Security Directory

Kotisivupalvelu.fi is a Finnish marketplace platform operated by Louhi Net Oy, specializing in connecting businesses and individuals seeking professional website creators with qualified Finnish web designers and developers. The platform leverages Louhi Networks' extensive infrastructure, managing over 50,000 domains and 10,000 WordPress hosting platforms, positioning itself as a trusted intermediary in the Finnish web services market. The business model is referral-based, free for both clients and creators, focusing on facilitating connections rather than direct website creation or hosting sales. Technically, the website is built on WordPress 6.7.2 using the Avada theme, with modern JavaScript libraries such as jQuery and Bootstrap. The site is hosted likely by Louhi Networks, ensuring integration with their domain and hosting services. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses modern libraries, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with accessible privacy and cookie policies including consent mechanisms. Contact information is primarily via forms and linked sales pages, with no direct emails or phone numbers on the main site. Overall, the website presents a professional and trustworthy front with a clear business purpose and consistent branding. Recommendations include enhancing security headers, publishing formal security and incident response policies, adding terms of service, and improving accessibility compliance to strengthen trust and compliance posture.

P

Petr Chára

evidence-praci.cz

60

Evidence-praci.cz is a Czech Republic based small technology business offering an online SaaS application for work tracking, project management, and client invoicing. The platform targets small to medium businesses requiring efficient work evidence and billing solutions. The website is professionally designed with clear navigation, responsive layout, and detailed product descriptions. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and Google Fonts, with analytics and retargeting scripts from Google and Seznam. Security posture is adequate with HTTPS enforced and OWASP recommendations mentioned, but lacks explicit security headers and published privacy policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the website presents a credible business with moderate risk due to missing WHOIS and privacy documentation.

G

Graphica tisk & web s.r.o.

graphica.cz

51

Graphica tisk & web s.r.o. is a Czech Republic based small business specializing in web design, print materials, online advertising, and custom software applications. Established since 1990, the company serves a diverse clientele including developers and businesses primarily in Prague. Their business model emphasizes personalized service, free graphic proposals, and client transparency through online account tracking. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and Owl Carousel, hosted likely by Active24. The site is mobile responsive with good SEO and accessibility basics. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy compliance is strong with comprehensive GDPR statements and minimal tracking. WHOIS data is missing, which lowers domain trust but the professional website content and detailed contact information support legitimacy. Overall, the site scores well in content quality and business credibility but should improve security headers and domain transparency.

T

TPH sport agency, a. s.

kopemezafotbal.cz

41

The website kopemezafotbal.cz represents a promotional project called 'Gambrinus Kopeme za fotbal' managed by TPH sport agency, a. s., targeting amateur football teams primarily in the Czech Republic and Slovakia. The platform facilitates team registrations, organizes competitions, and offers rewards linked to the purchase of Gambrinus beer products. The project leverages the strong brand presence of Gambrinus and integrates social media channels to engage its audience. The domain is well-established since 2016 and hosted on a Czech hosting provider, reflecting a stable and legitimate online presence. Technically, the site is built on OctoberCMS with Bootstrap for responsive design and includes Google Maps integration to display participating teams. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are recommended, such as adding security headers and enhancing form security with CSRF tokens. From a security perspective, the site enforces HTTPS and includes an age verification mechanism to restrict access to users over 18, aligning with the promotion of alcoholic beverages. No major vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic but present, linking to the parent brand's privacy and cookie policies. Contact information is comprehensive, enhancing business credibility. Overall, the website demonstrates a solid business and technical foundation with moderate security posture. Strategic improvements in security headers and privacy disclosures could enhance trust and compliance. The content is adult-oriented due to alcohol promotion but safe for the intended mature audience.

P

Plzeňský Prazdroj, a. s.

gambrinuscup.cz

51

Gambrinus Cup is a Czech darts tournament organized by Plzeňský Prazdroj, a major brewery company. The website promotes the event, providing registration for teams and pubs, with prizes totaling 250,000 Kč. The site targets mature audiences interested in darts and pub culture in the Czech Republic. Technically, the site uses modern web technologies including Bootstrap and Leaflet.js for interactive maps, and integrates Google Tag Manager and Analytics for tracking. Security posture is solid with HTTPS and age verification, though explicit security policies and headers could be improved. Privacy compliance is supported by cookie consent and links to privacy terms. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

M

Ministerstvo průmyslu a obchodu (MPO)

podporapodniku.cz

55

The website podporapodniku.gov.cz is an official Czech government portal operated by the Ministry of Industry and Trade (Ministerstvo průmyslu a obchodu - MPO). It serves as an interactive search tool for entrepreneurs to find business support programs tailored to their company's age, size, location, and support area. The portal targets Czech entrepreneurs and SMEs, providing a centralized resource for funding, innovation, and development support. The site is well-branded with official logos and European Union co-financing indicators, enhancing trust and legitimacy. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, Select2, and Tiny Slider, and is built on the cms3.nux.cz content management system. The site is mobile responsive and performs moderately well, with good SEO and accessibility basics. However, no advanced security headers were detected, and privacy and cookie policies are not present or visible, indicating room for improvement in compliance and security transparency. From a security perspective, the site enforces HTTPS and uses secure form validation, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were found, and the site is fully accessible without WAF or blocking mechanisms. The absence of WHOIS data limits domain registration insights, but the official nature and trust signals of the site mitigate concerns. Overall, the site is a credible, government-backed resource with good business credibility and technical implementation. Strategic recommendations include adding comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and publishing vulnerability disclosure and incident response information to enhance security posture and compliance.

S

SEI

cr-sei.cz

57

The website sei.gov.cz represents the official online presence of the Státní energetická inspekce (State Energy Inspection) of the Czech Republic. It serves as a government regulatory body focused on energy inspections, compliance, and dissemination of energy-related legal information. The site targets a broad audience including government entities, building owners, energy specialists, and the general public interested in energy regulation and compliance. Key services include issuing official statements in construction proceedings, managing energy specialist education, and providing updates on energy legislation and projects. The website is well-branded, consistent, and trustworthy, reflecting its government affiliation.

T

Tilava Oy LKV

tilava.fi

42

Tilava Oy LKV is a Finnish real estate brokerage company established in 2005, offering high-quality property brokerage services. The company targets Finnish real estate clients and partners, positioning itself as an experienced and reliable player in the local market. The website reflects a professional business with clear branding and relevant content focused on real estate services. Technically, the website uses Joomla CMS with common libraries such as jQuery, Bootstrap, and UIkit, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website uses HTTPS but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No forms or incident response contacts are present, which limits the security posture. Overall, the domain registration data is consistent with the business claims, showing a long-established domain without privacy protection, which supports legitimacy. The website is safe with no adult or questionable content detected.

K

Kauppakeskus Tuulonen

tuulonen.fi

57

Kauppakeskus Tuulonen is a local rural shopping center located in Tuulos, Finland, offering a variety of retail stores, restaurants, cafes, meeting rooms, and services such as electric vehicle charging and package automats. The website targets local residents and visitors, providing event information and community engagement. Technically, the site uses a modern stack including Bootstrap, Google Tag Manager, and Cloudfront CDN, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent implemented, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit contact emails and phone numbers on the main pages. The domain registration data aligns well with the business location and nature, supporting legitimacy.

S

Schlage

schlage.co.nz

74

Schlage New Zealand operates as a reputable manufacturer and retailer of door hardware and smart locks, serving homeowners and businesses with precision-built security products. The website reflects a mature digital presence consistent with its 2006 domain registration and affiliation with parent company Allegion. The site is built on Adobe Experience Manager, leveraging modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA to provide a secure and user-friendly experience. Privacy and cookie policies are clearly presented with consent mechanisms, supporting GDPR compliance. Security posture is solid with HTTPS enforced and form protections in place, though some security headers could be improved. Overall, the website demonstrates a professional and trustworthy online presence aligned with its business objectives.

C

Code Cabin, Inc.

trustedorigin.org

57

Trusted Origin is a technology company founded in 2020, providing trust certification services primarily targeting eCommerce websites. Their core offering is a Trust Badge that helps online businesses increase customer trust and improve conversion rates by verifying website security, business legitimacy, and scanning for malware. The company positions itself as a standard for online trust identification, leveraging manual business verification and automated security scans. The website is professionally designed with modern frontend technologies and responsive design, supporting a positive user experience. The technical infrastructure includes Bootstrap, jQuery, Google Analytics, Stripe Checkout, and Cloudflare for DNS and CDN services. Security posture is strong with HTTPS enforced, SSL validation, malware scanning, and phishing/spam checks. However, the site lacks published privacy and cookie policies, incident response contacts, and vulnerability disclosure information, which are important for compliance and transparency. Overall, the domain registration is privacy protected but consistent with the business claims and age. The website is safe, trustworthy, and well-positioned in its niche, but could improve compliance and transparency aspects.

A

Francouzské vinotéky | ELMAXSHOP.CZ

avintage.cz

68

ELMAXSHOP.CZ operates as a Czech-based e-commerce retailer specializing in household appliances and electronics, including niche products such as French wine cabinets. The website demonstrates a mature online retail platform with features like product search autocomplete, customer account management, order tracking, and product comparison. The business targets consumers in the Czech Republic seeking quality home appliances and electronics. Technically, the site is built on the nopCommerce platform, leveraging modern JavaScript libraries and analytics tools such as Microsoft Clarity, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers suggests room for improvement. The lack of WHOIS data limits domain registration trust verification, but the professional presentation and contact transparency support legitimacy. Overall, the site is well-positioned in its market segment with a solid technical foundation and compliance awareness.

E

ELMAXSHOP.CZ

elmaxshop.cz

67

Elmaxshop.cz is an established Czech Republic-based e-commerce retailer specializing in household appliances, electronics, and home accessories. The website offers a broad range of product categories including white goods, built-in appliances, kitchen gadgets, vacuum cleaners, and more, targeting consumers primarily within the Czech market. The business model is focused on online retail with customer support via phone and email, and features such as order tracking and user account management. The site branding is consistent and content quality is good, supporting a professional user experience.

MEA Group GmbH operates a professional manufacturing business specializing in drainage and construction products, including English courtyards and cellar skylights, with over 130 years of industry experience. The company targets construction professionals and customers primarily in the Czech Republic, offering a broad product portfolio supported by technical documentation and BIM files. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring moderate performance and good user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers and published security policies could enhance trust. Privacy compliance is strong, with comprehensive policies and GDPR adherence. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration status, which should be verified further. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected.

E

ELMAX STORE a.s.

elmax.cz

56

ELMAX STORE a.s. is a Czech-based company specializing in wholesale and retail sales of electrical appliances and white goods, operating since 1997. The company holds exclusive distribution rights for notable French brands such as Brandt and De Dietrich and offers a broad portfolio including their own brand Kluge. Their business model combines wholesale, retail physical stores, and e-commerce, targeting both B2B and B2C customers primarily in the Czech Republic and Slovakia. The website reflects a professional and consistent brand presence with comprehensive contact and service information. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates multiple analytics and marketing tools such as Microsoft Clarity, Google Tag Manager, Facebook Pixel, and HubSpot Analytics. The site is mobile-optimized with a moderate performance profile. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no incident response or vulnerability disclosure information is published. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy trust scores. Despite this, the website content and business information are consistent with a legitimate medium-sized retail company. No adult or questionable content is present, and privacy compliance measures are evident. Overall, the site is professional and trustworthy but would benefit from improved transparency in domain registration and enhanced security practices. Strategic recommendations include implementing security headers, publishing incident response contacts and vulnerability disclosure policies, and verifying domain registration details to improve trust and compliance.

C

Canaba

canaba.cz

54

Canaba is a Czech Republic-based real estate company specializing in the design, construction, and sale of low-energy family houses and apartments. With over 35 years of experience and more than 8,000 homes built, the company holds a strong market position supported by multiple prestigious awards. Their business model focuses on turnkey housing solutions, free project plans, and ready-to-move properties, targeting families and individuals seeking modern, energy-efficient homes primarily in the Czech Republic and neighboring countries. The website reflects a professional and consistent brand image with clear navigation and relevant content.

O

Osječko-baranjska županija

obz.hr

59

Osječko-baranjska županija operates as the official regional government authority for the Osječko-baranjska County in Croatia. The website serves as a comprehensive portal for local government information, public notices, investment projects, social services, and EU fund programs. It targets residents, businesses, and stakeholders within the county, providing transparent access to administrative and developmental resources. The site is well-structured, professionally designed, and consistent with government branding standards. Technically, the website is built on Joomla CMS, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and various sliders for dynamic content presentation. It incorporates accessibility features including the UserWay widget and is optimized for mobile devices. The site uses HTTPS and Google Analytics for visitor tracking, with a cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site demonstrates good practices including ISO 27001 certification, HTTPS enforcement, and cookie consent management. However, WHOIS data is unavailable due to GDPR and rate limiting, which is typical for EU government domains. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit incident response contact information and security.txt is noted as an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing incident response contacts, enhancing security headers, and maintaining regular audits of third-party scripts to sustain security and trust.

O

Općina Podravska Moslavina

podravskamoslavina.hr

41

Općina Podravska Moslavina is the official local government entity serving the Podravska Moslavina municipality in Croatia. The website functions as a public information portal providing residents and stakeholders with access to local government news, official documents, public calls, and contact information. The site is positioned as a trusted source for municipal information and transparency, targeting local citizens and interested parties. The business model is typical for government entities, focusing on service delivery and information dissemination rather than commercial activities. Technically, the website is built on WordPress CMS using Elementor page builder and Yoast SEO for optimization. It employs modern web technologies including jQuery, Bootstrap, and Font Awesome. The site is hosted under a Croatian registrar (CARNET), indicating local hosting and compliance with regional standards. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are implemented adequately. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide a dedicated security policy or incident response contact. There is no cookie consent mechanism, which may impact GDPR compliance. No vulnerabilities or malicious content were detected. Overall, the security posture is acceptable but could be improved with additional headers and compliance features. The overall risk assessment is low given the nature of the site and its content. Strategic recommendations include implementing cookie consent for GDPR, adding security headers, publishing a security policy, and maintaining regular updates to WordPress and plugins. These steps will enhance trust, compliance, and security resilience.

G

GORDIC spol. s r.o.

gordic.cz

66

GORDIC spol. s r.o. is a well-established Czech software company specializing in information systems for public administration and private sector clients. With over 30 years of experience, the company offers a broad portfolio including cybersecurity, cloud services, and training. Their market position is strong within the Czech Republic, supported by compliance with GDPR, ISO standards, and ISMS frameworks. The website reflects a mature digital presence with professional design and comprehensive service offerings. Technically, the site leverages modern frameworks such as Liferay and React, integrates multiple analytics and marketing tools, and maintains good performance and accessibility standards. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contacts could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy indicated by the website content and compliance programs. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure policies, and increasing transparency on data retention.

E

Eco Valley Foundation

ecovalley.hu

55

Eco Valley Foundation is a small, established non-profit organization based in Hungary, dedicated to promoting ecological sustainability through education, volunteer programs, and organic farming projects. Their website reflects a clear mission focused on community engagement and environmental awareness, targeting volunteers, students, and supporters of sustainable living. The organization has a consistent brand presence and provides transparent contact information, enhancing trustworthiness. Technically, the website is built on WordPress with common libraries such as jQuery and Bootstrap, offering moderate performance and good mobile optimization. However, it lacks advanced security headers and privacy compliance features such as cookie consent and privacy policies, which are critical for GDPR adherence. The site uses HTTPS, ensuring secure communication. From a security perspective, the site demonstrates basic best practices like HTTPS and CAPTCHA on forms but lacks published security policies or incident response contacts. No vulnerabilities or suspicious domains were detected. The WHOIS data confirms the domain's legitimacy and long-standing presence, supporting the organization's credibility. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security posture improvements to align with modern standards and regulations.

S

Suzana Stojković

suzanastojkovic.com

54

Suzana Stojković operates a professional creative services website specializing in branding, graphic design, web design, photography, and video/animation services. The website presents a strong market position with a portfolio of satisfied clients and testimonials, targeting businesses and individuals seeking tailored creative solutions. Technically, the site is built on WordPress using Elementor and several modern plugins, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and incident response mechanisms are recommended. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is professional, user-friendly, and compliant with privacy regulations, making it a credible digital presence for the business.

T

True Animal Protein Price Coalition

tappcoalition.eu

65

The True Animal Protein Price Coalition is a small non-profit organization dedicated to advocating for fair pricing and taxation policies to promote sustainable production and consumption of meat and dairy products. Their market position is niche, targeting policymakers, environmental advocates, and consumers interested in sustainable food systems. The website provides key services such as organizing events, publishing reports, and distributing newsletters to support their advocacy efforts. Technically, the website is built on a modern stack including Bootstrap, FontAwesome, Google reCAPTCHA, and Google Tag Manager, hosted under a reputable registrar. The site is mobile-optimized with good SEO and accessibility basics. From a security perspective, the website enforces HTTPS, uses reCAPTCHA for form protection, and implements a cookie consent mechanism, reflecting a good security posture. However, it lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance indicators are present. Overall, the website is professional, trustworthy, and safe, with no adult or questionable content. The domain registration is consistent with the organization's claims, and no suspicious patterns were found. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen trust and compliance.

I

ION Network Solutions s.à r.l.

ion.lu

45

ION Network Solutions s.à r.l. is an established IT services company based in Luxembourg with over 20 years of experience and a medium-sized team of more than 20 collaborators. The company targets both professional and individual clients, offering IT solutions including custom software development. Their market position is solid within the Luxembourg IT sector, supported by a professional website showcasing client logos and social media presence. Technically, the website uses modern JavaScript libraries such as Dojo Toolkit, Bootstrap, jQuery, and Glide.js, along with Google Maps API integration. The hosting appears to be managed via mbox.lu, a Luxembourg-based provider. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and vulnerability disclosure information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional, well-branded, and trustworthy but could improve in privacy and security transparency.

M

Matkatoimisto Satalomat

satalomat.fi

47

Matkatoimisto Satalomat is a local travel agency based in Pori, Finland, specializing in a wide range of travel services including flights, city breaks, beach holidays, cruises, business trips, spa holidays, and visa services. The company positions itself as a trusted local provider with partnerships with multiple well-known travel and airline companies, catering primarily to Finnish travelers. Their website is professionally designed using WordPress with modern plugins for SEO and social media integration, reflecting a moderate to high level of digital maturity. The technical infrastructure includes Google Analytics and HubSpot for marketing and analytics, and security measures such as HTTPS and Google Invisible reCAPTCHA are implemented to protect user interactions. However, the absence of a cookie consent banner and explicit security headers indicates room for improvement in privacy compliance and security posture. Overall, the website is trustworthy, content-rich, and well-structured, supporting the company's business credibility and customer engagement.

F

Floristimestari

floristimestari.fi

46

Floristimestari is a small local florist business based in Pori, Finland, specializing in floral arrangements, flower delivery, workshops, and retail sales. The company operates both a physical store and an online webshop, targeting general consumers and corporate clients in the local area. The website is built on WordPress and leverages common plugins such as Yoast SEO and Instagram Feed to enhance SEO and social media integration. The business demonstrates a consistent brand presence and provides clear contact information, including email, phone, and physical address. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR requirements. Technically, the website uses a modern tech stack with Bootstrap and jQuery, and it is mobile-optimized with good SEO practices. Security posture is moderate with HTTPS enabled and anonymized Google Analytics tracking, but lacks security headers and a vulnerability disclosure policy. No forms collect sensitive personal data except a search function, reducing risk exposure. The domain registration details align well with the business information, supporting legitimacy and trustworthiness. Overall, the website is professional and functional, serving its business purpose effectively. To improve security and compliance, the business should implement privacy and cookie policies with consent mechanisms, add security headers, and consider publishing a security.txt file. These steps will enhance user trust and regulatory adherence.

A

ALO Finland

alofinland.com

53

ALO Finland is a Finnish educational company specializing in digital teacher training focused on Finnish education methodologies for preschool and primary education professionals. The company offers Massive Open Online Courses (MOOCs) and fosters a community of educators passionate about innovation and creativity in education. Their market position is niche, targeting educators and school administrators interested in Finnish pedagogical practices. The website is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks some security headers and explicit privacy policy documentation. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the active social media presence and professional content support business credibility. Overall, the site is safe, professional, and focused on educational content.

S

Skydent Oy

skydent.fi

42

Skydent Oy operates a modern dental laboratory located in Tampere, Finland, specializing in a wide range of prosthetic dental solutions including fixed and removable prosthetics and digital CAD-CAM services. The company targets dental professionals and patients requiring high-quality dental prosthetics, positioning itself as a local expert with advanced technology such as 3Shape scanners. The website reflects a small-sized healthcare business with a professional and consistent brand presence, providing clear service descriptions and contact details. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses Bootstrap for responsive design. It integrates Google Analytics for visitor tracking and demonstrates moderate performance and good mobile optimization. However, some accessibility features are basic, and there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. The absence of security headers and lack of an incident response or security policy page are areas for enhancement. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected, which is important for GDPR compliance. Overall, the website is trustworthy and professional with no signs of malicious content or blocking mechanisms. Strategic recommendations include implementing security headers, adding cookie consent, and establishing incident response contacts to strengthen security and compliance posture.

K

Karlevy Oy

karlevy.fi

44

Karlevy Oy is a Finnish small manufacturing company specializing in ecological and high-quality acoustic curtains. The company offers tailored acoustic curtain solutions and related accessories, emphasizing sustainability, quality, and customer service. Their market position is niche-focused within Finland, targeting both business and consumer segments seeking acoustic solutions. The website is built on a modern WordPress CMS with WooCommerce for e-commerce capabilities, integrating popular plugins such as Yoast SEO and Jetpack. The technical infrastructure is solid with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is partially met with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's business goals effectively.

S

Stance

hannatuominen.fi

45

The website www.hannatuominen.fi represents a Finnish small business named Stance, operated by Hanna Tuominen, offering personal and corporate leadership coaching and development services. The business has a clear niche in leadership and management coaching, leveraging frameworks such as LMI and DISC. The website is professionally designed using WordPress with modern technologies including Bootstrap and Google reCAPTCHA, providing a good user experience and mobile optimization. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is solid with HTTPS and form protections, but could be improved by adding security headers and a vulnerability disclosure policy. Contact information is clearly presented, enhancing business credibility. Overall, the site is trustworthy and well-positioned in its market segment.

S

Suomen Opetuskaluste Oy

opetuskaluste.fi

45

Suomen Opetuskaluste Oy is a Finnish family-owned company specializing in educational furniture and presentation equipment, operating since 1987. The company positions itself as a trusted provider with decades of experience, targeting educational institutions and professionals in Finland. Their product range includes whiteboards, blackboards, notice boards, and various teaching accessories. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their market segment. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. However, some security best practices such as security headers and explicit privacy policies are missing. The site uses HTTPS and integrates Google Analytics and Google Tag Manager with IP anonymization, indicating moderate attention to user privacy. Overall, the security posture is adequate but could be improved with better compliance and incident response disclosures.

E

Ealys

ladesirade-vence.fr

39

The website www.ladesirade-vence.fr represents a small hospitality business offering a vacation villa rental in Vence, France. The site provides detailed information about the villa, including accommodation capacity, amenities, and local attractions, targeting tourists and vacationers seeking a premium holiday experience on the Côte d'Azur. The business appears to be a niche local operator with a professional online presence but limited public business registration transparency. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, delivering a visually appealing and mobile-optimized experience. However, there is no evidence of a CMS or advanced backend platform. Performance is moderate with good SEO basics but lacks advanced analytics or tracking tools. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, and WHOIS data is not publicly available, which is common for small businesses but reduces transparency. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is minimal, with a basic privacy policy page but no cookie banner or GDPR explicit consent. Overall, the website is functional and professional but would benefit from enhanced security practices, improved privacy compliance, and greater transparency in business and domain registration information to increase trustworthiness and regulatory adherence.

S

Société Française de Dermatologie

sfdermato.org

53

The Société Française de Dermatologie (SFD) is a well-established French non-profit professional society dedicated to promoting dermatology research, education, and public health. With over 130 years of history and more than 2400 members, it serves medical professionals, researchers, and patients by providing educational resources, funding opportunities, and organizing congresses. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design consistent with its mission. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and uses HTTPS with good SSL configuration. However, some security best practices such as security headers and explicit security policies are missing, which could be improved to enhance the security posture. From a security perspective, the site shows good privacy compliance with GDPR-aligned cookie consent and anonymized analytics. No vulnerabilities or suspicious activities were detected. The absence of WHOIS data limits domain trust analysis, but the professional content and certifications like HONcode support legitimacy. Overall, the site is a trustworthy and authoritative resource in the dermatology field, with recommendations to improve security headers, publish security policies, and clarify domain registration data to further strengthen trust and compliance.

F

FRS Clipper

clippervacations.com

57

FRS Clipper operates the Clipper Vacations website, providing passenger-only ferry services between Seattle, WA and Victoria, BC, along with hotel packages, day trips, and tours such as whale watching. The company holds a strong regional market position in the Pacific Northwest travel and transportation sector, targeting leisure travelers and groups. Their business model integrates transportation with hospitality services, offering bundled packages and affiliate programs to expand reach. Technically, the website is built on WordPress with Bootstrap framework, leveraging modern analytics and marketing tools including Google Tag Manager, Facebook Pixel, PostHog, and Bing Ads. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced and secure form handling, though there is room to improve HTTP security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities were detected in the visible code. Privacy compliance is basic with a clear privacy policy and terms of service, but lacks a visible cookie consent mechanism. Overall, the website presents a professional, trustworthy, and user-friendly platform for travel bookings. The absence of WHOIS data is a minor concern but likely due to privacy protection. Strategic recommendations include enhancing security headers, implementing cookie consent, and continuous monitoring of third-party scripts to maintain security and compliance.

O

Opiferum Oy

opiferum.com

69

Opiferum Oy is a Finnish technology company specializing in creating modern, user-friendly websites, e-commerce platforms, and intranet solutions tailored to business needs. With over 20 years of experience, they position themselves as a trusted local provider in Hämeenlinna, focusing on clear communication and customer-centric services. Their offerings include website development, online stores, additional services like email hosting and SEO, and ongoing support and training. Technically, the website employs modern frameworks such as Bootstrap, integrates with Google Analytics and Tawk.to for analytics and customer engagement, and uses Cookiebot for GDPR-compliant cookie management. The site is hosted on AWS Cloudfront CDN, ensuring reliable performance and availability. Security-wise, the site enforces HTTPS, uses standard security headers, and provides a comprehensive cookie consent mechanism, though it lacks explicit security policy and incident response disclosures. Overall, the website is professional, well-structured, and compliant with privacy regulations, reflecting a mature digital presence suitable for its business scope.

Ö

Öko-völgy Alapítvány

okovolgy.hu

55

Öko-völgy Alapítvány is a Hungarian non-profit organization dedicated to fostering a sustainable, ecological, and organic farm community. The organization emphasizes education, volunteer work, and community engagement to promote environmental stewardship. The website serves as an informational and engagement platform, providing news, project details, and contact avenues for interested parties. The domain is well-established since 2007, supporting the organization's credibility and longevity. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and Font Awesome. It integrates Google Analytics and Facebook Pixel for user tracking and marketing insights. The site is mobile-optimized with good SEO practices but lacks some advanced security headers and explicit privacy or cookie policies, which are areas for improvement. From a security perspective, the site uses HTTPS with a valid SSL configuration, but no advanced security headers were detected. There is no visible incident response or vulnerability disclosure information. The presence of multiple external gambling-related links and hidden promotional content may pose reputational risks and affect content safety ratings. Overall, the security posture is moderate but could be enhanced with better policies and headers. The overall risk is moderate with no critical security issues detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing a security.txt file, and reviewing third-party content to ensure alignment with the organization's mission and audience expectations.

G

Gradsko društvo Crvenog križa Osijek

crvenikrizosijek.hr

56

Gradsko društvo Crvenog križa Osijek is a local branch of the Croatian Red Cross, providing a wide range of humanitarian, social, health, and educational services to the community. Established in 1878, it holds a strong position as a trusted non-profit organization in Croatia, focusing on first aid training, blood donation, youth programs, disaster response, and social support. The website reflects this mission with well-structured content and clear navigation targeting volunteers, donors, and the general public. Technically, the website is built on WordPress with common frameworks like Bootstrap and jQuery, hosted under Croatian registrar CARNET and using Cloudflare DNS. The site is moderately optimized for performance and mobile devices, with good accessibility features and SEO practices. However, some technical debt is present, such as the use of an outdated jQuery version and lack of advanced security headers. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS, which provides a solid baseline. The presence of Facebook Pixel and Google Analytics indicates moderate user tracking. No critical vulnerabilities or exposed sensitive data were detected, but improvements are recommended in updating libraries, implementing security headers, and adding a vulnerability disclosure mechanism. Overall, the website is professional, trustworthy, and safe for general audiences. It lacks explicit privacy and terms of service pages, which impacts privacy compliance scores. Strategic improvements in security and compliance documentation would enhance its posture and user trust.

G

Gradsko društvo Crvenog križa Đakovo

gdcrvenikrizdjakovo.hr

44

Gradsko društvo Crvenog križa Đakovo is a local branch of the Croatian Red Cross focused on providing humanitarian aid, social services, health-related activities, and volunteer coordination within the Đakovo region. The organization operates as a non-profit entity with a clear community-oriented mission, offering services such as first aid training, blood donation campaigns, and disaster response. Their website reflects this mission with relevant content and official documentation, targeting the general public and volunteers in the local area. Technically, the website is built on WordPress with common plugins such as MasterSlider and Bootstrap for responsive design. The site is hosted under Croatian academic network infrastructure (CARNET), ensuring local presence and reliability. The website demonstrates good mobile optimization and accessibility features, although SEO and advanced technical optimizations are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS properly but lacks several security headers and advanced protections such as anti-CSRF tokens on forms. There is no visible cookie consent mechanism, which is a GDPR compliance gap. The WHOIS data is consistent with the organization's location and purpose, enhancing trustworthiness. No critical vulnerabilities or suspicious indicators are found, but improvements in security policies and technical safeguards are recommended. Overall, the website is a trustworthy and functional digital presence for a small non-profit humanitarian organization. Strategic enhancements in security posture and privacy compliance would further strengthen their digital maturity and user trust.

Kryt Folimanka is a public underground shelter located in Prague 2, serving as the largest shelter in the district with capacity for 1300 people. The website provides information about the shelter, public tours, and related tourist services. The site is maintained by a government or municipal entity, indicated by the nature of the content and sector classification. Technically, the website uses a traditional web stack including Bootstrap, jQuery, and Google Analytics, hosted by Wedos. The site is accessible, uses HTTPS, and has moderate performance and mobile optimization. However, it lacks critical privacy and cookie policies, and no contact information is provided, which impacts compliance and user trust. Security posture is adequate with HTTPS but missing security headers and formal policies. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.

V

Viešoji įstaiga Architektūros fondas

archfondas.lt

50

Architektūros fondas is a Lithuanian non-profit organization established in 2004, dedicated to promoting architectural culture, education, and community engagement. The organization operates various cultural and educational projects, including mentorship programs and international collaborations, targeting a broad audience interested in architecture and culture. The website is professionally designed, content-rich, and well-structured, supporting the organization's mission and outreach efforts. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses several JavaScript libraries for enhanced user experience. It employs SEO best practices and is mobile-optimized. Security-wise, the site uses HTTPS and GDPR-compliant cookie consent mechanisms, though explicit security headers and policies are not evident. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

D

Didaktikon

didaktikon.cz

63

Didaktikon is an educational and popularization center affiliated with Charles University in the Czech Republic, established in 2021. It offers science exhibitions and workshops primarily targeting school children, teachers, and the general public interested in science education. The website reflects a well-structured and professionally branded presence consistent with its academic partnerships and mission. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Matomo analytics, hosted likely on university infrastructure. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks published security policies and security headers. Privacy compliance is basic with no explicit privacy policy found on the main page. Overall, the site is safe, accessible, and trustworthy for its intended audience.

D

Dům dětí a mládeže hlavního města Prahy

ddmpraha.cz

44

Dům dětí a mládeže hlavního města Prahy is a well-established public institution founded in 1998, providing educational and leisure activities for children and youth in Prague. The organization operates multiple branches offering clubs, camps, events, rentals, and educational programs, targeting children, youth, parents, and educators. It is funded and overseen by the city of Prague, positioning it as a key local educational service provider with a strong community presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Matomo analytics, ensuring a responsive and user-friendly experience. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Hosting and domain registration are consistent and reliable, managed by REG-GRANSY since 1998. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response policies are not publicly visible, indicating room for improvement in security posture. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content. The domain's long history and consistent WHOIS data reinforce its legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility and SEO to further strengthen the site's digital maturity and compliance.

H

HESTIA - Centrum pro dobrovolnictví, z.ú.

dobromani.cz

52

Dobromani.cz is a Czech non-profit platform dedicated to facilitating online volunteering by connecting non-profit organizations with volunteers who can provide expertise and support remotely. The platform is operated by HESTIA - Centrum pro dobrovolnictví, a recognized non-profit organization in the Czech Republic. The website offers project planning tools, volunteer matching, and ongoing project support, targeting non-profits adapting to new operational realities, especially post-pandemic. Technically, the site uses a modern JavaScript stack including jQuery, Bootstrap, and analytics tools such as Google Analytics and Microsoft Application Insights, hosted on infrastructure linked to Active24 and websupport.cz. The site is mobile-optimized with good design and navigation but lacks some advanced SEO and accessibility features. Security posture is moderate; HTTPS is used, but no security headers were detected in the provided data, and there is no visible privacy or cookie policy, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.

S

Suomen Tykistö-, Pioneeri- ja Viestimuseoyhdistys ry

museomilitaria.fi

57

Museo Militaria is a Finnish non-profit organization operating one of the largest war and military history museums in Finland, located in Hämeenlinna. The museum offers diverse exhibitions, educational programs, guided tours, and a retail e-commerce platform targeting families, history enthusiasts, and school groups. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site uses modern frameworks like Bootstrap, integrates multiple analytics and marketing tools, and employs secure payment processing via Paytrail. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and a dedicated security policy page. Overall, the website is trustworthy, compliant with GDPR, and provides comprehensive contact and policy information.

R

Rideer Nordic Oy

synergybus.se

42

SynergyBus, operated by Rideer Nordic Oy, is an online platform specializing in connecting taxi and bus companies with customers seeking transportation services in the Nordic region. The website positions itself as a leading marketplace for order traffic, offering a large volume of daily offer requests and facilitating business growth for transport providers. The platform's business model revolves around generating and managing transportation service quotes, targeting primarily taxi and bus operators. The company is relatively young, founded in 2022, and maintains a consistent brand presence with trust certifications and EU co-funding indicators. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, FontAwesome icons, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized with good SEO practices but lacks some accessibility features and advanced security headers. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks DNSSEC, security headers, and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security governance. The WHOIS data is consistent with the business claims, showing a legitimate domain registration without privacy protection, appropriate domain age, and active status. Overall, SynergyBus presents a professional and functional online presence with solid business credibility but requires enhancements in privacy compliance and security best practices to strengthen its risk posture and regulatory adherence.

R

Ridee Nordic Oy

bokabuss.nu

52

Bokabuss.nu is a Swedish transportation service platform that enables users to request and compare quotes for bus and minibus transportation across Sweden. The company, operated by Ridee Nordic Oy, has been active since 2011 and maintains a medium-sized presence in the Nordic transportation market. The website is professionally designed with a clear user journey for submitting transport requests and accessing operator offers. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and marketing tools, and employs Cloudflare for hosting and security. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a mature approach to privacy. Security posture is good with HTTPS enforced, though some security headers could be improved and DNSSEC is not enabled. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

F

Fondation Sommer

fondation-sommer.lu

53

Fondation Sommer is a Luxembourg-based non-profit organization dedicated to supporting educational, cultural, and intercultural projects. The foundation operates primarily through grant funding and project support, targeting non-profit organizations and educational institutions within Luxembourg and its vicinity. The website is professionally designed using WordPress with Bootstrap and Font Awesome, supporting multilingual content via WPML. The technical infrastructure is modern and includes performance optimizations such as WP Rocket. Security posture is adequate with HTTPS enforced and some security best practices observed, though explicit security headers and incident response information are lacking. Privacy and cookie policies are not found, indicating a gap in compliance with GDPR requirements. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security disclosures.

A

App Elevate

appelevate.cz

54

App Elevate is a small technology company specializing in rapid development of interactive applications across multiple platforms including web, Android, iOS, and macOS. The company emphasizes close client collaboration and offers prototype trials to attract customers. The website is professionally designed with clear navigation and good mobile optimization, hosted on Cloudflare infrastructure. The technical stack includes Bootstrap, jQuery, Font Awesome, and Google Fonts, reflecting a modern front-end approach. Security posture is moderate with Cloudflare protection but lacks explicit security headers and privacy policies, indicating areas for improvement. Contact information is clearly presented, enhancing business credibility. Overall, the website is safe, professional, and aligned with the domain registration data, but would benefit from enhanced privacy compliance and security hardening.

CIRCUS DESIGN s.r.o. is a Czech Republic-based UX agency specializing in user experience design, user research, consulting, prototyping, and design services. The company has a clear market position supported by a portfolio of reputable clients and active community engagement through events like UX Circus. Their website reflects a professional and consistent brand image targeting businesses seeking UX expertise. Technically, the site uses modern frameworks such as Bootstrap and jQuery, with integration of analytics tools like Google Analytics and Hotjar, indicating a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies suggests gaps in compliance. Security posture is moderate with HTTPS usage but lacks visible security headers and vulnerability disclosures. WHOIS data is unavailable, limiting domain legitimacy verification, but the business information on the site appears credible and transparent. Overall, the website is well-designed and functional but would benefit from enhanced security and privacy practices.

T

TSC

tsc.lv

61

TSC is a Latvian-based service provider specializing in the repair of mobile phones, tablets, smartwatches, laptops, electric scooters, and audio equipment. The company targets general consumers in Latvia seeking device repair services. The website is professionally designed with consistent branding and provides clear information about its services, primarily in Latvian. The business operates in the technology sector with a small company size and a local market focus. Technically, the website employs modern technologies including Bootstrap for responsive design, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site uses HTTPS with good SSL configuration and includes security headers, indicating a solid technical foundation. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the website demonstrates good practices such as enforced HTTPS, cookie consent mechanisms, and no visible exposure of sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a trustworthy and professional online presence with moderate technical maturity and good privacy compliance. Strategic improvements could focus on enhancing accessibility, publishing security policies, and adding incident response information to strengthen security posture and user trust.

D

Društvo Crvenog križa Istarske županije

hck-istra.hr

58

Društvo Crvenog križa Istarske županije is a well-established regional humanitarian non-profit organization based in Croatia, focusing on blood donation, first aid, disaster response, and community social programs. With over 30 years of operation, it holds a strong market position in Istria County, supported by volunteers and partnerships. The website reflects a professional and consistent brand image, providing clear information and contact details to its audience. Technically, the site uses modern open-source libraries and frameworks like Bootstrap and jQuery, ensuring good mobile responsiveness and user experience. Security posture is moderate with room for improvement in HTTP security headers and documented security policies. Privacy compliance is strong, featuring GDPR-aligned privacy and cookie policies. Overall, the website is trustworthy, safe, and serves its community-focused mission effectively.