technically, the site is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Analytics, Hotjar, and 6sense, indicating a data-driven approach to user engagement. Security posture is strong with HTTPS enforced and security headers implemented, though the absence of explicit vulnerability disclosure and incident response contacts suggests room for improvement in transparency. The missing WHOIS data is a notable concern but does not detract significantly from the overall trustworthiness given the professional site presentation. Strategic recommendations include publishing a vulnerability disclosure policy, adding incident response contacts, and enhancing legal transparency with terms of service. Overall, the site is secure, compliant, and professionally managed, suitable for its enterprise audience.

U

Unibind - Úvod

unibind.cz

48

The website www.unibind.cz represents a Czech business specializing in thermal binding machines, binding covers, and related presentation products. The site is professionally designed using Joomla CMS and Gridbox builder, incorporating modern web technologies and marketing tools such as Google Analytics and Facebook Pixel. The business targets companies and professionals requiring efficient and high-quality binding solutions. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is generally good with HTTPS and reCAPTCHA usage, but missing security headers and explicit policies reduce overall security maturity. Strategic improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

U

UNIBIND Czech Republic s. r. o.

unibindshop.sk

54

UNIBIND Czech Republic s. r. o. operates the website unibindshop.sk, a professional e-commerce platform specializing in binding machines, document covers, laminating equipment, and related products. The company targets business customers and professionals seeking high-quality document presentation solutions in Slovakia and the Czech Republic. The website presents a well-structured product catalog with detailed descriptions and pricing, supported by clear contact information and legal compliance pages. Technically, the site is built on the Shoptet e-commerce platform, utilizing jQuery and standard marketing scripts such as Google Analytics and Facebook SDK. The site is mobile-optimized and demonstrates good SEO and accessibility basics. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers are missing and the jQuery version is outdated. Privacy compliance is evident through cookie consent mechanisms and GDPR-aligned privacy policies. Overall, the domain registration data aligns with the business identity, supporting legitimacy and trustworthiness.

G

GameDay

sportstg.com

75

GameDay is a market-leading technology provider specializing in sports management, event ticketing, CRM, and competition management solutions. The company targets a broad audience including national governing bodies, grassroots clubs, charities, and foundations, offering a comprehensive suite of tools to streamline sports and event operations. Their business model is primarily B2B SaaS, delivering scalable and integrated digital solutions to the sports sector. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the site is built on WordPress using the Avada theme, enhanced with Yoast SEO, Google Tag Manager, and Trustpilot integrations. Cookie consent is managed via CookieYes, ensuring GDPR compliance. The site demonstrates good mobile optimization and accessibility features, although performance is moderate, likely due to rich media content and multiple third-party scripts. From a security perspective, the website enforces HTTPS and employs standard security headers, though additional headers like CSP and HSTS could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. However, incident response contact details and vulnerability disclosure information are not explicitly provided. Overall, GameDay presents a low-risk profile with strong business credibility and a secure, compliant web presence. Strategic recommendations include enhancing security headers, publishing explicit incident response contacts, and continuous monitoring of third-party scripts to maintain security posture.

G

GameDay

mygameday.app

75

GameDay is a market-leading technology provider specializing in sports management, event ticketing, CRM, and competition management solutions. The company targets a broad audience including national governing bodies, grassroots clubs, charities, and foundations, offering a comprehensive suite of tools to streamline sports and event operations. Their business model is primarily B2B SaaS, focusing on delivering scalable and integrated digital solutions to the sports sector. The website reflects a professional and consistent brand image with strong SEO and structured data implementation, indicating a mature digital presence. Technically, the website is built on WordPress using the Avada theme, leveraging modern web technologies such as Google Tag Manager, Trustpilot widgets, and CookieYes for consent management. Hosting appears to be managed by WP Engine, ensuring reliable performance and security. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance metrics. From a security perspective, the site enforces HTTPS and implements standard security headers, alongside a robust cookie consent mechanism that complies with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include publishing detailed security policies, implementing a vulnerability disclosure program, enhancing accessibility, and providing direct security contact channels to further strengthen trust and compliance.

A

Atlantic Studio s.r.o.

atlantic.cz

57

Atlantic Studio s.r.o. is a Czech Republic-based marketing and internet agency specializing in branding, web design, advertising, and online marketing services. The company targets businesses seeking comprehensive marketing and communication solutions with a focus on delivering results and aligning with current trends. Their website demonstrates a professional digital presence with clear service offerings and client references, supported by active social media channels. Technically, the site is built on WordPress with a modern tech stack including jQuery, Modernizr, Video.js, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are missing and no explicit vulnerability disclosure or incident response information is provided. The absence of WHOIS data limits domain trust assessment, but the website content and contact information appear legitimate and consistent with a small regional marketing agency. Overall, the site scores well in content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional online presence.

I

Impel AI

outsell.com

65

Impel AI is a leading enterprise SaaS provider specializing in AI-powered solutions for the automotive retail industry. Their platform integrates AI across sales, service, marketing, and merchandising to streamline operations and enhance customer engagement. The company positions itself as a transformative force in automotive retail, supported by OEM programs and global partnerships. Technically, the website is built on WordPress hosted on AWS, leveraging modern analytics and marketing technologies such as Google Tag Manager, Hotjar, and Drift chat. The site demonstrates strong SEO and mobile optimization, with comprehensive cookie consent and privacy mechanisms in place. Security posture is robust with HTTPS, bot management, and secure forms, though DNSSEC is not enabled. Overall, the domain registration is privacy protected but consistent with the business profile, indicating legitimacy. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences.

I

Impel AI

impel.ai

68

Impel AI is a medium-sized technology company specializing in AI-powered customer lifecycle management solutions tailored for the automotive industry. Their platform integrates multiple AI modules such as Sales AI, Chat AI, Service AI, and Marketing AI to streamline automotive retail operations and enhance customer engagement. The company positions itself as an industry leader with a strong focus on innovation and customer-centric AI solutions. Technically, the website is built on WordPress, hosted on AWS infrastructure, and leverages modern analytics and marketing technologies including Google Analytics, Hotjar, Drift, and Facebook Pixel. The site is well-optimized for mobile and SEO, providing a professional user experience. Security posture is strong with HTTPS enforced, bot management, and consent management mechanisms in place, although DNSSEC is not enabled and no public vulnerability disclosure policy was found. Overall, the website reflects a mature digital presence with good compliance to privacy regulations and a clear business focus on automotive AI solutions.

W

Wealth Solutions Sp. z o.o.

wealth.pl

44

Wealth Solutions Sp. z o.o. is a Polish company specializing in the retail and bespoke supply of unique alcoholic beverages such as whisky, rum, cognac, and collectible wines, alongside luxury goods including watches and real estate offerings. The company targets affluent and discerning customers seeking rare and exclusive products, positioning itself as a niche luxury provider with a strong market presence since 2006. The website reflects this positioning with professional design, clear navigation, and content tailored to its audience, including age verification to comply with legal requirements for alcohol sales. Technically, the site is built on WordPress with modern tracking and marketing integrations such as Google Tag Manager and Facebook Pixel, and it demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements are recommended in DNSSEC and security headers. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the domain registration data supports the legitimacy and longevity of the business, with no suspicious patterns detected. The website scores well across content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional online presence for its market segment.

R

RumRock

rumrock.cz

42

RumRock is a Czech-based small business or personal brand focused on the niche market of rum enthusiasts. The website provides detailed rum reviews, bar reviews, event information, and branded merchandise sales. It targets Czech-speaking mature audiences interested in quality rum tasting and related content. The business operates primarily as a content creator and community engager within the alcohol retail and media sectors. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various performance and SEO plugins. It employs multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, alongside GDPR-compliant cookie consent management. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. The absence of WHOIS data limits domain registration trust analysis, but the website content and contact information suggest a legitimate operation. Overall, the site is professionally designed, mobile-optimized, and provides a positive user experience with clear navigation and relevant content.

The website www.tatra-nevagroup.cz represents a commercial entity focused on the sales, demo leasing, and servicing of TATRA heavy vehicles primarily in the Czech Republic. It serves as an authorized distributor and service partner, targeting businesses in the transportation sector. The site provides vehicle listings, event updates, and a demo vehicle inquiry form, reflecting a business-to-business model with a medium-sized market presence. The parent company appears to be NEVA Group, with official ties to the TATRA manufacturer. Technically, the website employs a traditional tech stack including jQuery, Bootstrap, and Google Analytics, with a moderate level of mobile optimization and user experience. Security posture is moderate but could be improved by adding security headers and explicit HTTPS enforcement. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. The absence of WHOIS data limits domain trust analysis, but displayed ISO certifications and professional content support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.

D

DAF Trucks CZ, s.r.o.

daftrucks.cz

69

DAF Trucks CZ, s.r.o. operates as a subsidiary of PACCAR Inc., specializing in the manufacturing and distribution of light, medium, and heavy trucks in the Czech Republic. The company holds a strong market position as a leading truck manufacturer, offering a broad range of vehicles including electric mobility solutions and connected services such as PACCAR Connect. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting transportation industry professionals and fleet operators. Technically, the website employs modern JavaScript libraries including jQuery and Google Tag Manager, alongside a cookie consent mechanism powered by OneTrust, indicating a mature digital infrastructure. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, some security headers are missing, and explicit contact or security policy information is not readily available. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy consent management, but lacks visible incident response or vulnerability disclosure information. The absence of WHOIS data reduces trust signals, though the overall content and branding strongly support legitimacy. Overall, the website is well-constructed with good content quality and security posture, but could improve transparency by publishing security policies, incident response contacts, and enhancing security headers. The domain WHOIS data should be verified through alternative sources to confirm registration legitimacy.

A

Agra poisťovňa

agrapoistovna.sk

58

Agra poisťovňa is a Slovak insurance company offering various insurance products and services targeted at individuals and businesses within Slovakia. The website presents a professional and consistent brand image with a focus on customer engagement through contact forms and informational content. The technical infrastructure leverages WordPress CMS, Bootstrap framework, and integrates third-party services such as Google Tag Manager and Usercentrics for analytics and cookie consent management, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and security policies are absent, representing an area for improvement. Overall, the website is trustworthy and functional, serving its business purpose effectively.

V

Vetis.sk

vetis.sk

43

Vetis.sk is a Slovakian e-commerce retailer specializing in animal husbandry, veterinary equipment, and related supplies. The website serves a target audience of farmers, veterinarians, and pet owners, offering a broad range of products including electric fencing, veterinary tools, and pet care items. The platform is built on PrestaShop and integrates modern web technologies such as Google reCAPTCHA and Google Tag Manager, reflecting a mature digital infrastructure. Security measures are well implemented with HTTPS, security headers, and cookie consent mechanisms, supporting GDPR compliance. The website demonstrates a professional and trustworthy online presence with clear business information and customer support channels.

Slovenská poľnohospodárska univerzita v Nitre is a well-established public university specializing in agricultural sciences, biotechnology, economics, and regional development. The institution serves students, researchers, and the public with comprehensive educational programs, research initiatives, and community engagement. The website reflects a professional academic presence with clear navigation, multilingual support, and up-to-date news and events. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring responsive design and moderate performance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and WHOIS data confirm the legitimacy and long-standing operation of the university's online presence.

Ú

Ústredný kontrolný a skúšobný ústav poľnohospodársky v Bratislave

uksup.sk

42

ÚKSÚP is a Slovak government agency responsible for agricultural control and testing, operating under the Ministry of Agriculture and Rural Development of the Slovak Republic. The website serves as an official portal providing access to various agricultural data systems, regulatory information, and public services related to agriculture. It targets agricultural stakeholders, government bodies, and the general public interested in agricultural compliance and safety. The business model is that of a government institution delivering regulatory oversight and data services, positioning itself as an authoritative entity in Slovakia's agricultural sector. Technically, the website is built on OctoberCMS with modern web technologies including jQuery and Bootstrap, ensuring good mobile responsiveness and accessibility. The site uses HTTPS with a valid SSL configuration and integrates Google Tag Manager for analytics. The content is well-structured, professionally designed, and provides clear navigation, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes CSRF tokens, but lacks visible advanced security headers and published security policies or incident response information. No vulnerability disclosure or security.txt files are present. Privacy compliance is partially addressed with a GDPR information page, but no cookie consent mechanism is implemented. Overall, the security posture is solid but could be improved with additional transparency and controls. The overall risk assessment is low given the official nature and government backing of the site. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, adding security headers, and establishing a vulnerability disclosure process to enhance trust and compliance.

A

AGROSERVIS spol. s r.o.

agroservis.sk

45

AGROSERVIS spol. s r.o. is a well-established Slovak company specializing in the distribution and servicing of agricultural machinery, representing major global brands such as John Deere, KUHN, BEDNAR, and Dieci. The company targets farmers and agricultural enterprises within Slovakia, offering sales, maintenance, spare parts, and precision agriculture solutions like FarmSight. The website reflects a professional digital presence with comprehensive business information, clear navigation, and active social media engagement. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, although some security headers could be improved. Overall, the site demonstrates a strong security posture with no critical vulnerabilities detected. The WHOIS data aligns with the business claims, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility. The website scores well across content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional platform in its sector.

B

Bohnenkamp s.r.o.

bohnenkamp.sk

55

Bohnenkamp s.r.o. is a medium-sized company operating in Slovakia, specializing in the distribution and servicing of tires and wheels for sectors including agriculture, forestry, municipal services, and construction. The company maintains a professional online presence with a well-structured website powered by TYPO3 CMS, featuring a comprehensive cookie consent mechanism and GDPR-compliant data protection policies. Their market position is that of a regional specialist with a focus on B2B customers in industrial sectors. Technically, the website employs modern tracking and marketing tools such as Google Analytics and Facebook Pixel, integrated with Cookiebot for user consent management. Security-wise, the site enforces HTTPS and includes standard security headers, though it lacks a dedicated security policy or incident response information. Overall, the website is professional, secure, and compliant with privacy regulations, supporting the company's credibility and trustworthiness.

L

Linklaters

linklaters.de

67

Linklaters is a global law firm focused on providing legal certainty in a changing world, targeting corporate clients and legal professionals. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager and Cookiebot, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks explicit security headers and published security policies. Privacy compliance is partially addressed through cookie consent mechanisms, but no privacy policy or terms of service were detected in the provided content. Overall, the site is legitimate and trustworthy, aligned with the Linklaters brand and German market presence.

M

Muzeum Karla Zemana

karelzemanmuseum.org

54

Muzeum Karla Zemana is a specialized cultural and educational institution dedicated to showcasing the life and work of the renowned filmmaker Karel Zeman. The museum offers interactive exhibitions, workshops, and events targeting a broad audience including families, tourists, and film enthusiasts. It operates a ticketing system and an e-shop for merchandise, positioning itself as a niche but well-established player in the hospitality and cultural sector in the Czech Republic. The website reflects a mature digital presence with consistent branding and comprehensive content.

C

Centrale Méditerranée Alumni

centraliens-marseille.fr

51

Centrale Méditerranée Alumni operates as a professional alumni network for graduates and students of Centrale Méditerranée, a French engineering school. The platform offers a comprehensive suite of services including member directories, event calendars, job boards, and news updates, fostering community engagement and career development. The website is well-branded and targets alumni, students, and recruiters within the educational sector in France. Technically, the site leverages modern web technologies such as Vue.js, Google Analytics, and Google Maps API, ensuring a responsive and interactive user experience. The presence of OAuth-based single sign-on options enhances user convenience and security. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. From a security perspective, the website enforces HTTPS and uses secure login forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no vulnerability disclosure or security.txt files are published. Privacy compliance is strong with visible privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a trustworthy and professional online presence for the alumni community, with moderate technical sophistication and a solid security posture. Recommendations include enhancing security headers, publishing vulnerability disclosure information, and continuing to monitor third-party scripts for vulnerabilities.

E

emlyon business school

em-lyon.com

64

emlyon business school is a prestigious and long-established European business school founded in 1872, offering a wide range of business education programs including Grande Ecole, Bachelors, Masters, MSc, MBA, and executive education. The school holds triple accreditation (EQUIS, AACSB, AMBA), underscoring its high academic standards and global recognition. It serves a diverse international student body across multiple campuses in Lyon, Shanghai, Paris, and Mumbai. The website reflects a mature digital presence with a modern Drupal CMS, responsive design, and comprehensive content tailored to prospective students and professionals. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Tag Manager for analytics and marketing, and Didomi for GDPR-compliant cookie consent management. The site is well-optimized for SEO and accessibility, with clear navigation and structured data enhancing search engine understanding. Security posture is strong with HTTPS enforced and domain locking status flags, though DNSSEC is not enabled, representing an area for improvement. From a security and compliance perspective, the site demonstrates good privacy practices with explicit privacy and cookie policies, consent mechanisms, and no detected vulnerabilities or suspicious domains. However, explicit security policies and incident response contacts are not published, which could be enhanced to improve transparency and trust. Overall, the site is safe, professional, and trustworthy, serving its educational mission effectively.

C

Care Access

careaccess.com.br

58

Care Access is a Brazilian healthcare organization specializing in connecting individuals to free health assessments and clinical research studies. With over 20 years of experience and integration of major research centers such as IBPClin and CEMEC, it holds a strong position in the Latin American healthcare research market. The website is professionally designed, mobile-optimized, and provides clear pathways for patient engagement in clinical studies. Technically, the site uses modern frameworks like Astro, is hosted with Cloudflare DNS, and integrates HubSpot and Google Analytics for marketing and analytics purposes. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is basic with privacy and cookie policies present but lacking detailed GDPR-specific disclosures. Overall, the site is trustworthy, safe, and well-positioned for its healthcare audience.

C

Care Access

careaccess.ca

67

Care Access is a healthcare-focused organization operating a global network of clinical research sites. Their mission is to improve health outcomes by facilitating patient participation in clinical trials and providing access to health resources. The company emphasizes community-based research, targeting diverse and underserved populations to enhance the representativeness of clinical studies. Their market position is that of a medium-sized, growing entity founded in 2022, with regional partner sites in Poland, Brazil, and the United States. The website reflects a professional and trustworthy brand with clear messaging and active study listings. Technically, the website is built using modern frameworks such as Astro, hosted and protected via Cloudflare, and incorporates industry-standard tools like Cookiebot for privacy compliance and Facebook Pixel and Google Tag Manager for analytics and marketing. The site is mobile-optimized, fast-loading, and SEO-friendly, though accessibility features are basic. Security posture is strong with HTTPS enforced and domain transfer lock enabled, but could be improved by enabling DNSSEC and additional security headers. From a security and compliance perspective, the site demonstrates good privacy practices with a comprehensive privacy policy and cookie consent mechanism. However, it lacks explicit terms of service, security policy, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. Overall, the site presents a low-risk profile with a solid foundation for trust and compliance. Strategically, Care Access should focus on enhancing transparency by publishing terms of service and security policies, enabling DNSSEC, and adopting additional security headers. These steps will strengthen their security posture and compliance standing, further building trust with users and partners.

C

Care Access

careaccess.pl

64

Care Access is a healthcare organization newly launched in Poland in 2024, focusing on providing access to innovative clinical trials, modern treatment methods, and professional medical care. It operates as part of a global network with presence in the US, Canada, Brazil, and plans for expansion in Europe. The website is well-structured, professionally designed, and optimized for mobile devices, offering clear navigation and relevant content targeted at patients interested in clinical research. Technically, the site uses modern frameworks like Astro and integrates marketing and analytics tools such as HubSpot, Google Tag Manager, and Facebook Pixel. Security posture is adequate with HTTPS enabled and privacy compliance well addressed, though security headers are missing and should be implemented to enhance protection. The domain registration is consistent with the business launch timeline, supporting legitimacy. Overall, the site presents a trustworthy and professional digital presence for a healthcare service provider.

C

Cardiometabolic Care Access

myfreehearttest.com

66

Cardiometabolic Care Access operates a comprehensive healthcare screening platform focused on cardiometabolic risk factors such as Lp(a), A1c, and kidney function markers. The organization provides no-cost blood testing across multiple US locations, targeting adults concerned about heart attack risk and related conditions. Their business model integrates clinical testing with research participation, offering stipends and contributing to medical research advancement. The website is professionally designed, mobile-optimized, and uses modern web technologies including React and Astro frameworks, supported by extensive analytics and marketing tools. Security posture is strong with HTTPS and privacy policies in place, though improvements can be made in cookie consent and security disclosures. Overall, the platform presents a trustworthy and credible healthcare service with a clear focus on accessibility and research.

S

Striven

striven.com

55

Striven is a small business-focused technology company offering an all-in-one business management software suite that integrates accounting, CRM, project management, and other essential business functions. The company positions itself as an affordable and comprehensive SaaS solution for small to midsize businesses, emphasizing ease of use and total transparency. The website is professionally designed with strong branding consistency and includes customer testimonials and success stories that reinforce trust and market credibility. The parent company is identified as Miles IT Company, which also provides website design services. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and various analytics and marketing tools. The site is mobile optimized and SEO friendly, with structured data and Open Graph metadata implemented for enhanced search and social media presence. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The absence of WHOIS data for the domain is a notable concern, as it raises questions about domain registration legitimacy. However, the professional nature of the website and business information partially mitigate this risk. No explicit contact emails or phone numbers were found, which could be improved to enhance transparency. Overall, Striven presents a credible and professional business software offering with a solid technical foundation but should address privacy compliance and domain registration transparency to strengthen trust and security posture.

B

BURG Services GmbH & Co. KG

burg-services.de

51

BURG Services GmbH & Co. KG is a German-based medium-sized company specializing in promotional products and advertising gifts. The company positions itself as a reliable and innovative partner for businesses seeking customized promotional solutions. Their website reflects a professional B2B business model with a strong network of 65 partner brands and certifications such as the EU Organic Bio certification. The site is built on Drupal 9, leveraging modern web technologies and includes integrations with Google Analytics and Tag Manager for marketing insights. The website is well-structured, mobile-optimized, and provides comprehensive information including privacy and cookie policies, terms of service, and contact details. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are absent. WHOIS data is minimal but consistent with the business claims, using GoDaddy DNS services. Overall, the site demonstrates a mature digital presence suitable for its market segment.

J

JadeBay GmbH

jade-bay.de

43

JadeBay GmbH is an inter-municipal development company serving the JadeBay region in Germany, focusing on economic promotion, workforce development, and innovation support. The website clearly communicates its mission and services to regional businesses, job seekers, and investors, positioning itself as a key regional development agency. Technically, the site employs a modern tech stack including Google Analytics with consent management, jQuery, and a CMS likely Redaxo. The site is mobile-optimized and well-structured with good SEO practices. Security posture is solid with HTTPS and Content-Security-Policy headers, though additional security headers and explicit security policies could enhance protection. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and aligned with its business objectives.

K

Klimaschutz- und Energieagentur Niedersachsen GmbH

klimaschutz-niedersachsen.de

55

Klimaschutz- und Energieagentur Niedersachsen GmbH operates as a regional competence center focused on climate protection, energy efficiency, and renewable energy initiatives within Lower Saxony, Germany. The agency provides informational resources, consulting services, and supports various stakeholders including municipalities, businesses, and societal groups. Their market position is that of an authoritative regional agency supported by the Lower Saxony Ministry for Environment, Energy and Climate Protection. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs modern JavaScript libraries such as jQuery, Foundation-sites, and AOS for animations, alongside RequireJS for module loading. It integrates Google Tag Manager for analytics and CookieFirst for consent management, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with a legitimate public agency domain. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

S

SUNRISE Alliance

sunrise-alliance.eu

63

SUNRISE Alliance is a network representing smaller-sized universities located in non-metropolitan areas across Europe, aiming to provide a collective voice aligned with European values. The website serves as an informational and collaborative platform for these institutions, highlighting their strategic importance and fostering regional innovation and sustainability. The alliance targets academic institutions and stakeholders interested in regional educational development. Technically, the website is built on a modern WordPress platform with a well-integrated tech stack including Yoast SEO for search optimization, Google Tag Manager for analytics, CookieYes for cookie consent management, and OneSignal for push notifications. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies, incident response information, and advanced security headers. No vulnerabilities or suspicious activities were detected in the analysis. Privacy compliance is partial due to the absence of a dedicated privacy policy and terms of service pages. Overall, the website is professional and trustworthy with a clear educational focus. To enhance trust and compliance, it is recommended to publish comprehensive privacy and security policies, improve security headers, and provide incident response contacts. These steps will strengthen the alliance's digital maturity and user confidence.

W

Westfälische Nachrichten

wn.de

61

Westfälische Nachrichten is a well-established regional news publisher focused on the Münster and Münsterland regions in Germany. The website offers comprehensive news coverage, ePaper subscriptions, advertising services, and newsletters targeting the general public in the region. The business model relies on advertising and subscription revenue streams. Technically, the site uses modern JavaScript libraries, consent management tools, and tracking services while maintaining GDPR compliance. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain and WHOIS data indicate a legitimate and trustworthy media organization with no suspicious patterns detected.

B

Breezy HR, Inc.

breezy.hr

62

Breezy HR, Inc. is a well-established technology company specializing in modern hiring software and applicant tracking systems designed to streamline recruitment processes for businesses. With a strong market position supported by over 17,000 customers and recognition from Gartner and G2, Breezy HR offers a comprehensive SaaS platform that covers job advertising, candidate management, offer management, and performance review cycles. The company operates under the parent organization Learning Technologies Group plc and is headquartered in Raleigh, North Carolina. Technically, the website is built on a modern Webflow CMS platform, leveraging a robust tech stack including AWS hosting, multiple analytics and marketing tools, and video hosting via Wistia. The site demonstrates excellent performance, mobile optimization, and SEO practices, providing a professional and user-friendly experience. Security measures include HTTPS enforcement, Content Security Policy headers, and ISO/IEC 27001 certification, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms and GDPR adherence. Contact information is transparent and consistent across the site and structured data. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible online presence. Overall, Breezy HR presents a secure, professional, and credible digital footprint suitable for its business domain.

S

StudyKIK

studykik.com

72

StudyKIK is a healthcare technology company specializing in patient recruitment and retention for clinical trials. Founded in 2013 and operating under the parent company Syneos Health, StudyKIK offers a comprehensive platform that connects patients, clinical trial sites, and sponsors to accelerate medical research and treatment development. Their services include patient recruitment, eConsent, virtual visits, study websites, and trial reporting, targeting patients, families, clinical sites, and sponsors. The company positions itself as a trusted partner in clinical research with a mission to bring new treatments to people faster through education and innovative technology. Technically, the website is built using modern web technologies including React, Google Tag Manager, and Cloudflare for hosting and security. It integrates third-party tools such as OneTrust for cookie consent management, PureChat for live chat support, and Hotjar for user behavior analytics. The site demonstrates good performance and mobile optimization, with a professional and accessible design. SEO and privacy compliance are well addressed with proper meta tags, privacy and cookie policies, and GDPR consent mechanisms. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses clientTransferProhibited status to protect domain transfers. However, DNSSEC is not enabled, which is a recommended improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistent registration history. Contact information is clearly provided, including email, phone numbers, and social media channels. Overall, StudyKIK's website reflects a mature digital presence with strong business credibility and a solid security posture. The site is safe for general audiences, with no adult or questionable content. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy, and adding a vulnerability disclosure program to further enhance trust and compliance.

M

Medable Inc.

medable.com

69

Medable Inc. is an enterprise-level healthcare technology company specializing in clinical trial software solutions. Their platform leverages agentic AI, electronic Clinical Outcome Assessment (eCOA+), and decentralized clinical trial (DCT) technologies to accelerate and streamline clinical research processes. Positioned as a market leader, Medable serves pharmaceutical companies and clinical research organizations globally, offering innovative tools to reduce trial downtime and improve data quality. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the website is built on modern frameworks including Webflow CMS, Adobe Experience Platform, and integrates marketing and analytics tools such as Google Tag Manager and Marketo. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers and policies are not prominently published. From a security perspective, the site shows good baseline protections but lacks visible incident response and vulnerability disclosure information. The absence of WHOIS data reduces domain trust slightly, but the professional presentation and business transparency mitigate concerns. Overall, the site demonstrates a strong business and technical foundation with room for enhanced security transparency. Strategically, Medable should focus on publishing detailed security policies, incident response contacts, and vulnerability disclosure programs to strengthen trust and compliance posture. Enhancing security headers and privacy policy visibility will further improve their security and privacy compliance ratings.

V

Vivalink

vivalink.com

10

Vivalink is a healthcare technology company specializing in remote patient monitoring solutions, particularly for clinical trials and digital healthcare applications. Their offerings include wearable medical devices, a biometrics data platform, and software development kits to enable integration with clinical applications. The company targets healthcare providers, clinical trial sponsors, and digital health partners, positioning itself as a key player in the remote monitoring and decentralized clinical trial market. The website reflects a professional and well-branded presence with comprehensive service descriptions and customer testimonials. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and Hotjar for analytics and user experience optimization. The site is mobile-optimized and employs standard SEO and accessibility practices, though some accessibility improvements could be made. Security-wise, the site enforces HTTPS, uses security headers, and implements cookie consent mechanisms, indicating a mature security posture. However, explicit security policies and incident response information are not publicly available. The WHOIS data for the domain is missing or unavailable, which is unusual for an active commercial website and slightly reduces trustworthiness. Despite this, the website content, branding, and business information strongly suggest a legitimate and established company. No signs of malicious activity or adult content were detected, and privacy compliance appears robust. Overall, Vivalink's website demonstrates a strong digital presence with good security and privacy practices, serving a specialized healthcare technology market. Further transparency in security policies and WHOIS data would enhance trust and credibility.