Security Directory

M

MicroPower Group

micropower-group.com

54

MicroPower Group is a small-sized company founded in 2015 operating in the energy sector, providing power solutions and related services primarily targeting business clients. The website presents basic but relevant content aligned with the energy industry, though it lacks comprehensive business and contact information. The technical infrastructure includes modern web technologies such as HTTPS, Google Tag Manager, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. However, the absence of security headers and privacy policy pages suggests room for improvement in security and compliance. The WHOIS data is transparent and consistent with the business claims, supporting the legitimacy of the domain. Overall, the website is functional but basic, with moderate security posture and privacy compliance.

D

Di Themes

dithemes.com

52

Di Themes is a small technology company specializing in the development and sale of multipurpose WordPress themes tailored for business websites. Their offerings include free and premium themes, comprehensive demos, and documentation, targeting WordPress users and small to medium businesses. The website is built on WordPress with modern technologies such as WooCommerce and Elementor, hosted on DigitalOcean, and uses SSL for secure connections. The site demonstrates good SEO and mobile optimization but lacks explicit privacy and security policies. Security posture is moderate with room for improvement in DNS security and HTTP headers. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

J

JazzHR

applytojob.com

79

JazzHR is a technology company specializing in applicant tracking and recruiting software tailored for small to medium-sized businesses. Their platform streamlines hiring processes, enabling companies to find and hire talent efficiently. The website demonstrates a mature digital presence with comprehensive marketing and analytics integrations, reflecting a well-established SaaS business model. The company maintains consistent branding and offers clear business information, targeting SMBs in the recruitment sector. Technically, the site is built on WordPress with modern performance optimizations, strong SEO, and mobile responsiveness. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. WHOIS data is unavailable, likely due to privacy protection, which is justified given the business type. Overall, JazzHR presents a professional, trustworthy online presence with room for enhanced transparency in security and incident response.

The website www.lelundin.org is a specialized content platform managed by Lundin & Bäcklund AB, focusing on EU and NATO security policy, crisis management, and multilateral defense issues. It leverages the expertise of a former EU ambassador and provides a variety of content including blog posts, podcasts, reports, and educational materials targeting individuals interested in European security and defense topics. The site integrates multimedia content and links to authoritative external sources, enhancing its informational value. Technically, the site is built on the Weebly CMS platform, utilizing common web technologies such as jQuery, Google Analytics, and Font Awesome. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and includes Google Analytics tracking. However, no explicit security headers or privacy/cookie policies were found, indicating room for improvement in compliance and security posture. WHOIS data is unavailable due to privacy protection, which is reasonable for this type of expert personal site but reduces transparency. No critical vulnerabilities or malicious content were detected. Overall, the site is a credible and professional resource within its niche, but it would benefit from enhanced privacy compliance, clearer contact information, and improved security headers to strengthen trust and user protection.

R

ROOTS HOLISTIC HEALTH AND WELLNESS CENTER LLP

rknature.com

9

R K Nature Cure Home is a medium-sized healthcare provider specializing in naturopathy, yoga, physiotherapy, and holistic wellness based in Coimbatore, India. Founded in 1984, it offers a broad range of natural therapy treatments and positions itself as a reputable naturopathy hospital with a focus on natural healing and wellness. The website is built on WordPress with a modern tech stack including Gravity Forms, jQuery, and various analytics and marketing tools. The site is well-structured with good SEO and mobile optimization, providing a positive user experience. Security posture is adequate with HTTPS and form protections, but lacks advanced security headers and published privacy policies, which are areas for improvement. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not negate the legitimacy of the business based on website content and branding. Overall, the site is professional and trustworthy with room for enhanced compliance and security hardening.

R

Roots Metrology

rootsmetrology.com

57

Roots Metrology is a specialized NABL accredited calibration laboratory offering precision calibration and metrology services primarily to industrial and manufacturing sectors. The company positions itself as a trusted service provider with a focus on quality assurance and compliance. Their website reflects a professional and consistent brand image targeting industrial clients requiring calibration and testing services. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and tracking tools such as Google Tag Manager and Microsoft Clarity. Security posture is solid with HTTPS enforcement, security headers, and form protections like reCAPTCHA, although there is room for improvement in publishing explicit security policies and incident response details. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website is safe, professional, and trustworthy, but the absence of WHOIS data limits domain trust verification.

R

Roots Polycraft

rootspolycraft.com

59

Roots Polycraft is a manufacturing company specializing in plastic moulding services based in India. The website positions the company as a leading plastic moulding provider with a focus on quality manufacturing solutions. The digital infrastructure is built on WordPress with modern frameworks like Bootstrap and includes analytics and tracking tools such as Google Tag Manager and Microsoft Clarity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks security headers and explicit privacy or cookie policies. Overall, the website is functional and professional but would benefit from improved compliance and security practices.

R

Roots Industries India Limited (RIL)

rootsautomotives.com

63

Roots Industries India Limited (RIL) operates a professional corporate website focused on manufacturing and supplying automotive components such as electric horns, lighting products, batteries, lubricants, and friction products. The company positions itself as a leading automobile horn manufacturer in India with a broad product portfolio targeting vehicle manufacturers and owners. The website is built on WordPress and integrates modern marketing and analytics tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not fully implemented. The absence of WHOIS domain registration data and privacy policy pages are notable gaps that impact trust and compliance. Overall, the website presents a professional image with good content quality and user experience but would benefit from enhanced transparency and security documentation.

T

The Capitol Forum

thecapitolforum.com

63

The Capitol Forum is an independent investigative media organization specializing in detailed reporting and analysis of regulatory developments impacting markets, with a focus on antitrust, mergers, corporate investigations, and sector regulation. Established in 2012, it serves a specialized audience including government regulators, legal professionals, investors, and non-profits. The business operates on a subscription model, offering unique insights, special reports, podcasts, and events to its subscribers. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress with modern web technologies such as Yoast SEO, jQuery, Swiper.js, and AOS for animations. It is hosted likely via GoDaddy.com, LLC, with good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. The site employs HTTPS with a strong SSL configuration but lacks some advanced security headers and explicit security policies. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms compliant with GDPR and US privacy laws. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms. DNSSEC is not enabled, which is a recommended improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, The Capitol Forum presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and adding vulnerability disclosure information to enhance trust and security posture further.

The website 'www.farktography.com' is a WordPress-based community platform focused on forums and blogging around the theme of 'Farktography', likely a niche or hobbyist photography community. The site leverages common web technologies including WordPress CMS, Bootstrap framework, jQuery, and plugins such as bbPress and BuddyPress to provide forum and social features. The technical infrastructure is modern and supports HTTPS with a valid SSL certificate, ensuring secure communication. However, the site lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security headers are absent, and no contact or incident response information is provided, indicating gaps in security posture and transparency. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and registration consistency. Overall, the site is functional and safe for general audiences but requires improvements in compliance, security best practices, and business credibility to enhance trust and reduce risk.

Kende Gastro is a Hungarian company specializing in hospitality and catering equipment, providing products, planning, servicing, and related services primarily targeting hospitality businesses and retail customers. The website is professionally designed using Joomla! CMS and integrates modern web technologies such as Bootstrap, jQuery, and Revolution Slider. It maintains an active social media presence and complies with GDPR through a cookie consent mechanism. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and incident response documentation are recommended. Overall, the website is trustworthy, business-focused, and safe for general audiences.

B

BizGarden

bizgarden.cz

41

BizGarden is a Czech-based innovation and business consulting firm specializing in leveraging space technologies and satellite signals for industry and marketing applications. Established in 2015, the company targets SMEs, cultural and creative industries, and sustainable tourism sectors, providing professional services to foster innovation and business growth. Their market position is supported by partnerships with European organizations such as ESA and involvement in EU-funded projects. Technically, the website is built on WordPress with a modern theme and standard libraries, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies, indicating room for improvement in compliance and incident response readiness. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy and security disclosures to align with GDPR and best practices.

G.L.Electronic is a Czech aerospace technology company specializing in high-reliability electronic components and cable harnesses for space missions. The company is actively involved in major European space programs such as the Copernicus Sentinel missions, reusable rocket development under ESA's FLPP program, and the ARIEL exoplanet telescope project. Their business model focuses on B2B contracts with space agencies and aerospace manufacturers, positioning them as a niche but important player in the European aerospace supply chain. The website reflects a professional and consistent brand with detailed project descriptions targeting aerospace industry stakeholders. Technically, the website is built on WordPress using common plugins like WPBakery Page Builder and jQuery. It employs HTTPS with good SSL configuration and moderate performance. Mobile optimization and accessibility are adequate but could be improved. SEO is basic with proper meta tags but lacks advanced structured data. Analytics usage includes Google Analytics with moderate user tracking. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide a security.txt or vulnerability disclosure policy. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Contact information is minimal, with no explicit emails or phone numbers for support or incident response. Overall, the website is trustworthy and professional but has compliance and security gaps that should be addressed to enhance user trust and regulatory adherence.

M

Maana Electric

maanaelectric.com

55

Maana Electric is a technology company specializing in sustainable solar energy solutions and space-grade technologies. Founded in 2017, the company focuses on innovating across the solar value chain, including silicon production, solar cells, and panels, with collaboration from the European Space Agency. Their business model centers on rapid prototyping and market-ready product development, targeting organizations interested in sustainable and space-related energy technologies. The website is built on WordPress using Elementor and Astra theme, hosted by TransIP, and employs Google Analytics for user tracking. While the site is professionally designed and mobile-optimized, it lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. WHOIS data indicates a legitimate domain registration consistent with the business age and profile.

G

Global Investigative Journalism Network

gijn.org

58

Global Investigative Journalism Network (GIJN) is a well-established non-profit organization founded in 2009, dedicated to supporting investigative journalism worldwide. The organization offers training, resources, and networking opportunities to journalists and media professionals, positioning itself as a global leader in the investigative journalism sector. The website reflects this mission with comprehensive multilingual support and professional content tailored to its target audience of journalists and media educators. Technically, the site is built on WordPress, leveraging modern web technologies and integrations such as Google Analytics and reCAPTCHA to enhance user experience and security. While the site employs HTTPS and standard security measures, there is room for improvement in implementing advanced security headers and DNSSEC to bolster its security posture. Overall, GIJN's website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource in its domain.

A

Adra (AI, Data and Robotics Association, asbl)

adr-association.eu

65

Adra Association is a European non-profit organization founded in 2021 by leading AI, Data, and Robotics entities including BDVA, CAIRNE, ELLIS, EurAI, and euRobotics. It serves as the private side of the AI, Data and Robotics Partnership under Horizon Europe, aiming to unify stakeholders across industry, research, and policy to foster innovation and collaboration in these technology sectors. The association targets a broad European audience of innovators and policymakers, positioning itself as a key driver of digital transformation in Europe. Technically, the website is built on Drupal 10 with modern front-end frameworks like Bootstrap 5, ensuring good mobile optimization and accessibility. Security posture is strong with HTTPS and security headers implemented, though privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

PEAR s.r.o. is a Czech software company specializing in reservation and economic systems for the travel industry, with over 25 years of experience. Their website presents a professional image targeting travel agencies, tour operators, and related sectors. The company offers a range of software products and services including reservation systems, economic systems, custom software development, training, and support. The website is built on TYPO3 CMS and uses common web technologies such as jQuery and Google Analytics. While the site is content-rich and well-structured, it lacks visible privacy and cookie policies, which is a compliance concern. The absence of WHOIS data limits domain trust verification, but the presence of ISO certifications and client references supports business credibility.

H

Halfar System GmbH

halfar.com

68

Halfar System GmbH is a German manufacturer specializing in promotional and technical bags, operating since 1986. The company offers a diverse product range including backpacks, promotional bags, and custom-made specialty bags, targeting businesses and organizations seeking durable and functional textile products. The website reflects a professional and consistent brand presence with a well-structured product catalog and clear navigation, supporting a medium-sized enterprise profile in the manufacturing and retail sectors. Technically, the website is built on the Shopware CMS platform, utilizing modern JavaScript libraries, lazy loading for images, and integration with Google Tag Manager and CleverReach for marketing and analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and employs CAPTCHA and consent management mechanisms, indicating a baseline security posture. However, explicit security headers and a published privacy policy or terms of service are missing, which are important for compliance and trust. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly detracts from the overall trustworthiness. Overall, the website presents a credible and professional business front with good technical implementation but would benefit from improved transparency in privacy and security policies and verification of domain registration details to enhance trust and compliance.

The website bsblogin.com serves as a login portal primarily for BlueSkyPlan or related services, focusing on user authentication with support for external providers such as Google, Apple, and Microsoft. It highlights a new security feature enabling Passkey login via Windows Hello, aiming to enhance user convenience and account protection. The site is technically built using modern web technologies including Bootstrap, jQuery, and ASP.NET MVC frameworks, hosted likely via GoDaddy infrastructure. While the site demonstrates basic mobile optimization and user interface design, it lacks comprehensive privacy and cookie policies, security headers, and explicit contact information, which are critical for compliance and trust. The domain registration data is consistent and legitimate, with domain age appropriate for the business type. Overall, the site presents a moderate security posture with room for improvement in privacy compliance and security best practices.

A

Agder XR

agderxr.no

48

Agder XR is a competence network focused on XR technology in the Agder region of Norway, aiming to increase regional and national market share in XR. The website presents a professional platform offering networking, events, research, and updates on XR technology. The technical infrastructure is based on WordPress with Elementor and several modern plugins, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and formal policies are missing. Overall, the site is safe, professional, and targeted at businesses and individuals interested in XR technology in Norway.

V

Vetter GmbH

vetter-rescue.com

49

Vetter GmbH is a German manufacturing company specializing in pneumatic rescue equipment and tents, serving emergency services, fire brigades, and medical services worldwide. Established in 1964, the company positions itself as the global leader in emergency pneumatics, offering a range of products including rescue, industrial, HazMat, recovery, and shelter equipment, along with training and service. The website reflects a professional and consistent brand presence with a global dealer network and active participation in trade fairs and events. Technically, the site is built on Joomla CMS with modern frameworks such as Bootstrap and Helix Ultimate, and uses Matomo for analytics. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and cookie consent implemented, though there is a lack of published security policies and incident response information. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and safe for general audiences, with room for improvement in privacy and security transparency.

Thüringer Literaturtage is a small regional cultural festival organized by LeseZeichen e.V., focusing on literature events in the Thüringen region of Germany. The website serves as an informational portal for festival programming, archival content, and organizational details. The target audience includes literature enthusiasts and regional visitors interested in cultural events. The business operates as a non-profit cultural event organizer with a modest online presence. Technically, the website uses basic web technologies including HTML5, CSS, JavaScript with jQuery, and Font Awesome icons. The site is hosted likely on a German hosting provider indicated by the nameservers. Performance and mobile optimization are basic, with no advanced CMS or frameworks detected. SEO and accessibility features are minimal but present. From a security perspective, the site lacks HTTPS enforcement and security headers, which lowers its security posture. No privacy or cookie policies are present, and no contact information is explicitly provided, which impacts privacy compliance and business credibility. No WAF or blocking mechanisms are detected, and no vulnerabilities are immediately apparent from the content. WHOIS data is minimal but consistent with a small cultural event domain. Overall, the site is functional but basic, with room for improvement in security, privacy compliance, and contact transparency. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, securing login forms, and improving contact information visibility to enhance trust and compliance.

CK INEX, operated by Pear spol. s r.o., is a well-established Czech travel agency specializing in exotic, stay, and sightseeing vacations with over 35 years of experience. The website presents a professional and user-friendly interface offering a wide range of travel packages including family, senior, luxury, and custom trips. The company maintains a strong market position in the hospitality sector within the Czech Republic, supported by insurance coverage from Generali Česká pojišťovna and active social media engagement.

M

Medical Design Sourcing

medicaldesignsourcing.com

59

Medical Design Sourcing operates as a specialized online directory and news platform focused on the medical manufacturing and medtech industry. It provides categorized listings of manufacturers, products, services, and equipment, targeting industry professionals and companies seeking sourcing and industry updates. The site is part of the WTWH Media Life Science Network, indicating a niche market position with a focus on healthcare manufacturing. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Maps API, and SEO plugins, delivering a professional and responsive user experience. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy/cookie policies, which are areas for improvement. The absence of WHOIS registration data reduces domain trustworthiness, though the website content and structure suggest a legitimate business presence. Overall, the site is well-positioned as a trusted industry resource but should enhance transparency and security practices to improve compliance and trust.

W

Webovky pro firmy

webovkyprofirmy.cz

44

Webovky pro firmy is a Czech Republic based small business specializing in custom web design and development services tailored for companies. Established since 2016, they have completed over 180 web projects, focusing on responsive design, SEO optimization, and content creation. Their market position is that of a trusted local web development provider with a professional online presence and client testimonials. Technically, the website is built on WordPress using Elementor and other modern plugins, hosted likely by WEDOS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and secure form handling, though lacking explicit security headers and detailed security policies. Privacy compliance is partial, with a cookie consent banner but no dedicated privacy or terms pages. Overall, the site is professional, trustworthy, and business-focused, with room for improvement in security and compliance documentation.

C

Cortex Neuro Centre s.r.o

cortexneurocentre.cz

60

Cortex Neuro Centre s.r.o is a specialized neuro-therapeutic center based in Prague, Czech Republic, offering intensive therapy programs, developmental counseling, ergotherapy, and physiotherapy services for children and adults. The company positions itself as a trusted local healthcare provider with over 5 years of experience, supported by positive client testimonials and a professional online presence. Their business model focuses on appointment-based therapy sessions and consultations, targeting patients with neurological and developmental needs. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Analytics, and CookieYes for cookie consent management, hosted by REG-MEDIA4WEB. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced, Google reCAPTCHA v2 for bot protection, and a detailed cookie consent mechanism, although some security headers and explicit security policies are absent. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve trust and compliance.

F

fitness-rezervace.cz

fitness-rezervace.cz

47

fitness-rezervace.cz operates a specialized online reservation and information system primarily targeting fitness centers, gyms, yoga studios, and various sports facilities in the Czech Republic. Established in 2011, the company offers a comprehensive software solution that includes user management, payment integration, live streaming capabilities, and advanced features such as turnstiles, vouchers, and REST API for developers. Their market position is that of a niche leader within the Czech fitness and sports reservation software sector, supported by a small but focused business model emphasizing customization and client support. The website reflects a professional and consistent brand image with clear business information and contact details.

Q

Quickwash

quickwash.cz

55

Quickwash.cz is a Czech and Slovak regional network of branded self-service laundries operating under a franchise business model. Established in 2013 with the first laundry opening in 2014, the company has grown to over 20 locations. The website is built on WordPress using Elementor and integrates modern marketing tools such as Facebook Pixel and Seznam Retargeting. The site is well-structured, mobile-optimized, and provides clear information about locations and franchise opportunities. However, it lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is good with HTTPS and cookie consent implemented, but could be improved with additional security headers and policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

B

Balonky Praha

balonkypraha.cz

61

Balonky Praha operates a well-established e-commerce platform and physical stores specializing in party decorations, balloons, and helium supplies primarily serving the Czech and Slovak markets. Founded in 2014, the company offers a broad range of party-related products and services including balloon printing, party rentals, and event accessories. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive product offerings. Technically, the site is built on the nopCommerce platform, integrates modern marketing and analytics tools such as Google Analytics 4 and Facebook Pixel, and employs cookie consent mechanisms ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though improvements in security headers are recommended. Overall, the site reflects a trustworthy and credible business with good privacy practices and a user-friendly shopping experience.

S

Sosan

sosan.cz

51

Sosan.cz is a Czech private healthcare company specializing in comprehensive medical transport services using ambulances since 2003. The website presents a professional and consistent brand image targeting general audiences seeking private ambulance services. The technical infrastructure is based on Joomla CMS with modern web technologies including jQuery, Mootools, and Gantry framework. Google Analytics is integrated for visitor tracking, and a cookie consent mechanism is implemented to comply with privacy regulations. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy or security policies. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website is functional, moderately optimized, and trustworthy but would benefit from enhanced transparency and security documentation.

ESSEC Business School is a prestigious educational institution specializing in business education with a strong focus on innovation, entrepreneurship, and social responsibility. The website reflects a well-established brand with a professional online presence targeting students and professionals interested in business studies. The technical infrastructure leverages modern web technologies such as Next.js and React, hosted on reliable cloud services, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

C

CEDAR HOME

cedarhome.cz

48

CEDAR HOME is a Czech Republic based company specializing in the manufacturing and construction of modern and classic cedar wooden houses (roubenky). The company has a strong market presence with over 500 completed projects and multiple awards, positioning itself as a reputable player in the wooden house construction sector. Their website offers detailed information about their services, showcases realizations, and provides contact options including social media links and consultation forms. Technically, the website is built on Joomla CMS using Helix Ultimate framework and includes modern libraries such as jQuery, Bootstrap, and LayerSlider. The site is mobile optimized and has good SEO practices. Security posture is decent with HTTPS and CSRF protections, but lacks some security headers and explicit privacy policies. The absence of WHOIS data reduces domain trust slightly, but overall the business credibility and professionalism are high. Cookie consent is implemented, indicating some privacy compliance. No adult or questionable content is present, making the site safe for general audiences.

Ú

Úrad podpredsedu vlády pre plán obnovy a znalostnú ekonomiku

planobnovy.sk

53

The website www.planobnovy.sk serves as the official Slovak government platform dedicated to the EU Recovery Plan, aiming to provide comprehensive information, project monitoring, and transparency to Slovak citizens and stakeholders. It is managed by the Úrad podpredsedu vlády pre plán obnovy a znalostnú ekonomiku and features detailed content about the plan's priorities, implementation status, and related news. The site targets government entities, project implementers, and the general public interested in Slovakia's economic recovery efforts. Technically, the website employs a modern but straightforward technology stack including jQuery, Font Awesome, Google Fonts, Google Tag Manager, Google Analytics, Facebook Pixel, and Plausible Analytics. It uses HTTPS with good SSL configuration and implements a cookie consent mechanism compliant with GDPR. The site is mobile optimized with good navigation and accessibility basics, though some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses cookie consent tools to manage user privacy. However, it lacks a published security policy, vulnerability disclosure page, and incident response contact emails, which are recommended for enhanced trust and compliance. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's government affiliation, supporting its legitimacy. Overall, the website is a trustworthy and professional government resource with good content quality and privacy compliance. Strategic improvements in security policy transparency and accessibility would further strengthen its posture and user trust.

LUVENEX is a small Czech digital agency specializing in creative graphic work, website development, and internet marketing services. The company presents itself as a team of experienced professionals offering comprehensive digital solutions including web design, SEO, PPC advertising, and social media management. The website is professionally designed with clear service descriptions and client testimonials, indicating a stable market position within its niche. Technically, the site uses standard web technologies such as HTML5, CSS3, and Google Fonts, with moderate performance and good mobile optimization. However, there is no evidence of advanced frameworks or CMS platforms. Security posture is limited due to lack of HTTPS verification, missing security headers, and absence of privacy or cookie policies. The WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the website is functional and professional but requires improvements in security, compliance, and trust signals to enhance its credibility and risk profile.

GUM Leder- und Textilbekleidung GmbH operates a specialized retail store in Göttingen, Germany, focusing on jeans and leather apparel from well-known brands such as Levis, Lee, Timezone, Gipsy, and Ricano. The company has a longstanding market presence of over 30 years, emphasizing personal and honest customer service. Their business model centers on direct retail sales of clothing and accessories, targeting consumers seeking quality jeans and leather products. The website reflects a consistent brand image with good content quality and clear navigation tailored for a general audience. Technically, the website is built on the Jimdo Creator CMS platform, leveraging modern web technologies including jQuery, Flexslider, AOS animations, and Font Awesome icons. Hosting is provided via Jimdo with Cloudflare CDN integration, ensuring good performance and security. The site is mobile optimized and includes basic accessibility features, although there is room for improvement in security headers and framework updates. From a security perspective, the site enforces HTTPS with SSL/TLS encryption and implements cookie consent mechanisms aligned with GDPR requirements. The privacy policy is comprehensive and clearly communicated in German. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could benefit from enhanced headers and updated libraries. The overall risk assessment is low, with the website demonstrating good business credibility, privacy compliance, and technical implementation. Strategic recommendations include upgrading jQuery, adding security headers, publishing incident response details, and improving accessibility. These steps will further strengthen trust and security culture while supporting long-term digital maturity.

H

Hoßfeld-Coaching

seminarhof-iber.de

40

Hoßfeld-Coaching is a small German coaching and training service provider focusing on personal and professional development in the Göttingen, Kassel, and Berlin regions. The website is professionally designed using WordPress and Elementor, providing clear navigation and relevant content for its target audience. The technical infrastructure is modern and hosted on kasserver.com, with SSL properly configured and a cookie consent mechanism implemented. Security posture is good but could be improved by adding security headers and incident response information. Privacy compliance is strong with a comprehensive privacy policy and cookie notice. Overall, the website presents a trustworthy and professional business presence with clear contact information and no suspicious indicators.

H

Hoßfeld-Coaching

hossfeld-coaching.de

41

Hoßfeld-Coaching is a small German coaching and training service provider specializing in personal and professional development, communication, and change management. The company operates primarily in the Göttingen, Kassel, and Berlin regions, offering coaching sessions, seminars, and workshops. The website is professionally designed using WordPress and Elementor, providing clear navigation and relevant content tailored to individuals seeking coaching services. The technical infrastructure is modern and hosted on kasserver.com, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be added to enhance protection. Privacy policies are present and GDPR compliant, but no explicit security or incident response policies are published. Overall, the website is trustworthy and well-maintained, with clear contact information and no suspicious elements detected.

C

Curbtender Sweepers LLC

curbtendersweepers.com

51

Curbtender Sweepers LLC is a medium-sized U.S.-based manufacturer specializing in mechanical street sweepers and regenerative air sweepers, holding multiple patents and PM10 certifications. The company targets municipalities, government agencies, and commercial street cleaning services, positioning itself as a leading innovator in the transportation equipment sector. Their website reflects a professional and consistent brand image with clear product offerings and government purchasing options. Technically, the site is built on WordPress with a modern tech stack including popular plugins and analytics tools, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks DNSSEC and security headers, indicating room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing privacy and security policies to improve compliance and trust.

L

Lese-Zeichen e.V.

lesezeichen-ev.de

40

Lese-Zeichen e.V. is a small non-profit cultural association based in Germany, dedicated to promoting literature and organizing literary events, readings, and podcasts. The website serves as a hub for event information, news, and cultural content targeting literature enthusiasts primarily in the Thuringia region. The organization maintains an active presence with detailed event calendars and multimedia content, including podcasts and videos. Technically, the website uses a modern Bootstrap framework with common JavaScript libraries and custom scripts, providing a responsive and user-friendly experience. However, some technical aspects such as mixed content loading and lack of security headers indicate room for improvement in security practices. The security posture is moderate, with client-side password hashing implemented but lacking comprehensive protections like CSRF tokens and secure script delivery. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a significant gap given GDPR requirements. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to improve trust and compliance.

L

LUKAS Hydraulik GmbH

lukas.com

59

LUKAS Hydraulik GmbH is a well-established German manufacturer specializing in hydraulic products for rescue equipment and industrial applications. With a history dating back to the 1940s and a domain registered since 1995, the company operates as a subsidiary of IDEX Corporation, reinforcing its market credibility. The website effectively communicates the company's expertise, product range, and global dealer network, targeting industrial clients, rescue services, and job seekers. Technically, the site is built on Joomla CMS with modern front-end libraries and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and CSRF protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the site reflects a professional and trustworthy corporate presence.

B

Bluetree

bluetree.no

54

Bluetree is a Norwegian IT services company specializing in cybersecurity, IT operations, and digital projects focused on network and cloud solutions. Positioned as an award-winning strategic partner, Bluetree targets enterprise companies seeking secure and innovative IT solutions. The website is professionally designed using HubSpot CMS, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a cookie consent banner and a comprehensive privacy policy, indicating GDPR awareness. The absence of public WHOIS data suggests privacy protection, which is justified for this business type. Overall, Bluetree presents a credible and trustworthy online presence with moderate to high technical and security maturity.

D

Defendable

defendable.no

72

Defendable is a prominent Norwegian cybersecurity company founded in 2021, offering a broad range of services including security monitoring, advisory, incident response, and security testing. Positioned as one of Norway's largest cybersecurity firms, it targets businesses seeking comprehensive cyber defense solutions. The website is professionally designed using HubSpot CMS, featuring multilingual support and a clear service structure. Technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager and reCAPTCHA Enterprise, indicating a mature digital presence. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and use of security best practices, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a trustworthy and professional business with room for enhanced transparency in security and compliance documentation.

N

Netsecurity

netsecurity.no

71

Netsecurity is a Norwegian digital security company focused on enhancing safety for private companies and public sector organizations in an increasingly digital world. The company is approved by the Norwegian National Security Authority (NSM), indicating a strong market position in critical infrastructure protection. Their services target sectors such as energy, transportation, and telecommunications, emphasizing the security of complex, interconnected digital systems. The website content is professional and well-structured, with multimedia elements like videos to educate visitors on digital vulnerabilities. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and implements standard security headers and HTTPS, reflecting a mature digital infrastructure. However, some accessibility features could be improved. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers. There is no evidence of exposed sensitive data or vulnerable libraries. The presence of a cookie consent mechanism aligns with privacy regulations, though the absence of a dedicated privacy policy and terms of service pages indicates room for improvement in compliance and transparency. Overall, the website presents a low risk profile with strong trust indicators, though enhancing privacy disclosures and contact transparency would further strengthen its security posture and user trust.

W

Wedding Photo Dress

weddingphotodress.com

62

Wedding Photo Dress is a technology-driven company specializing in AI-generated wedding and corporate profile photos. Their platform leverages advanced AI to provide users with realistic and customizable headshots and wedding photo dress try-ons, targeting individuals and professionals seeking high-quality digital images for social media and branding. The company positions itself as a leader in AI photography solutions with a focus on ease of use and innovation. Technically, the website is built on modern frameworks such as Next.js and React, incorporating Google Fonts, Font Awesome, and multiple analytics and advertising tools including Google Analytics, Microsoft Clarity, and Google Adsense. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks several security headers and visible security policies. The absence of WHOIS data raises some concerns about domain registration transparency, although the professional presentation and active social media presence mitigate some risks. Overall, the site presents a moderate risk profile with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and clarifying incident response procedures to build greater trust and compliance.

O

Obec Ostřetín

ostretin.cz

9

Obec Ostřetín operates as a local government municipality in the Czech Republic, providing community information, public notices, and administrative services to residents and visitors. The website serves as an official portal for municipal updates, event announcements, and practical information such as waste collection schedules. The site targets local citizens and stakeholders interested in municipal affairs. Technically, the website employs a mix of JavaScript libraries including jQuery and MooTools, and appears to be built on the GC-System CMS platform. The site is moderately optimized for performance and accessibility, with basic mobile responsiveness and SEO features. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the presence of official contact details and certifications supports legitimacy. Overall, the website is functional and professional but would benefit from enhanced security and compliance documentation.

pg-webstudio is a small German web design and development service provider specializing in custom websites using popular CMS platforms such as Wordpress, Drupal, Grav, Contao, and Joomla. The company targets local businesses and individuals in Göttingen and surrounding areas, offering a comprehensive range of services including SEO, responsive design, interactive maps, and ongoing website maintenance. The website showcases a strong portfolio of client projects across various industries, demonstrating technical versatility and design expertise. Technically, the site uses modern web standards and frameworks like Bootstrap 4 and jQuery, hosted on Alfahosting servers. Mobile optimization and user experience are excellent, with clear navigation and professional content. Security posture is moderate with cookie consent implemented and form nonce tokens present, but lacks visible HTTP security headers and explicit security policies. No active analytics tracking or advertising is detected, enhancing privacy compliance. WHOIS data aligns with the website's business focus, indicating legitimacy. Overall, the site is professional, trustworthy, and well-structured.

L

Landesverband der Kita- und Schulfördervereine Berlin-Brandenburg e.V.

lsfb.de

47

The Landesverband der Kita- und Schulfördervereine Berlin-Brandenburg e.V. operates as a regional non-profit association supporting daycare and school support organizations in the Berlin-Brandenburg area. The website serves as an informational and advocacy platform targeting parents, educators, and affiliated support groups. The organization positions itself as a key regional player in educational support, focusing on community engagement and resource provision. Technically, the website is built on WordPress CMS with modern frameworks such as Bootstrap and Elementor, hosted by Alfahosting. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. Accessibility is enhanced by a dedicated accessibility tool, and cookie consent mechanisms are implemented, reflecting a moderate level of digital maturity. From a security perspective, the site benefits from HTTPS and updated software components but lacks explicit privacy policies, terms of service, and incident response contacts. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and compliance. Security headers are partially implemented, and no WAF or blocking mechanisms interfere with accessibility. Overall, the website is professionally designed and functional with good content relevance and user experience. However, to enhance trust and compliance, the organization should publish comprehensive privacy and security policies and provide clear contact channels for security incidents.

O

OEMUS MEDIA AG

jobsuchtdich.de

43

The website jobsuchtdich.de is a German job portal operated by OEMUS MEDIA AG, focusing on providing job listings and recruitment advertising services. The site targets job seekers and employers primarily in Germany, positioning itself as a niche media company within the recruitment sector. The business model revolves around online job advertising and media services. Technically, the site is built on WordPress using Elementor and JetEngine plugins, hosted on servers with kasserver.com nameservers. The site includes cookie consent mechanisms via BorlabsCookie and SEO optimizations through Rank Math. However, there is a lack of visible privacy policy, terms of service, and explicit contact information, which impacts compliance and trust. Security posture is moderate with no detected security headers or incident response information, and SSL configuration details are not provided. Overall, the site is professionally designed, mobile optimized, and content is relevant and safe for general audiences.

N

Naturwald Akademie gGmbH

waldmonitor-deutschland.de

56

Waldmonitor Deutschland is a small, specialized organization providing free satellite-based forest monitoring services across Germany. The platform offers detailed maps on forest condition, tree species distribution, and forest fire occurrences, targeting forest owners, municipalities, and governmental bodies. The business operates in partnership with Remote Sensing Solutions and is managed by Naturwald Akademie gGmbH. The website is professionally designed with clear navigation and good content relevance, supporting its mission to provide accessible environmental data. Technically, the website employs modern frontend technologies such as Bootstrap and Font Awesome, ensuring good mobile responsiveness and user experience. The site uses HTTPS and implements a cookie consent mechanism with opt-in, reflecting a commitment to privacy compliance. However, no advanced security headers or incident response policies are published, indicating room for improvement in security posture. Security-wise, the site shows a good baseline with HTTPS and minimal tracking, but lacks explicit security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious WHOIS patterns were detected, and the domain registration aligns well with the business purpose. Overall, the site is trustworthy and secure for its intended audience. The overall risk is low, but strategic improvements in security headers, incident response transparency, and terms of service publication would enhance trust and compliance. The site’s minimal tracking and clear contact information support a positive privacy stance.

O

Oshkosh Corporation

oshkoshairport.com

62

Oshkosh Airport Products is a division of Oshkosh Corporation specializing in the design and manufacture of Airport Rescue and Firefighting (ARFF) vehicles for airports worldwide. The company holds a strong market position as a leading manufacturer with a comprehensive dealer network and aftermarket support, offering high-performance ARFF trucks and innovative solutions such as electric ARFF vehicles. The website reflects a professional and consistent brand presence aligned with Oshkosh Corporation's corporate identity. Technically, the website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools including Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility and security headers could be made. Performance is moderate, with a well-structured navigation and rich content. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not fully implemented, and no dedicated security or incident response policies are visible. The WHOIS data is unavailable, which limits domain registration trust analysis, but the website content and branding strongly support legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers, accessibility, and visible policy links would enhance trust and compliance further.