Security Directory

A

antre public

antrepublic.sk

39

antre public is a Slovak advertising and media agency specializing in comprehensive marketing communication services both domestically and internationally. The company presents itself as an experienced player with over 20 years in the market, targeting businesses seeking professional marketing and media solutions. The website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, indicating a modern and maintainable technical infrastructure. Google Analytics and reCAPTCHA are integrated for analytics and spam protection respectively. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks advanced security headers and formal privacy or cookie policies, which are critical for GDPR compliance. Contact information is not explicitly provided on the homepage, which may affect user trust and compliance. Overall, the website is professional and well-branded but would benefit from enhanced privacy and security disclosures.

P

PrimeGlobal

primeglobal.net

61

PrimeGlobal is a global association of advisory and accounting firms, comprising over 300 independent member firms across more than 120 countries. The association focuses on connecting member firms to foster collaboration, knowledge sharing, and business growth. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Analytics, Hotjar, and Elfsight widgets. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the website presents a credible and professional business presence but would benefit from enhanced privacy compliance and security disclosures.

G

GoodApps

good-apps.co

67

GoodApps is a small, specialized SaaS company focused on developing Shopify apps that help e-commerce merchants boost sales, improve customer engagement, and optimize store operations. The company offers a suite of apps with strong user ratings and positive testimonials, positioning itself as a trusted partner for Shopify store owners. Technically, the website is built on Webflow with Cloudflare DNS, leveraging modern web technologies and delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and domain protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with privacy and cookie policies present, but lacks terms of service and explicit security policies. Overall, GoodApps presents a professional and trustworthy online presence with room for enhanced security and compliance maturity.

Dampfers-Corner.de is a small German-language blog focused on the vaping community, offering an Easy Liquid Calculator tool and affiliate advertising primarily through Amazon. The site operates on WordPress with a basic but functional design and moderate technical infrastructure. It uses HTTPS and includes GDPR-compliant cookie consent and privacy policy pages, but lacks explicit security policies and terms of service. Contact is available only via a form, with no direct emails or phone numbers published. The security posture is moderate with room for improvement in security headers and incident response readiness. Overall, the site is accessible, safe, and serves a niche audience with basic content and tools.

R

Rauch dein Obst OHG

bulletshopberlin.de

50

Bulletshop Berlin operates as a specialized German e-commerce retailer focusing on shishas, e-shishas, tobacco, e-liquids, and related accessories. Founded in 2020, the company positions itself as a niche player serving mature consumers interested in smoking and vaping products. The website is built on WordPress with WooCommerce, leveraging popular plugins such as Yoast SEO Premium and Customer Reviews WooCommerce to enhance SEO and customer engagement. Hosting is provided by Timme Hosting, with domain registration consistent with the business founding date. The site demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance in the EU.

S

Stavebné Centrum Ádám

adamcentrum.sk

42

Stavebné Centrum Ádám is a Slovakian small business specializing in construction materials and home improvement services, operating since 2009. The company positions itself as a reliable partner for construction and renovation projects, targeting both individual customers and businesses in the local region. The website reflects a professional and consistent brand image, with clear service offerings and a focus on customer support through social media and contact forms. Technically, the site is built on WordPress using modern tools like Elementor and Astra theme, with good SEO and mobile optimization. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms in place, though there is room for improvement in explicit security policies and incident response information. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

P

PRESPOR spol. s r.o.

prespor.sk

45

PRESPOR spol. s r.o. operates the website prespor.sk, a Slovakian retail and e-commerce platform specializing in building materials, sanitary products, tools, and garden supplies. The company targets construction professionals, DIY enthusiasts, and gardeners, offering a broad product range through both physical and online stores. The website is well-branded and consistent with the company's traditional market position in Slovakia. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and plugins to provide a functional and responsive user experience. The site integrates Google Tag Manager, Facebook Pixel, and other marketing tools for analytics and advertising. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and detailed security or privacy policies. No critical vulnerabilities or exposed sensitive data were detected. Cookie consent mechanisms are in place, but privacy and terms of service pages are not clearly found, indicating room for compliance improvement. Overall, the website presents a professional and trustworthy front for the business with moderate technical maturity and security posture. Strategic enhancements in privacy compliance and security policy transparency would strengthen trust and regulatory adherence.

L

Ladislav Pavlovič

ladislavpavlovic.sk

52

The website ladislavpavlovic.sk is a dedicated informational and commemorative site focused on the life and career of Ladislav Pavlovič, a Slovak football legend. It serves a niche audience of football fans and sports historians primarily in Slovakia, offering biographical content, career highlights, achievements, and media galleries. The site also links to a related football event domain, pavloviccup.com, indicating a partnership or related service. Technically, the site uses a moderately modern stack including Bootstrap, jQuery, and Google Fonts, hosted likely by Websupport, with DNSSEC enabled for domain security. However, it lacks advanced security headers and privacy policies, which are critical for compliance and trust. The site is mobile responsive and has good navigation and content quality but does not collect user data via forms. Security posture is moderate with room for improvement in headers and privacy compliance. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site.

L

LALIKBUS

lalikbus.sk

53

LALIKBUS is a Slovak passenger transport company with over 15 years of experience, offering a range of vehicle options including buses, microbuses, and personal autocars for various transport needs such as airport transfers and events. The website is built on WordPress and uses modern web technologies including Google Fonts, FontAwesome, and MasterSlider for a professional presentation. Contact information is clearly provided, including phone, email, and social media links, supporting customer engagement. Security measures include HTTPS with DNSSEC and Google reCAPTCHA for form protection, though the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security posture. Overall, the site is functional, trustworthy, and professionally presented, but would benefit from enhanced privacy compliance and security best practices.

I

imhd.sk

imhd.sk

49

imhd.sk is a well-established Slovak public transportation information portal primarily serving Bratislava and other Slovak regions. Founded in 2003, it offers comprehensive services including timetables, journey planning, news updates, and vehicle information. The website is positioned as a leading regional resource for public transport users, supported by a consistent brand and active social media presence. Technically, the site employs modern web technologies such as jQuery, Bootstrap, and Google Analytics, ensuring a responsive and user-friendly experience across devices. Security measures include HTTPS enforcement and standard security headers, though there is room for improvement in explicit security policies and incident response disclosures. Privacy compliance is addressed with visible privacy and cookie policies, including consent mechanisms. Overall, the site demonstrates a strong security posture, good technical implementation, and high business credibility, making it a trustworthy source for public transport information in Slovakia.

C

CREBISO

crebiso.com

63

CREBISO is a Slovak-based technology company specializing in innovative digital solutions including online marketing, custom software development, and business process digitalization. The company positions itself as a reliable partner for SMEs seeking to enhance their digital presence and operational efficiency through tailored applications and marketing strategies. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials, targeting Slovak and regional businesses. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Google services, hosted on a Slovak hosting provider, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements are recommended in security headers and DNSSEC. Privacy compliance is well addressed with a cookie consent mechanism and accessible terms of service. Overall, CREBISO demonstrates a mature digital presence with a solid business credibility and moderate security maturity.

I

Inlogic

inlogic.sk

56

Inlogic is a Slovakia-based game development and publishing studio specializing in Android and HTML5 mobile games. Established in 2003, the company boasts over 16 years of experience and a portfolio of more than 300 completed games. Their global distribution network spans over 150 countries, positioning them as a reputable player in the mobile gaming industry. The website reflects a professional and consistent brand image, targeting gamers, publishers, and mobile users worldwide. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good SEO, mobile optimization, and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear GDPR policies and cookie management. Overall, the site is trustworthy, well-maintained, and aligned with the company's business claims.

M

Mesto Banská Bystrica

banskabystrica.sk

64

The website www.banskabystrica.sk serves as the official digital presence of the city government of Banská Bystrica, Slovakia. It provides comprehensive information about municipal governance, public services, announcements, and resources for residents, businesses, and visitors. The site is well-positioned as a regional government portal, offering key services such as electronic services, public notices, and tourism information. The target audience includes local citizens, entrepreneurs, tourists, and newcomers to the city. Technically, the website is built on the WordPress CMS platform, utilizing modern web technologies including jQuery, Google Fonts, and the Splide.js carousel library. Hosting appears to leverage Microsoft Azure Blob Storage for media assets, indicating a scalable infrastructure. The site demonstrates good mobile optimization and SEO practices, with structured data (JSON-LD) implemented for enhanced search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. Cookie consent mechanisms are implemented, and privacy policies are comprehensive and GDPR compliant. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or vulnerability disclosure page, which could enhance transparency and incident response readiness. Overall, the website exhibits a mature digital presence with strong business credibility and a solid security posture. Recommendations include publishing explicit security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility features to further improve compliance and user experience.

BBonline.sk is a regional online media platform operated by REGIONAL MEDIA, s. r. o., focusing on delivering current news, sports, culture, interviews, and real estate listings for the Banská Bystrica region in Slovakia. The website serves local residents and visitors by providing timely and relevant content, supported by advertising and promotional services. It maintains a consistent brand presence with active social media channels and a user-friendly interface.

R

Vyberte Vždy Správne! | VÝBEROMAT.SK

radiosport.sk

55

Vyberomat.sk is a Slovak e-commerce comparison website founded in 2019, providing consumers with product and service comparisons to aid in making informed purchasing decisions. The platform leverages WordPress with WooCommerce and uses the GeneratePress theme, supported by Cloudflare for DNS and CDN services, ensuring good performance and SSL security. The site integrates Google Tag Manager for analytics and tracking purposes. However, the website lacks explicit privacy and cookie policies, as well as contact information, which are critical for compliance and user trust. Security headers are not explicitly present, indicating room for improvement in security posture. Overall, the site is functional and professionally designed but would benefit from enhanced privacy compliance and security practices.

C

camindu GmbH

aktion-barrierefrei.de

48

Aktion Barrierefrei, operated by camindu GmbH, is a German initiative focused on promoting accessibility. The website analyzed is a placeholder page indicating a move to a new domain (aktion-barrierefrei.org), which hosts the main content and services. The business targets organizations and individuals interested in accessibility solutions, offering consulting and informational services. The company is small-sized and operates primarily within the non-profit sector in Germany. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and slider libraries, with good mobile optimization and basic SEO. Security posture is moderate with HTTPS enforced but lacks explicit security headers and formal security policies. Privacy compliance is strong with clear privacy and cookie policies, and GDPR adherence is indicated. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe, professional, and trustworthy but limited in content on this domain due to redirection.

BBonline.sk is a regional online media platform serving the Banská Bystrica region in Slovakia. It provides local news, sports coverage, event listings, weather updates, and video content under the TV ESO brand. The site is supported primarily through advertising and maintains a consistent brand presence with active social media channels. The business is well-established with a domain age since 2010 and operates under REGIONAL MEDIA, s. r. o. The platform targets local residents and visitors seeking regional information and entertainment.

Záhrada CNK is a well-established cultural and community center based in Slovakia, focusing on hosting diverse cultural events such as performances, workshops, and festivals. The website reflects a strong local presence with clear event information and community engagement. Technically, the site is built on WordPress using Elementor, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and DNSSEC enabled, though there is room for improvement in security headers and vulnerability disclosure. Privacy compliance is partial, with privacy policy documents available but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and serves its community effectively.

R

Regionálne pulty

regionalnepulty.sk

57

Regionálne pulty is a Slovak regional e-commerce platform focused on promoting and selling unique regional products from the Banskobystrický kraj. The website offers product listings, information about local producers, and an integrated e-shop. It targets consumers interested in authentic regional goods and local markets. The business appears to be small-sized and founded around 2020, with a clear regional niche. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies including Google Fonts, Font Awesome, and Google Maps API. The site is mobile optimized and includes SEO best practices such as structured data and Open Graph metadata. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks explicit privacy policy, terms of service, and security headers. No direct contact information or incident response contacts are found, which limits transparency. Analytics and marketing tools include Google Analytics 4, Facebook Pixel, and Google Ads. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures and contact transparency.

Tanja Milich operates a specialized coaching business focused on enhancing the relationship between people and their dogs through alternative coaching methods such as Live Trust Coaching, Natural-Dogmanship®, and epigenetics coaching. The business targets individuals seeking a more connected and harmonious relationship with their dogs, offering services online, live on-site, and hybrid. The website is professionally designed, consistent in branding, and provides clear contact information including email and phone. Social media presence on Instagram and Facebook supports community engagement. Technically, the website is built on WordPress using the Enfold theme and Avia Framework, leveraging modern web technologies like jQuery and Google Fonts. The site is mobile-optimized and performs moderately well, with good SEO practices and basic accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are lacking. Overall, the website demonstrates a good security posture and business credibility for a small coaching enterprise. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. No critical security issues or blocking mechanisms were detected, allowing full content access and analysis.

M

Medienprojekt Wuppertal

medienprojekt-wuppertal.de

56

Medienprojekt Wuppertal is a German non-profit organization dedicated to youth media education and film production. The website showcases numerous youth-oriented film projects, workshops, and events, positioning the organization as a regional leader in media education for young people. Their business model revolves around educational services, film production, and community engagement, supported by volunteer and internship programs. The site is well-branded and consistent, targeting youth and educators in the Wuppertal region. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and the Foundation framework. It is mobile-optimized with good navigation and SEO practices. The site includes Google Fonts and Google Analytics for tracking. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and security headers. No critical vulnerabilities were detected in the content. Privacy compliance is basic but present, with a privacy policy and cookie banner. Business credibility is supported by clear content, social media presence, and awards listed on the site. Overall, the website is a good example of a small non-profit media education platform with solid content and moderate technical maturity. Strategic improvements in security headers, incident response transparency, and enhanced privacy compliance would strengthen trust and resilience.

Lernwerk Hund Mensch is a small German dog training service provider offering a range of activities including individual coaching, workshops, and specialized training such as Ruhetraining. The website is built on the Jimdo CMS platform and hosted by Jimdo GmbH, leveraging their CDN and widget services. The digital infrastructure is modern and mobile-optimized, with basic accessibility and SEO features implemented. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response policies are absent. The website content is professional, relevant, and trustworthy, targeting dog owners interested in training and leisure activities with their pets. Overall, the site presents a low-risk profile with no detected vulnerabilities or suspicious WHOIS data.

Bornegyed.hu is a local tourism and cultural event portal focused on the Budafok-Tétény district of Budapest, Hungary. The website promotes wine cellar tours, cultural programs, and local events, targeting residents and tourists interested in the region's wine culture and gastronomy. The business operates as an information and event promotion platform with a niche market position in hospitality and tourism. Founded in 2018, it maintains a consistent brand presence and offers newsletter subscriptions with GDPR-compliant consent mechanisms. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, FontAwesome, and Google Maps API. It is mobile-optimized with good SEO practices and moderate performance. The site employs Google Analytics and Google Tag Manager for user tracking, though it lacks a visible cookie consent banner. The CMS appears custom or unknown, and no hosting provider details are evident. From a security perspective, the site enforces HTTPS and secures user input forms such as the newsletter subscription modal. However, it lacks visible security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with a privacy policy document available but no cookie policy or terms of service pages. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could improve privacy compliance and security posture. Strategic recommendations include implementing cookie consent mechanisms, adding security headers, publishing security policies, and maintaining regular vulnerability assessments.

B

Budapest Főváros Önkormányzata

enbudapestem.hu

58

Énbudapestem is an official digital news and cultural portal operated by the Budapest municipal government, providing residents and visitors with timely news, cultural insights, and community updates about Budapest. The website is well-branded with consistent use of Budapest city logos and links to the official Budapest.hu domain, establishing strong trust and legitimacy. Technically, the site is built on modern web technologies including Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, although explicit incident response and vulnerability disclosure information are absent. Privacy compliance is good, with accessible privacy and cookie policies and a consent mechanism in place. Overall, the website presents a professional, trustworthy, and user-friendly platform for Budapest-related content.

A

Aachener Krimitage

aachener-krimitage.de

44

Aachener Krimitage is a regional cultural event organizer specializing in literary festivals focused on crime and suspense literature in Aachen, Germany. The website provides detailed event information, partner and sponsor details, and contact information primarily targeting fans of crime literature and cultural event attendees. The business model revolves around organizing events, ticket sales, and collaboration with local partners and sponsors. Technically, the website is built on Joomla CMS using the Helix Ultimate template framework and Bootstrap, hosted by Cloudpit. The site is mobile-optimized and performs moderately well with good SEO practices. Security posture is solid with HTTPS enforced and a cookie consent mechanism in place, though it lacks security headers and a privacy policy page. Overall, the domain registration is consistent with the website's purpose and location, indicating legitimacy. The site is safe for general audiences with no adult content detected.

The website www.visitbanskabystrica.sk serves as a regional tourism portal promoting Banská Bystrica city and its surroundings. It provides visitors with comprehensive information about local events, cultural activities, gastronomy, accommodation, and leisure options. The site targets tourists and visitors interested in exploring the region, offering multilingual support in Slovak, English, and German. The business model is informational and promotional, focusing on enhancing the visibility of the destination and supporting local tourism initiatives. Technically, the website is built on WordPress, leveraging popular plugins such as The Events Calendar, WPML for multilingual content, and Slider Revolution for dynamic visuals. It integrates Google Fonts, jQuery, and third-party services like Google Analytics and Tawk.to for analytics and live chat support. The site demonstrates moderate performance and good mobile optimization, with a consistent and professional design. From a security perspective, the site uses HTTPS with excellent SSL configuration, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No contact information or incident response channels are clearly provided, and there is no vulnerability disclosure or security.txt file. These gaps represent areas for improvement to enhance user trust and regulatory compliance. Overall, the website is a well-structured and content-rich tourism platform with moderate technical maturity and security posture. Strategic enhancements in privacy compliance, security headers, and contact transparency would significantly improve its trustworthiness and compliance standing.

B

Budapest Főváros Önkormányzata

budapest.hu

61

Budapest.hu is the official city government portal for Budapest, Hungary, providing residents, businesses, and visitors with comprehensive information about municipal services, city developments, green initiatives, cultural events, transportation, utilities, and business-related matters. The website is well-branded and consistent with the official identity of Budapest's local government, supported by a domain registered since 1997, indicating a long-standing and legitimate presence. Technically, the site leverages modern web technologies including the Next.js React framework, Google Fonts, and SVG icons, delivering a responsive and user-friendly experience optimized for mobile devices. SEO practices are well implemented with appropriate meta tags and Open Graph data. Performance is moderate, with preloading of key assets and deferred JavaScript loading. From a security perspective, the site enforces HTTPS and includes some security headers, though additional headers like X-Frame-Options and Content-Security-Policy could enhance protection. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the site lacks explicit privacy and cookie policies, as well as a vulnerability disclosure or incident response contact, which are important for compliance and security transparency. Overall, Budapest.hu presents a trustworthy and professional government portal with good technical implementation and business credibility. The main areas for improvement include publishing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, and providing clear contact information for security incidents and general inquiries.

C

Colourbox

colourbox.dk

57

Colourbox is a Danish-based stock media platform offering millions of stock images, videos, and vectors with simple licensing and pricing models. The website targets businesses and individuals seeking creative digital assets for online and offline communication. The company maintains a professional market position with exclusive and editorial content, supported by active social media channels on Facebook, LinkedIn, and Pinterest. Technically, the website leverages modern web technologies including React, Font Awesome Pro icons, Google Tag Manager, and Amazon Cloudfront CDN to deliver a performant and responsive user experience. However, the absence of explicit privacy and cookie policies and missing WHOIS data represent gaps in compliance and transparency. Security posture is generally good with HTTPS enforced but could be improved by adding security headers and incident response contact information. Overall, the site is safe for general audiences and demonstrates a solid business and technical foundation.

The website kaelberhalle.de represents a small hospitality business operating as a traditional brewpub in Augsburg, Germany. The business focuses on providing restaurant and brewery services to local and visiting customers. The site is built on WordPress with Elementor and uses modern SEO and tracking plugins, indicating a moderate level of digital maturity. The presence of GDPR-compliant cookie consent and a comprehensive privacy policy demonstrates attention to privacy compliance. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are absent. Overall, the site is professional and trustworthy but could benefit from enhanced security practices and legal completeness.

H

Hotel Alt Bamberg

hotel-alt-bamberg.de

56

Hotel Alt Bamberg is a small hospitality business located in the historic city center of Bamberg, Germany. It offers 36 modern double rooms with amenities such as free WiFi, a Greek restaurant on site, and convenient services like 24-hour check-in and bike terraces. The hotel is part of the Friedrich Hotels group and targets tourists, business travelers, cyclists, and groups seeking comfortable accommodation with local charm. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive contact options including a secure contact form with captcha. Technically, the website uses modern web technologies including Google Tag Manager for analytics and a consent management platform to ensure GDPR compliance. The site is hosted securely over HTTPS with no visible blocking or WAF challenges. However, security headers are not explicitly detected and could be improved. Privacy policies and cookie consent mechanisms are clearly linked and implemented, reflecting a strong commitment to data protection. From a security perspective, the site demonstrates good practices such as encrypted connections and user consent management but lacks explicit incident response or security policy disclosures. No vulnerabilities or suspicious patterns were detected. Overall, the website and domain registration data are consistent and legitimate, supporting a trustworthy online presence for the hotel. The overall risk assessment is low, with recommendations focusing on enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain a strong security posture.

E

Espresso News

espressonews.bg

40

Espresso News is a small regional online news media outlet focused on delivering news and event coverage for the western region of Sofia and surrounding municipalities in Bulgaria. The website provides categorized news content, community information, and reporter workshops, targeting local residents and Bulgarian-speaking audiences interested in regional developments. The business model is primarily advertising-supported, leveraging Google Adsense and Google Analytics for monetization and user tracking. Technically, the website uses a modern but basic technology stack including jQuery, Bootstrap, Font Awesome, and Google services. The site is mobile optimized with good navigation and content structure, though it lacks advanced CMS indicators and some accessibility features. Performance is moderate with standard web technologies. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No privacy or cookie policies are present, indicating gaps in GDPR compliance. No vulnerability disclosure or incident response contacts are provided. The site does not expose sensitive data and uses common third-party scripts responsibly, but improvements in security headers and privacy transparency are recommended. Overall, the website is functional and professional for its regional news purpose but should enhance privacy compliance and security posture to improve trust and regulatory adherence.

C

CampusPress

campuspress.com

65

CampusPress is a specialized managed WordPress hosting provider focused exclusively on the education sector, serving K-12 schools, higher education institutions, faculty, and students. Established in 2001 and operating under the parent company Incsub, LLC, CampusPress holds a strong market position as the first and largest WordPress Multisite provider for education, hosting over 20 million sites globally. Their service portfolio includes hosting, custom development, systems management, user support, security, and accessibility compliance, supported by a SOC 2 Type II certification that underscores their commitment to security and trust. Technically, the website is built on WordPress with a modern tech stack including Google Fonts, jQuery, and Google Tag Manager, hosted on infrastructure linked to Amazon Registrar and AWS DNS. The site demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. However, DNSSEC is not enabled, and explicit security headers are not detected, suggesting room for improvement in DNS and HTTP security hardening. From a security perspective, CampusPress shows a mature posture with enforced HTTPS, domain status locks, and SOC 2 certification. They provide managed backups, security scanning, and spam protection. However, the absence of a published security policy or incident response details and lack of a cookie consent mechanism indicate gaps in transparency and privacy compliance. No vulnerabilities or suspicious content were detected. Overall, CampusPress presents a high-trust, professional, and secure online presence with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and DNS security would further strengthen their security posture and regulatory adherence.

D

Drohne Passau

drohnepassau.de

42

Drohne Passau is a small German business specializing in drone-based photography and videography services, including aerial shots, event films, real estate photography, 3D tours, and thermal imaging for PV system maintenance and wildlife protection. The company operates primarily in Passau and the Bavaria region, targeting local businesses and individuals seeking high-quality visual media solutions. The website is built on WordPress with modern plugins and demonstrates good technical maturity, including SEO optimization and mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks explicit security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business presents a professional image with consistent branding and clear service offerings.

C

Colourbox

colourbox.de

58

Colourbox is a large German-based stock media agency offering over 26 million royalty-free images, videos, and vectors for purchase. The company targets businesses and individuals requiring licensed digital media for web, print, and social media use. The website demonstrates a mature technical infrastructure leveraging modern JavaScript frameworks, CDN hosting via AWS Cloudfront, and integration with Google Tag Manager for analytics and marketing. While the site is well-designed and content-rich, it lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by implementing security headers and publishing incident response policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

O

OXID eSales AG

oxidforge.org

61

OXID eSales AG operates a professional knowledge base website dedicated to the OXID eShop e-commerce platform. The site targets developers, merchants, and partners by providing documentation, training, certification, modules, and community engagement channels. The company is well-established in Germany with a domain age consistent with its business history. Technically, the website uses modern front-end frameworks like Bootstrap and jQuery, hosted behind Cloudflare DNS, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks explicit security headers and privacy/cookie policies, which are areas for improvement. Overall, the site is professional, trustworthy, and content-rich, supporting a strong community and partner ecosystem.

B

BONN LIEST EIN BUCH, LITERATURHAUS BONN

bonnliesteinbuch.de

54

BONN LIEST EIN BUCH is a small local cultural initiative based in Bonn, Germany, focused on fostering community engagement through literature and reading circles. The website serves as a platform to share information about the initiative, its activities, and the concept of Wanderbücher (traveling books) circulated within the city. The business model is community-driven, targeting local residents interested in literature and cultural participation. Technically, the website is built on WordPress using the Divi theme and incorporates Yoast SEO for search engine optimization. The site loads Google Fonts and uses standard web technologies. Mobile optimization appears good, and the site structure supports basic accessibility and SEO best practices. However, no advanced frameworks or hosting provider details are explicitly identified. From a security perspective, the website lacks visible security headers and does not present privacy or cookie policies, which are critical for GDPR compliance given its German location. No incident response or vulnerability disclosure mechanisms are evident. The absence of contact information and security policies reduces the overall security posture and privacy compliance. Overall, the website is functional and professionally designed for its purpose but requires improvements in security, privacy compliance, and contact transparency to enhance trust and regulatory adherence.

B

BKK Budapesti Közlekedési Központ

bkk.hu

65

BKK Budapesti Közlekedési Központ is the primary public transportation authority in Budapest, Hungary, providing comprehensive transit services including travel planning, ticketing, and real-time traffic updates. The website serves residents and visitors with detailed information on schedules, ticket prices, and mobility options such as bike sharing (MOL Bubi) and contactless payments (Budapest Pay&GO). The company is well-established, with a domain age dating back to 1999, and holds multiple industry awards reflecting its professionalism and service quality. Technically, the website employs modern web technologies, including Google Tag Manager and Cloudflare Insights, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be further confirmed. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Contact information is transparent and comprehensive, including email, phone, and physical address. Overall, the website demonstrates high trustworthiness and professionalism, supporting BKK's market position as a leading transportation provider.

Linka Detskej Istoty is a Slovak non-profit organization dedicated to providing psychosocial counseling, crisis intervention, and support services for children, youth, and adults acting in the interest of children. The organization operates multiple helplines including the national child helpline (116 111), missing children helpline (116 000), and specialized services such as parental counseling and social-legal advice. Their services are free, anonymous, and available nationwide. The website is built on WordPress using the Astra theme and integrates live chat and Google Analytics for user engagement and monitoring. While the site is well-structured and content-rich, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is good with HTTPS and DNSSEC enabled, but could be improved by adding security headers and a vulnerability disclosure mechanism. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and trustworthiness.

L

Linka detskej istoty

nezavislost.sk

55

neZavislost.sk is a Slovak non-profit project focused on preventing and addressing internet addiction. It offers a mobile application that anonymously tracks mobile usage and provides tools such as addiction tests, motivational groups, and expert help. The project is co-financed by the EU and supported by Slovak government entities, positioning it as a credible and recognized initiative in the public health and education sector. Technically, the website is built on WordPress with common libraries like jQuery and Bootstrap, hosted on Websupport with DNSSEC and HTTPS enabled, ensuring a secure baseline. However, the site lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. Overall, the website is well-structured, mobile-optimized, and provides relevant content for its target audience.

Nagykovácsi Nagyközség Önkormányzat operates an official municipal website serving the local community of Nagykovácsi, Hungary. The site provides comprehensive information including news, events, municipal documents, and public service details, targeting residents and visitors. The business model is that of a local government authority, focusing on transparency and community engagement. The website is well-branded with consistent use of official logos and clear contact information. Technically, the website is built on the Yii Framework with modern front-end technologies such as Bootstrap and jQuery. It integrates Google Analytics and Facebook SDK for tracking and social media engagement. The site is mobile-optimized and features an event calendar and newsletter subscription with CAPTCHA protection, indicating a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and uses CSRF tokens and CAPTCHA on forms, which are positive security practices. However, it lacks important security headers and does not publish an incident response or vulnerability disclosure policy. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy and professional, with a good security posture for a municipal site but with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, adding cookie consent, and publishing security policies to enhance trust and compliance.

M

mapAds

mapads.net

44

mapAds is a German-based technology company specializing in AI-driven advertising solutions that enable rapid creation, targeting, and deployment of ad campaigns across multiple platforms including Google, Facebook, Instagram, YouTube, and AddressableTV. The platform targets local businesses, agencies, and publishers, offering both white-label self-service and managed service options. The website is professionally designed using WordPress and Elementor, with good mobile optimization and clear navigation. Hosting is provided by Hetzner Online GmbH in Germany, aligning with the domain's registration country. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements are recommended in DNSSEC, security headers, and incident response transparency. No critical vulnerabilities or suspicious content were detected, and the site maintains a high level of trustworthiness and compliance with GDPR. Overall, mapAds presents a credible and modern digital presence suitable for its business model.

N

netcup GmbH

netcup.de

74

netcup GmbH is a reputable German web hosting provider specializing in web hosting, dedicated servers, VPS, and domain registration services. Established in 2008, the company serves a broad audience of businesses and private customers primarily in Germany and Europe. The website reflects a mature digital presence with modern technologies such as Vue.js and Nuxt.js, ensuring fast performance and excellent mobile optimization. Security is a key focus, evidenced by ISO 27001 certification, robust HTTPS implementation, and comprehensive security headers. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, netcup demonstrates a high level of professionalism, trustworthiness, and technical maturity.

U

uniten GmbH

uniten.io

67

uniten GmbH is a German-based company specializing in content performance analytics tailored for digital newsrooms of regional media houses. Their platform leverages AI to provide actionable insights that help optimize content, improve editorial efficiency, and enhance digital subscription retention. The company positions itself as a niche provider in the media analytics sector with a focus on data-driven audience development and content optimization. Technically, the website is built on the Webflow CMS platform, utilizing modern web fonts and hosted via a CDN for fast performance. The site is well-structured, mobile-optimized, and provides a professional user experience. However, some technical improvements could be made in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and claims GDPR compliance with data stored on European servers and no personal data collection. There is no evidence of security incident response policies or vulnerability disclosure mechanisms, which could be areas for improvement. The WHOIS data is incomplete and malformed, limiting trust verification, but the website content and contact information appear legitimate and consistent with a small professional business. Overall, uniten.io presents a credible and professional digital presence with good technical implementation and privacy compliance, though improvements in security policy transparency and WHOIS data clarity would strengthen trust and security posture.

P

Pixelcowboys Werbeagentur

pixelcowboys.de

55

Pixelcowboys Werbeagentur is a well-established full-service advertising agency based in Alsdorf, Germany, operating since 1997. The company offers a broad range of services including web design, print media, layout and prepress, and video production, catering to a diverse clientele such as unions, social organizations, municipalities, cultural institutions, and commercial enterprises. Their emphasis on environmental responsibility, including CO2-neutral energy and hosting, positions them as a conscientious player in the media sector. Technically, the website employs modern frontend technologies like Bootstrap, AOS, and FontAwesome, with hosting provided by reputable German providers known for green IT practices. Security posture is adequate with HTTPS enabled, though improvements in security headers and explicit privacy mechanisms are recommended. Overall, the website is professional, user-friendly, and trustworthy, reflecting the company's credibility and market position.

A

Accredible

coursefinder.io

64

CourseFinder.io is an online platform operated by Accredible that enables users to find professional development courses and obtain digital credentials to advance their careers. The website targets professionals seeking to enhance their skills and gain marketable badges. The platform integrates modern web technologies including Angular and analytics tools such as PostHog and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and browser compatibility checks, though there is room for improvement in security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Overall, the platform appears legitimate and professionally maintained, serving a niche in the education sector focused on credentialing and career advancement.

Z

Združenie informatikov samospráv Slovenska

ziss.sk

53

Združenie informatikov samospráv Slovenska (ZISS) is a Slovak non-profit association dedicated to uniting IT professionals working in local government and public administration. Established in 2007, the organization focuses on fostering communication, knowledge exchange, and professional development through conferences and projects such as ZlatyErb.sk. The website serves as an information hub for members and interested parties, providing news, event details, and resources relevant to the public sector IT community in Slovakia. Technically, the website is built on WordPress and leverages common web technologies including jQuery, Google Analytics, and FontAwesome. It is hosted on WebSupport infrastructure with DNSSEC enabled and uses HTTPS, indicating a baseline of security best practices. However, the site lacks explicit privacy and cookie policies, and no consent mechanisms are present, which are important for GDPR compliance. The site also does not publish a security policy or incident response contacts, limiting transparency in security governance. From a security perspective, the site benefits from HTTPS and DNSSEC, and the presence of Wordfence scripts suggests some level of active security monitoring. Nonetheless, the absence of HTTP security headers and vulnerability disclosure policies represents areas for improvement. User tracking via Google Analytics is implemented without visible consent, which may pose privacy compliance risks. Overall, the security posture is moderate but could be enhanced with additional controls and transparency. The website content is professional and relevant to its target audience, with clear navigation and consistent branding. The domain registration data aligns well with the organization's history and purpose, supporting legitimacy. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response information to improve trust and compliance.

R

RIEGEL STREHL

riegel-strehl.de

68

RIEGEL STREHL is a specialized law firm based in Düsseldorf, Germany, focusing on construction law, real estate law, procurement law, and economic criminal law. The firm emphasizes reliable, dynamic, and result-oriented legal consulting with a personal and trustworthy client approach. Their market position is strengthened by extensive experience from international law firms and public administration, targeting clients needing expert legal services in selected fields. Technically, the website is built on the Jimdo Creator CMS platform, utilizing jQuery and bxSlider for interactive elements. The site is hosted on rzone.de servers and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected, indicating a solid security posture for a small law firm. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and terms of service documentation would enhance the site's security and compliance maturity.

J

Jspreadsheet

lemonadejs.com

61

LemonadeJS is a small technology company offering a lightweight, dependency-free reactive JavaScript library designed for modern frontend development. The company provides a suite of reusable components and plugins that integrate with popular frameworks such as React and VueJS. Their ecosystem includes commercial and open-source products, targeting JavaScript developers seeking efficient and flexible tools. The website is well-structured, professionally designed, and provides comprehensive technical documentation and examples. The technical infrastructure leverages modern web technologies and includes analytics via Google Tag Manager and Google Analytics. Security posture is moderate with HTTPS enforced but lacks published security policies, privacy policies, and security headers. The domain is well-established with consistent WHOIS data, supporting legitimacy. Overall, the website is trustworthy but could improve privacy compliance and security transparency.

J

Jspreadsheet

jspreadsheet.com

62

Jspreadsheet is a technology company specializing in a JavaScript plugin that provides advanced spreadsheet and data grid controls for web applications. The company targets developers and businesses seeking Excel-like spreadsheet functionality embedded in their software. It holds a strong market position with usage by leading global companies and offers a professional product with extensions and framework integrations. The website demonstrates a mature technical infrastructure leveraging modern JavaScript frameworks, CDNs, and multiple analytics and marketing tools. The site is well-designed, mobile-optimized, and SEO-friendly, providing a rich user experience. Security posture is good with HTTPS and domain transfer protections, but lacks some advanced headers and published security policies. Privacy compliance is basic with cookie consent but no visible privacy policy. Overall, the risk is moderate with recommendations to enhance security headers and publish privacy and security policies to improve trust and compliance.

W

Home -

wsh-hatten.de

41

The website www.wsh-hatten.de is a WordPress-based site using the Astra theme and Elementor page builder, optimized with WP Rocket and Yoast SEO. The site appears to be a small business or local entity with minimal content and lacks detailed business descriptions or contact information. The technical infrastructure is standard for WordPress sites, hosted on Alfahosting servers, with external resources loaded from common domains such as Google Fonts and Usercentrics for consent management. Security posture is weak due to the absence of security headers and explicit policies. No privacy, cookie, or terms of service policies are present, indicating low compliance with GDPR and related regulations. The site is accessible without WAF or security challenges, but lacks transparency and trust signals. Overall, the site scores low on business credibility and privacy compliance, with moderate technical implementation and basic content quality.