Security Directory

L

Landesinnungsverband für Elektro- und Informationstechnik Niedersachsen / Bremen

eh-nb.de

40

The Landesinnungsverband für Elektro- und Informationstechnik Niedersachsen / Bremen is a regional trade association serving professionals in the electrical and information technology sectors within the German states of Niedersachsen and Bremen. The organization provides member services including certification as E-Marken Betrieb, educational seminars, industry news, and representation. Their website reflects a professional and consistent brand image, targeting trade members and stakeholders with relevant content and resources. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as SVG, CSS3, and JavaScript. It integrates Usercentrics for cookie consent management and TikTok analytics for user tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent banner. Overall, the website presents a low-risk profile with a solid business credibility and privacy posture. Strategic improvements could focus on enhancing security headers, publishing security policies, and expanding incident response information to further strengthen trust and compliance.

A

Arbeitsgemeinschaft Medienwerbung GmbH im Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke

e-check.de

46

The website www.elektrohandwerk.de is a professionally maintained information portal affiliated with the German electrical trade association (ZVEH). It focuses on promoting the E-CHECK service, which provides electrical safety inspections and energy efficiency advice primarily for private homeowners, tenants, landlords, and property managers. The site offers comprehensive content on electrical safety, damage prevention, energy saving, and comfort enhancements, positioning itself as an authoritative resource in the energy sector within Germany. Technically, the site is built on TYPO3 CMS, uses modern JavaScript and CSS technologies, and integrates a consent management platform (Usercentrics) alongside Google Tag Manager and TikTok analytics for tracking, all implemented with GDPR compliance in mind. Security-wise, the site enforces HTTPS and uses consent-based tracking but lacks explicit security headers and published security policies or incident response information. Overall, the site is trustworthy, well-branded, and user-friendly, with moderate to good performance and mobile optimization.

R

RHEINZINK

rheinzink.de

55

RHEINZINK is a globally recognized manufacturer specializing in titanium zinc products, primarily serving the construction and architectural sectors. The company positions itself as a market leader with a strong emphasis on quality, sustainability, and innovative solutions for roofing, facades, and drainage systems. Their website reflects a mature digital presence with comprehensive product information, localized domains for international markets, and a professional design tailored to architects, craftsmen, distributors, and builders. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and includes performance optimizations and mobile responsiveness. Security measures such as HTTPS, security headers, and cookie consent mechanisms are in place, indicating a solid security posture. However, explicit security policies and incident response contacts are not prominently published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The absence of blocking mechanisms or WAF challenges allows full content accessibility and analysis. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure information to further strengthen trust.

J

Jan Becher – Karlovarská Becherovka, a.s.

becherovka.cz

50

Jan Becher – Karlovarská Becherovka, a.s. operates a professional and well-branded website promoting its iconic Czech herbal bitter liqueur, Becherovka. The company has a strong market position as a traditional and internationally recognized brand with a history dating back to 1807. The website offers product information, cocktail recipes, company history, and visitor experiences, targeting adult consumers with appropriate age verification. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience with multilingual support and mobile optimization. Security measures include HTTPS, cookie consent management, and an age gate, although no explicit incident response or vulnerability disclosure policies are published. WHOIS data is missing, which slightly impacts trust but the overall digital presence and compliance indicate a legitimate and professional operation.

B

Bundesverband Solarwirtschaft (BSW-Solar) e.V.

bsw-solar-shop.de

49

The website www.bsw-solar-shop.de serves as the official online shop for the Bundesverband Solarwirtschaft (BSW-Solar) e.V., a German solar industry association. It offers publications, guides, and studies related to solar thermal energy, photovoltaics, and energy storage. The platform targets investors, members of the association, and other stakeholders interested in solar energy solutions. The business model is primarily e-commerce focused on niche solar energy content, supported by member discounts and campaign information. The site holds a strong position within the German solar energy sector as a trusted source of industry publications. Technically, the website is built on the Magento CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. The site demonstrates good mobile responsiveness and basic accessibility features. Hosting is provided by a German hosting provider (kasserver.com), and the site structure supports clear navigation and SEO best practices. However, some modern security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), does not expose sensitive data, and avoids vulnerable libraries in the visible code. However, it lacks explicit security headers and published security policies or incident response information. No vulnerability disclosure or security.txt files are present. The site does not appear to use tracking or advertising scripts, which reduces privacy risks but also indicates limited marketing automation. Overall, the website is professional, trustworthy, and focused on its niche market. Security posture is moderate with room for improvement in headers and compliance mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. The risk level is low, but strategic improvements in security and privacy transparency are recommended to maintain trust and compliance.

I

INFO WEB s.r.o.

ladnafotografie.cz

49

LADNÁ FOTOGRAFIE is a small local photography studio based in Ladná near Břeclav, Czech Republic, specializing in portrait, still life, product, and other photographic services. The website serves as a professional portfolio showcasing various photographic works and targets local customers seeking photography services. The business is operated by INFO WEB s.r.o., founded in 2019, and maintains an active social media presence on Facebook and Instagram. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various plugins to deliver a visually appealing and responsive user experience. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is provided on the pages analyzed. Security posture is moderate with HTTPS assumed but no security headers detected, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

M

Metadata ehf.

metadata.is

56

Metadata ehf. is a small Icelandic technology-focused local business specializing in metadata evaluation services, as indicated by their website and structured data. The company operates primarily within the Icelandic market and targets local businesses or individuals interested in metadata services. The website is professionally designed using the Wix platform, featuring modern web technologies and good mobile optimization. However, the content is relatively basic and lacks comprehensive privacy or cookie policies, which impacts compliance and trustworthiness. Security posture is moderate with HTTPS enforced and some security hardening scripts, but lacks explicit security headers and visible incident response information. The absence of WHOIS data for the domain www.metadata.is is notable and reduces confidence in domain legitimacy, though the website itself appears legitimate and professionally maintained. Overall, the site presents a moderate risk profile with room for improvement in privacy compliance and security transparency.

H

H2G Internetagentur AG

h2g.ch

46

H2G Internetagentur AG is a Swiss-based web agency located in Aarau, specializing in consulting, design, development, and hosting of websites and web applications. The company targets businesses and institutions seeking innovative and user-centric digital solutions. Their market position is that of a reputable regional agency with a diverse client base, including international companies and local institutions. The website reflects a professional and modern digital presence with clear service offerings and client references. Technically, the website employs modern web technologies including JavaScript, SVG graphics, and Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Hosting appears to be managed internally or via trusted providers, with HTTPS enforced and minimal tracking. From a security perspective, the site uses HTTPS and respects user privacy by disabling cookies in analytics and honoring Do Not Track signals. However, it lacks some advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. The risk profile is low, with recommendations to enhance security headers and add explicit cookie consent mechanisms to further improve privacy compliance and security posture.

The website ribarstvo.hr serves as the official information system for fisheries in Croatia, operated under the Ministry of Agriculture. It provides a suite of official applications, manuals, and resources aimed at government employees, fisheries professionals, and recreational fishers. The platform is co-financed by the European Maritime and Fisheries Fund, reinforcing its legitimacy and governmental backing. The domain is well-established since 2001 and registered with a reputable Croatian academic network registrar, aligning with the website's official nature. Technically, the site is built on ASP.NET Web Forms technology, featuring standard HTML and CSS with hidden form fields for state management. While the site is functional and content-rich, it shows basic mobile optimization and accessibility. No advanced SEO or modern frameworks are detected. Performance is moderate, and no analytics or tracking scripts are present, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by domain and typical government standards), but no explicit security headers are detected in the provided content. There is no visible privacy or cookie policy, which is a compliance gap under GDPR. The absence of contact information and security policies reduces transparency. However, no vulnerabilities or suspicious elements are evident in the HTML content. The WHOIS data confirms domain legitimacy with consistent registration details. Overall, the site is a trustworthy government portal with good business credibility but requires improvements in privacy compliance, security headers, and user contact transparency to enhance its security posture and regulatory adherence.

C

Catalystic

catalystic.cz

43

Catalystic.cz is a small, Czech Republic-based independent platform focused on interdisciplinary research, non-formal education, and public outreach related to exponential changes in technology and society. The website presents a clear business model centered on fostering creativity, criticality, and exponentiality through research initiatives, educational programs, and partnerships. The site uses modern web technologies including Three.js for interactive graphics and is hosted on Forpsi servers with Webflow CMS. While the website is well-designed with good navigation and mobile optimization, it lacks critical compliance documents such as privacy and cookie policies, and does not provide incident response or vulnerability disclosure information. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

C

CARNET

evisitor.hr

63

The www.evisitor.hr website is an official Croatian government platform managed by CARNET, designed to facilitate the registration and deregistration of tourists in Croatia. It serves commercial and non-commercial accommodation providers, integrating with the national authentication system NIAS for secure user login. The platform is well-positioned as a critical digital service in the Croatian tourism sector, providing essential compliance and informational services to stakeholders. Technically, the site employs modern web technologies including JavaScript, CSS, and Kendo UI components, with a focus on accessibility and multilingual support. Security measures include HTTPS enforcement and anti-CSRF tokens, although some advanced security headers and policies are not visibly implemented. Privacy compliance is basic, with terms of service available but no explicit cookie or privacy policies on the login page. Overall, the site demonstrates a strong business credibility and trustworthy government affiliation, with a moderate to good technical and security posture.

M

Ministarstvo gospodarstva i održivog razvoja Republike Hrvatske

mingor.hr

65

The website mingor.hr/login serves as a secure login portal for the Nextcloud platform used by the Ministry of Economy and Sustainable Development of the Republic of Croatia. It provides government employees and authorized users with a safe environment for data storage and collaboration. The site leverages modern web technologies including Vue.js and Nextcloud version 30, hosted by CARNET, the Croatian Academic and Research Network. The domain registration data aligns well with the government entity, confirming legitimacy and trustworthiness. Technically, the site demonstrates good security practices such as HTTPS enforcement, Content Security Policy with nonce, and session management. However, it lacks publicly accessible privacy, cookie, and terms of service policies, as well as contact or incident response information, which are important for compliance and user trust. The site is minimalistic as expected for a login page, with no advertising or tracking scripts detected, indicating a focus on privacy and security. Overall, the security posture is strong with no obvious vulnerabilities detected in the provided content. The site is well-optimized for mobile and has a professional design consistent with government branding. The main risks relate to the absence of visible privacy and compliance documentation, which should be addressed to improve transparency and regulatory adherence.

F

Fond za zaštitu okoliša i energetsku učinkovitost

fzoeu.hr

56

Fond za zaštitu okoliša i energetsku učinkovitost is a Croatian governmental fund dedicated to environmental protection and energy efficiency. Established in 2004, it serves as a national authority providing funding, regulatory oversight, and public information related to waste management, renewable energy, and environmental sustainability. The website offers comprehensive resources including public tenders, announcements, and educational content targeting Croatian citizens, businesses, and public institutions. The organization maintains a consistent and professional online presence aligned with its governmental role. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with Google Analytics integrated for user tracking under a compliant cookie consent mechanism. Hosting and DNS services are supported by Cloudflare, ensuring reliable performance and security. The site is mobile optimized and includes accessibility features enhancing usability for diverse users. From a security perspective, the website enforces HTTPS and implements cookie consent, but lacks visible security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the organization's Croatian governmental identity, enhancing trustworthiness. Overall, the website presents a secure, professional, and informative platform supporting the fund's mission. Strategic improvements include publishing explicit security policies, incident response information, and enhancing security headers to further strengthen the security posture.

Die Schlösserstrasse is a regional development association focused on promoting cultural tourism and heritage sites, specifically castles and fortresses in Southeast Austria and Slovenia. The website serves as an information hub for tourists and cultural enthusiasts, offering event announcements, booking options, and educational content. The organization appears to have a solid market position within its niche, supported by regional tourism partners and a network of castles. Technically, the website uses basic web technologies such as jQuery and JavaScript, with moderate performance and basic mobile optimization. Security posture is average, with no HTTPS or security headers information available from the provided data, and no cookie consent mechanism detected despite EU audience relevance. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, although the website content and partner references suggest a legitimate operation. Overall, the site is professional and trustworthy but would benefit from improved technical and security measures.

P

Pikant

pikant.hr

46

Pikant is a Croatian design and marketing studio providing a broad range of creative and IT services including web design, graphic design, product design, branding, IT support, and marketing consulting. The company positions itself as a regional leader with a focus on quality and client satisfaction, serving businesses primarily in Croatia and the EU. The website is professionally designed, mobile-optimized, and provides clear contact information and client references. Technically, the site uses modern web technologies such as Google Fonts, Revolution Slider, and Cognito Forms for contact management, with Google Analytics for traffic analysis. Security posture is good with HTTPS enabled and secure form handling, though some security headers and cookie consent mechanisms are missing. The WHOIS data is privacy protected due to GDPR, which is justified for this business type. Overall, the website reflects a legitimate, small-sized business with a solid digital presence.

K

Kiwis & Brownies GbR

brezel.io

39

Brezel.io is a German-based small technology company specializing in tailored enterprise software solutions including ERP, CRM, PIM, and DAM systems. Their business model focuses on providing customizable low-code and no-code platforms that enable businesses to digitize and automate complex workflows. The company emphasizes flexibility, security, and modern web technologies, targeting businesses that require bespoke digitalization solutions rather than off-the-shelf products. Their market position is niche but well-defined, with a focus on industrial, hospitality, and membership management sectors. Technically, the website is built on a modern stack including Laravel, Vue.js, and supports a Progressive Web App for cross-device compatibility. The site is mobile optimized and offers good user experience and navigation clarity. However, performance is moderate and accessibility features are basic. The hosting and DNS setup is standard with no DNSSEC enabled, and no CMS detected. From a security perspective, the site implements two-factor authentication and WebAuthn for user login security and includes CSRF tokens. However, it lacks visible HTTP security headers and DNSSEC, and does not publish security or incident response policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms, despite the use of tracking scripts. WHOIS data is consistent and transparent, supporting legitimacy. Overall, the website presents a professional and trustworthy business front with good technical foundations but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

B

Brainz Immersive s. r. o.

immersive.cz

42

Brainz Immersive s. r. o. is a Prague-based immersive creative studio specializing in virtual and augmented reality experiences. Founded in 2019 and part of the BRAINZ STUDIOS group, the company offers a comprehensive suite of services including AR/VR creative development, 360° video production, multi-platform app development, and immersive installations. Their client portfolio includes notable brands such as ŠKODA AUTO, Vogue, and Czech Radio, positioning them as a niche leader in immersive technology solutions for brands and entertainment. The website reflects a professional and modern digital presence with rich multimedia content and clear navigation. Technically, the site uses modern web technologies and frameworks, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Analytics and marketing tracking are implemented via Google Analytics and Facebook Pixel, but without explicit cookie consent mechanisms. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, Brainz Immersive demonstrates a strong market position in immersive technology with a professional online presence but should enhance privacy compliance and security best practices to further strengthen trust and regulatory adherence.

C

Christian Kiewaldt & Benjamin Braun GbR

kiwis-and-brownies.de

45

KIWIS & BROWNIES is a small German software development company specializing in custom enterprise software, eCommerce solutions using Magento, and promotional applications to increase reach and lead generation. The company operates primarily in the Gummersbach and Oberberg regions of Germany, targeting local businesses seeking digital transformation and marketing services. Their website reflects a professional and modern digital presence with a focus on clear communication and customer engagement via WhatsApp and downloadable informational materials. Technically, the website employs standard modern web technologies including HTML5, CSS, JavaScript with jQuery, and Google Fonts. The hosting is managed via DomainControl nameservers, and Magento is indicated as the eCommerce platform. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. SEO practices are adequately implemented with meta tags and structured content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a formal security policy or incident response contacts. The privacy policy is comprehensive and GDPR compliant, but no cookie consent mechanism is present, which is a compliance gap. No vulnerability disclosure or security.txt files are found, limiting transparency in security practices. Overall, the website presents a trustworthy and professional image suitable for its business scope. The risk level is moderate with recommendations to enhance security headers, implement cookie consent, and publish security policies to improve compliance and trust. The domain registration aligns with the business identity, supporting legitimacy.

The website mep.lt is currently a parked domain page indicating that the domain is for sale. It does not represent an active business or service provider. The content is minimal, primarily advertising the domain sale with no substantive business information, contact details, or privacy policies. The technical infrastructure relies on basic HTML, CSS, and JavaScript with embedded third-party iframes and ad scripts, which introduces potential security risks. There is no evidence of HTTPS enforcement or security headers, and no compliance with privacy regulations is demonstrated. Overall, the site lacks professionalism and trustworthiness, reflecting its status as a domain parking page rather than an operational business website.

Ž

Žinau, ką renku

zinaukarenku.lt

52

Žinau, ką renku is a Lithuanian non-profit political monitoring platform focused on engaging young citizens across Lithuania in election processes and political awareness. The website provides election information, candidate monitoring, volunteer opportunities, and a blog to inform and empower voters. The platform positions itself as a neutral and civic-minded entity, leveraging modern web technologies to deliver content effectively. Technically, the site uses Laravel Livewire, Alpine.js, and Cloudflare DNS services, ensuring a modern and responsive user experience with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and CSRF protections in place, although some security headers could be improved. Privacy compliance is evident through a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the site is trustworthy, professional, and well-maintained, with no detected blocking or WAF interference.

The website 'Crveni popis Hrvatske' is an official Croatian government portal managed by the Ministry of Environment and Green Transition, specifically the Institute for Environmental Protection and Nature. It serves as a comprehensive resource for data on endangered wild species in Croatia, providing risk assessments, conservation information, and public education. The portal targets a broad audience including researchers, policymakers, and the general public interested in biodiversity and environmental protection. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, Chart.js for data visualization, and Leaflet.js for mapping. The presence of a CSRF token and HTTPS indicates a secure infrastructure, although some security headers are missing. Accessibility is addressed but with room for improvement, particularly in image alt attributes and text scaling. The site is moderately performant and mobile-optimized. From a security perspective, the portal demonstrates good practices including GDPR compliance, cookie consent mechanisms, and secure form handling. However, it lacks explicit incident response contact details and a published vulnerability disclosure policy. No critical vulnerabilities or suspicious activities were detected. WHOIS data confirms the domain's legitimacy and alignment with the governmental nature of the site. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic improvements in security headers, accessibility, and incident response transparency would further enhance its posture.

H

HDIT

hdit.hr

56

HDIT is a Croatian IT integration company established in 2006, specializing in IT system implementation, maintenance, custom software and web development, cybersecurity, and IT consulting. The company holds a strong market position as a leading system integrator and helpdesk support provider in Croatia. Their services cover comprehensive IT infrastructure and application solutions, supported by partnerships with major technology vendors. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site is built on WordPress with modern plugins and follows good performance and accessibility standards. Security posture is solid with HTTPS, GDPR compliance, and ISO certifications, though some security headers and incident response disclosures could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Placehold

placehold.co

55

Placehold is a small technology service offering a free, fast, and simple image placeholder generation platform supporting multiple image formats and customization options. The website is well designed, mobile optimized, and provides clear documentation for users, primarily targeting developers and designers needing placeholder images for projects. The technical infrastructure is modern, leveraging standard web technologies and Google Analytics for tracking, with advertising via Carbon Ads. Security posture is good with HTTPS enforced, but lacks security headers and formal policies such as privacy or cookie policies. No forms or sensitive data collection reduces risk exposure. Overall, the site is professional and trustworthy but could improve compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding vulnerability disclosure information.

P

Pučko otvoreno učilište Katarina Zrinska – Ozalj

poukz.hr

54

Pučko otvoreno učilište Katarina Zrinska – Ozalj is a small educational institution based in Croatia, founded in 2022. The organization offers a variety of educational and creative programs targeting children, youth, retirees, and adults, focusing on lifelong learning and community engagement. The website reflects a local community-oriented business model with clear contact information and social media presence, positioning itself as a trusted local educational provider. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and various JavaScript libraries to provide a responsive and visually appealing user experience. While the site is mobile-optimized and well-structured, there is room for improvement in accessibility and SEO optimization. Hosting and domain registration are consistent with the business location, enhancing trustworthiness. From a security perspective, the website implements a cookie consent mechanism compliant with GDPR, but lacks visible advanced security headers and incident response information. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The absence of terms of service and security policies suggests an opportunity to strengthen compliance and user trust. Overall, the website is functional, professional, and safe for general audiences. The risk level is low, but strategic improvements in security posture and privacy transparency would enhance the institution's digital maturity and trustworthiness.

G

Gradska knjižnica i čitaonica Ivana Belostenca

gkc-ivanabelostenca.hr

47

Gradska knjižnica i čitaonica Ivana Belostenca is a small, non-profit public library and cultural institution located in Ozalj, Croatia. It offers library services, cultural events, and access to significant historical works such as the Gazophylacium bilingual dictionary. The website serves as an informational portal for the local community and cultural enthusiasts. Technically, the site is built on Joomla CMS using common web technologies including jQuery, Bootstrap, and Google Maps API. The hosting is provided by ZoNet, a reputable Croatian hosting provider. The site is accessible, with clear navigation and consistent branding, but shows room for improvement in mobile optimization and accessibility. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance documentation. No forms or tracking scripts are present, minimizing privacy risks but also limiting interactivity. Overall, the website is trustworthy and professionally presented but would benefit from enhanced security and privacy measures.

APIS IT d.o.o. operates as an IT service provider specializing in identity federation and authentication services primarily for Croatian government entities such as Grad Zagreb and the Ministry of Culture. The website analyzed is a Home Realm Discovery page facilitating user authentication selection among trusted identity providers. The business targets organizational users within government and affiliated institutions, leveraging Microsoft Active Directory Federation Services (ADFS) technology to provide secure access management. The company holds a moderate market position as a government IT service provider with a medium-sized organizational footprint in Croatia. Technically, the site employs standard web technologies including HTML5, JavaScript, and CSS, integrated with Microsoft ADFS frameworks. The site is functional with basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. The infrastructure appears stable but could benefit from enhanced security headers and improved user experience elements. From a security perspective, the site uses HTTPS and implements basic input validation on forms. However, it lacks explicit security headers such as Content-Security-Policy and Strict-Transport-Security, which are recommended for modern secure web applications. No privacy or cookie policies are present, indicating gaps in compliance and user transparency. No contact or incident response information is provided, limiting user support and security communication channels. Overall, the website is safe and professional for its intended government audience but requires improvements in privacy compliance, security hardening, and user support to enhance trust and regulatory adherence.

S

Stokker AS

stokker.com

64

Stokker AS is a leading sales and service company specializing in professional tools, machinery, and maintenance services primarily serving the Baltic region and Europe. With over 30 years of experience, it operates both physical tool centers and an e-commerce platform, offering a broad range of products and services including a loyalty program and financing solutions. The company positions itself as a reliable partner with extensive expertise and a large maintenance team. Technically, the website is built on modern frameworks such as Next.js and React, integrating Google Tag Manager and Salesforce Live Agent for analytics and customer support. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although some advanced security policies and incident response information are not publicly disclosed. Privacy and cookie policies are present and GDPR compliant. Overall, the website is professional, user-friendly, and trustworthy, though the absence of WHOIS data introduces some uncertainty about domain registration details.

Plus Hosting is a Croatian-based hosting service provider offering a range of services including domain registration, web hosting, reseller hosting, dedicated servers, VPS servers, SSL certificates, affiliate programs, and business mail solutions. The website analyzed is a placeholder page indicating that no active website is configured at the domain lun.hr. The business targets individuals and companies seeking hosting and domain services primarily in Croatia. The market position appears regional with a focus on technology infrastructure services. Technically, the website uses modern HTML5 and CSS3 standards with SVG graphics and a web font from a CDN. However, the site is minimalistic with no dynamic content, forms, or tracking scripts. The hosting provider is Plus Hosting itself, and the site performance and mobile optimization are basic but functional. There is no evidence of a CMS or advanced frameworks. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. No privacy or cookie policies are present, and no incident response or security contact information is provided. The WHOIS data is unavailable due to GDPR restrictions and query limits, but this is consistent with privacy regulations and does not raise immediate suspicion. Overall, the security score is low due to missing best practices and policies. The overall risk is moderate given the site is a placeholder with no active content or user interaction. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving contact and compliance information to enhance trust and security posture.

H

Hrvatski savez za sportski ribolov na moru

hssrm.hr

42

Hrvatski savez za sportski ribolov na moru (HSSRM) is a well-established Croatian non-profit sports federation dedicated to marine sport fishing. Founded in 1953, it serves approximately 25,000 members and provides key services such as fishing permit distribution, organizing competitions, and educational programs. The website reflects a consistent brand and offers relevant content for its target audience of fishing enthusiasts in Croatia. Technically, the site uses modern web technologies including Bootstrap, jQuery, FontAwesome, and Leaflet.js, with integration of Facebook social plugins for community engagement. The site is moderately optimized for mobile and performance, with clear navigation and good content quality. Security posture is adequate but could be improved by adding security headers and formal policies. Privacy compliance is lacking as no privacy or cookie policies are present. WHOIS data confirms domain legitimacy and consistency with the organization's profile. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

T

Turistička zajednica Ličko-senjske županije

lika-active.com

55

The website lika-active.com serves as a regional tourism promotion platform for the Lika region in Croatia, focusing on active and adventure tourism activities such as cycling, trekking, climbing, hunting, and fishing. It is operated by the regional tourism board (Turistička zajednica Ličko-senjske županije) and targets tourists seeking outdoor and nature-based experiences. The site provides relevant information, brochures, event details, and transport options to support tourism in the region. Technically, the site uses an older technology stack including Bootstrap 2.x and jQuery 1.10.2, with basic mobile responsiveness and SEO. Security posture is moderate with no visible security headers and outdated libraries posing potential risks. Privacy compliance is lacking as no privacy or cookie policies are found. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and informative but requires updates in security and compliance to improve trust and protection.

T

Turistička zajednica Ličko-senjske županije

lika-gastro.com

56

The website 'lika-gastro.com' serves as a regional gastronomy and tourism portal for the Lika-Senj region in Croatia, promoting traditional local cuisine and culinary culture. It targets tourists and food enthusiasts interested in authentic regional dishes and local gastronomic events. The business is small-scale, operated likely by the regional tourism board, and focuses on cultural and culinary promotion rather than commercial sales. Technically, the site uses older but functional web technologies including Bootstrap 2.x and jQuery 1.10.2, with basic mobile optimization and SEO. Security posture is moderate with no advanced security headers or DNSSEC, and outdated libraries pose some risk. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is accessible, content-rich, and trustworthy but would benefit from modernization and improved security and privacy practices.

T

Turistička zajednica Ličko-senjske županije

visit-lika.com

58

The website visit-lika.com serves as the official regional tourism portal for Ličko-senjska County in Croatia, providing comprehensive information on travel planning, cultural heritage, activities, and gastronomy. It targets tourists and visitors interested in exploring the region, positioning itself as a key regional tourism authority. The site offers event announcements, travel resources, and promotes local attractions and services. Technically, the website uses a custom CMS with Bootstrap and jQuery, integrates Google Analytics for tracking, and AddToAny for social sharing. The design is professional, mobile-optimized, and offers clear navigation, though accessibility features are basic. Security posture is moderate with domain transfer protection but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-established with a domain age consistent with its business history.

Športsko ribolovno društvo LUC Novalja is a well-established Croatian sports fishing society founded in 1973. The organization focuses on promoting fishing sports through competitions and community events, serving a local and regional audience of fishing enthusiasts. Their website reflects a community-oriented non-profit model with clear contact information and active event updates. Technically, the site uses a modern tech stack including AMP for mobile optimization, Bootstrap for responsive design, and JavaScript libraries for enhanced user experience. However, the CMS is custom or unknown, and hosting details are not explicit. Security posture is moderate; HTTPS is used, and cookie consent is implemented, but security headers and vulnerability disclosures are lacking. Privacy compliance is basic with a cookie banner and a linked cookie policy page but no explicit privacy policy or terms of service pages. Overall, the website is professional and trustworthy but could improve in security and compliance areas.

G

Gradska uprava Novalja

novalja.hr

45

The website www.novalja.hr serves as the official digital portal for the city of Novalja, Croatia, providing residents, tourists, and businesses with comprehensive information about municipal services, news, public procurement, and community events. It holds a strong position as the primary communication channel for the local government, offering transparency and accessibility to public data and administrative resources. The site targets a broad audience including local citizens, government officials, and visitors interested in the city. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. While the site is mobile-optimized and well-structured, there is room for improvement in accessibility and SEO practices. Security-wise, the site uses HTTPS and trusted external libraries but lacks several important security headers and does not provide visible incident response or vulnerability disclosure policies. Privacy compliance is partially met with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy features to align with best practices and regulatory requirements.

The website vhm.nl is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which blocks direct access to any substantive content. The domain is long-established, registered since 1999 with a reputable registrar, indicating legitimacy of the domain ownership. However, no business information, contact details, or compliance policies are visible on the landing page, limiting the ability to assess the company's operations or market position. The technical infrastructure relies on Cloudflare for security and performance, but the lack of accessible content prevents a full evaluation of the website's digital maturity or user experience. Security posture is difficult to evaluate fully due to the blocking mechanism, but the presence of Cloudflare indicates some level of protection. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the lack of accessible information.

B

Bureau Veritas

bureauveritas.com

77

Bureau Veritas is a globally recognized leader in testing, inspection, and certification services, offering a broad portfolio of solutions across multiple industries including energy, transportation, manufacturing, and government sectors. The website reflects a mature digital presence built on Drupal 10, with modern consent management and analytics integration, demonstrating a commitment to privacy and compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for user experience and mobile devices.

P

Project Jupyter

jupyter.org

57

Project Jupyter is a leading open-source initiative providing interactive computing tools widely used in data science, education, and research. The platform offers multiple key services including JupyterLab, Jupyter Notebook, JupyterHub, and Voilà, supporting over 40 programming languages. The website reflects a mature, well-established project with a large user base and strong community backing. Technically, the site is built on modern web technologies with responsive design and privacy-conscious analytics. Security posture is strong with HTTPS and domain protections, though some improvements in security headers and vulnerability disclosure could be made. Overall, the site is professional, trustworthy, and safe for general audiences.

The website bradatiguru.hr is a small-scale personal or freelance business site focused on web development and blockchain advocacy. It uses a unique retro terminal interface to engage visitors and promote the owner's portfolio and blockchain-related projects. The site targets web developers and blockchain enthusiasts, offering educational content and links to related blockchain resources. Technically, the site is built with basic HTML, CSS, and JavaScript without any CMS or advanced frameworks, resulting in fast loading times but limited SEO and accessibility features. Security posture is minimal with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is safe and trustworthy but would benefit from improved security and privacy practices to enhance credibility and user trust.

K

Konplast d.o.o.

kipos.hr

40

Kipos.hr is a Croatian business website serving as a login portal for KIPOS, a bookkeeping and business information system developed by Konplast d.o.o. The platform targets business users requiring accounting and bookkeeping software solutions. The website is primarily a secure login interface with client-side encryption for credentials, indicating a focus on protecting user data during authentication. The business appears to be a small-sized technology provider with a niche market in Croatia, founded in 2014, and maintains consistent branding with its parent company Konplast d.o.o. The website lacks public-facing content such as privacy or cookie policies and does not provide contact information on the login page, which limits transparency for external users.

C

CESI

cesi.hr

50

CESI is a Croatian non-profit organization dedicated to advancing the social position of women and achieving gender equality through education, consulting, research, and advocacy. The organization has a strong market presence with over 200 successful projects and numerous collaborations, targeting a broad audience interested in social justice and women's rights. Their website reflects a professional and consistent brand image with clear navigation and relevant content in Croatian and English. Technically, the site uses modern web standards, including HTTPS and JavaScript modules, and integrates Google Analytics for visitor insights. Accessibility and mobile optimization are well addressed, contributing to a positive user experience. Security-wise, the site enforces HTTPS and includes CSRF tokens but lacks some advanced security headers and formal security policies, indicating room for improvement. Privacy compliance is basic with cookie consent implemented, but explicit privacy and security policies could be enhanced. Overall, CESI's digital presence is credible and trustworthy, supporting their mission effectively.

O

Obrtnička komora Krapinsko-zagorske županije

okkzz.hr

47

Obrtnička komora Krapinsko-zagorske županije is a regional chamber of trades and crafts in Croatia, affiliated with the national Croatian Chamber of Trades and Crafts. The organization supports local craftsmen and entrepreneurs through education, advocacy, and networking. The website provides event announcements, educational content, and contact information primarily targeting the local business community. Technically, the site runs on an outdated Joomla! 1.5 CMS, which poses security risks, though it uses HTTPS and basic email obfuscation. Security posture is moderate but lacks modern security headers and incident response contacts. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and trustworthy but requires modernization and compliance improvements.

U

Ugandi Resto

ugandiresto.ee

44

Ugandi Resto is a well-established restaurant located in Otepää, Estonia, offering a unique blend of Nordic and Mediterranean cuisine. The business has a strong local presence with over 23 years of history and multiple prestigious awards, positioning it as a reputable hospitality provider in the region. The website reflects a professional and customer-friendly approach with clear service offerings including dining, private event hosting, and gift cards. Technically, the website uses modern web technologies and a proprietary CMS, delivering a good user experience with mobile optimization and rich content. However, there are gaps in privacy compliance and security best practices, notably the absence of privacy and cookie policies and limited security headers. The security posture is adequate but could be enhanced to meet higher standards. Overall, the site is trustworthy and well-maintained but should address compliance and security improvements to reduce risk and enhance user trust.

E

Ekotek Eesti OÜ

ekotek.com

45

Ekotek Eesti OÜ operates as the authorized distributor of Victorinox products in the Baltic region, primarily serving Estonia with a retail presence in over 50 stores. The company focuses on offering high-quality Victorinox pocket tools, kitchen knives, and corporate gifting solutions, targeting both consumers and business clients. Founded in 1997, Ekotek has established a reputable market position as a trusted regional distributor. Technically, the website is built on the Greativ CMS platform and leverages modern JavaScript libraries such as Swiper.js and Plyr.js for enhanced user experience. It integrates Google Fonts, Facebook SDK, and YouTube APIs, indicating a mature digital infrastructure. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, DNSSEC is not enabled, and explicit security headers are not detected in the HTML content, suggesting room for improvement in hardening security posture. No incident response or vulnerability disclosure policies are publicly available, which could be enhanced to improve trust and compliance. Overall, Ekotek's website is professional, trustworthy, and compliant with privacy regulations, with a solid business foundation and a clear focus on retail distribution. Strategic improvements in security headers and DNS security would further strengthen its security posture.

Z

Zone Media OÜ

t1venue.ee

44

T1 Venue is a modern event venue located in Tallinn, Estonia, operated by Zone Media OÜ. The venue offers versatile spaces suitable for galas, conferences, receptions, and other special events, with a capacity of up to 800 people. The website is professionally designed using the Greativ CMS platform, featuring responsive design and integration with Google Analytics and Tag Manager for marketing and analytics purposes. The technical infrastructure is solid with HTTPS enabled, but lacks DNSSEC and some security headers. Privacy compliance is minimal, with no dedicated privacy or cookie policy pages, though cookie consent is managed via script. Overall, the website presents a trustworthy and professional image suitable for its hospitality industry niche.

PUNKS.MY is a Malaysia-based NFT project that offers a unique collection of 1000 iconic Malaysian figures as digital collectibles on the Ethereum blockchain. The project emphasizes on-chain SVG storage for permanence and has historical significance with public billboard exposure during the NFT craze. The website integrates with Metamask for wallet connection and links to reputable platforms such as OpenSea and Etherscan for marketplace and contract transparency. The business targets NFT collectors and crypto enthusiasts within Malaysia and operates as a small niche player in the NFT space. Technically, the website uses a modern JavaScript stack including ethers.js, jQuery, Bootstrap, and various UI plugins. Hosting is supported by Cloudflare DNS and nameservers, ensuring good SSL configuration and moderate performance. However, mobile optimization and accessibility are basic, and SEO practices are minimal. The site lacks a CMS and appears custom-built. From a security perspective, HTTPS is enforced, and the site uses nonce-based Metamask signature challenges for authentication. However, no explicit security headers (CSP, HSTS, etc.) are detected, and there are no published privacy or cookie policies, which are compliance gaps. Google Analytics is used without visible cookie consent mechanisms, indicating moderate user tracking but poor privacy compliance. No contact or incident response information is provided, limiting transparency. Overall, the website is functional and professional with moderate trustworthiness but has room for improvement in privacy compliance, security hardening, and user transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, improving mobile and accessibility features, and providing clear contact and incident response channels.

R

RGS Racing

rgs-racing.com

68

RGS Racing operates as a motorsport racing team and academy with an integrated e-commerce platform hosted on Shopify. The website provides comprehensive information about the team, sponsors, bikes, calendar, and offers merchandise through an online store. The target audience includes motorsport enthusiasts and customers interested in racing-related products and services. The business model combines sports promotion with direct-to-consumer sales, positioning itself as a niche player in the motorsport and racing e-commerce sector. Technically, the website leverages Shopify's robust platform, utilizing modern web technologies including JavaScript, CSS, and Shopify Liquid templates. The site is well-optimized for mobile devices, exhibits good performance, and incorporates SEO best practices. The use of Shopify Payments and integrated analytics indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and includes cookie consent mechanisms aligned with GDPR requirements. However, there is no explicit security policy or incident response contact information available, and the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy front for RGS Racing, but the lack of WHOIS data and explicit security policies suggests areas for improvement in transparency and security posture. Strategic recommendations include establishing a clear security policy, publishing incident response contacts, and verifying domain registration details to enhance trust and compliance.

M

Meister Concept

getyourcertificate.ch

42

Get Your Certificate is a Swiss-based service platform focused on providing certification and examination facilitation for various Swiss medical societies, primarily in surgical and specialized medical fields. The website is professionally branded and targets medical professionals seeking certification in Switzerland. The business operates as a small entity under Meister Concept, with partnerships evident through linked domains. Technically, the website uses standard web technologies (HTML, CSS, JavaScript) but lacks advanced frameworks or CMS indications. Mobile optimization is currently poor, and no advanced SEO or accessibility features are evident. Security posture is moderate with HTTPS implied but no visible security headers or policies. Privacy compliance is minimal with no privacy or cookie policies found. Contact information is absent from the landing page, limiting direct communication channels. Overall, the site is functional and professional but requires improvements in privacy, security, and mobile responsiveness to enhance trust and compliance.

C

Christopher Isene

christopherisene.se

52

Christopher Isene's website is a personal and professional portfolio site that highlights his background as a system integration consultant and technology enthusiast. The site serves as a central hub for his professional identity, showcasing his skills, projects, and contact information primarily through social media links. The business model is personal branding with a focus on technology consulting services, targeting a general audience including professional contacts and the tech community. The website is hosted on WordPress, leveraging modern web technologies and hosted by Loopia, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally presented but could improve in compliance and security best practices.

E

Emma Marie Andersson

opassande.se

48

Emma Marie Andersson's website serves as a personal portfolio and blog focused on her artwork, particularly drawings and alcohol ink techniques, as well as her professional work as a graphic designer. The site targets art enthusiasts and potential clients interested in original artwork or graphic design services. The business model is primarily a personal showcase with potential for direct sales through contact. The website is built on WordPress using the Twenty Seventeen theme, with integration of social media platforms such as Instagram, YouTube, and Bluesky to extend reach and engagement. Hosting and domain registration are managed by Loopia AB, a Swedish provider, consistent with the website's Swedish language and content.

C

Cinema8 Limited

cinema8.com

71

Cinema8 Limited operates an advanced SaaS platform specializing in interactive video hosting, creation, and monetization, leveraging AI-powered tools to enhance user engagement and analytics. Positioned as a comprehensive solution for businesses and individuals, Cinema8 offers scalable video hosting, editing, collaboration, and marketing features, targeting a broad audience including marketers, educators, and enterprises. The company maintains a strong market presence supported by multiple ISO certifications and a professional digital footprint. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, delivering fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, multiple security headers, and domain registration protections, though DNSSEC is not enabled. Privacy compliance is well addressed with accessible policies, though cookie consent mechanisms could be improved. Overall, Cinema8 demonstrates a mature digital and security posture suitable for its business model and market demands.