Security Directory

M

Mastodon

mastodon.xyz

61

Mastodon.xyz operates as an independent Mastodon instance within the federated social networking ecosystem known as the fediverse. It provides an open platform primarily targeting English and French speaking users, offering microblogging and social networking services without ads or algorithms. The website is built on the Mastodon platform version 4.3.4, leveraging modern web technologies including React and WebSockets for real-time interactions. Hosted by OVH in France, the domain is well-established since 2017 and shows consistent registration data, supporting its legitimacy. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and terms of service. No contact information or incident response details are publicly available. Overall, the site presents a professional, community-driven social network with good technical implementation and moderate privacy compliance.

N

Next Generation Internet

ngi.eu

66

Next Generation Internet (NGI) is a European Commission initiative dedicated to fostering a vibrant, open internet ecosystem by linking research, policy, and technology for societal benefit. The website serves as a central hub for NGI's activities, including open calls for research and innovation projects, community engagement platforms, and dissemination of innovations and impact stories. It targets researchers, startups, SMEs, policy makers, and the broader technology community interested in advancing internet technologies aligned with European values. Technically, the website is built on a modern WordPress CMS platform, leveraging popular plugins such as Yoast SEO, WPBakery Page Builder, and Matomo for analytics. The site demonstrates good digital maturity with responsive design, accessibility features, and comprehensive SEO optimization. It integrates GDPR-compliant cookie consent mechanisms and uses secure HTTPS connections. From a security perspective, the site employs HTTPS with strong SSL configuration and uses plugins to manage GDPR compliance and cookie consent. While explicit security headers are not fully detailed, no exposed sensitive data or vulnerabilities are evident in the content. The absence of a formal security policy or incident response page suggests room for improvement in transparency and readiness. Overall, NGI.eu presents a professional, trustworthy, and well-maintained web presence consistent with its role as a European Commission initiative. The site effectively communicates its mission and services, supports community interaction, and adheres to privacy and security best practices, making it a reliable resource for its audience.

P

photoapps.expert

photoapps.expert

53

The website photoapps.expert is currently a parked domain primarily monetized through advertising networks such as Google Adsense and Bodis. It lacks any substantive business content, contact information, or services, indicating it is not actively used for commercial or operational purposes. The domain is newly registered in 2025 with a Croatian registrar, and no registrant organization is disclosed, which aligns with the minimal website content. Technically, the site uses standard Google tracking and advertising scripts but lacks advanced security headers and privacy compliance mechanisms. The security posture is basic with HTTPS enabled but no additional protections. Overall, the site presents low business credibility and limited user engagement potential.

S

Sphinx developers

sphinx-doc.org

59

Sphinx is an established open source documentation generator widely used by major software projects such as Python, Linux Kernel, and Project Jupyter. It provides a comprehensive set of features including rich text formatting, cross-referencing, multiple output formats, theming, extensibility, and internationalization. The website serves as the central documentation hub for the Sphinx project, targeting developers and technical writers who need to create structured and beautiful documentation efficiently. The project is community-driven with active support and contributions. Technically, the website is well-structured, using modern web standards including HTML5, CSS3, JavaScript, and Font Awesome icons. It is hosted on Read the Docs, a platform specialized for documentation hosting, ensuring good performance and mobile optimization. The site is accessible, SEO-friendly, and provides clear navigation and content organization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and visible privacy or cookie policies, which are areas for improvement. No incident response or security contact information is provided, which could be enhanced to improve trust and compliance. The WHOIS data is unavailable due to a malformed WHOIS response, but the domain appears legitimate given the project's long history and community trust. Overall, the website is professional, trustworthy, and serves its purpose well. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing clear contact and security policies to enhance compliance and user trust.

I

isabelle garcia

isabellegarcia.com

58

The website is a personal blog titled 'isabelle garcia – Simply Simple' hosted on WordPress.com and registered under Automattic Inc. It focuses on lifestyle topics such as vanlife, travel, meditation, and personal adventures. The blog targets a general audience interested in these themes and operates as a small-scale content blogging platform without explicit commercial services. Technically, the site uses WordPress with Jetpack and Gutenberg plugins, hosted by Automattic, providing a stable and moderately performant infrastructure with good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No direct business contact information or security policies are disclosed, limiting trust and compliance indicators. Overall, the site is safe, professional, and consistent with a personal blog but would benefit from enhanced privacy and security disclosures.

I

isabelle garcia – Simply Simple

isabellegarcia.me

59

The website is a personal blog titled 'isabelle garcia – Simply Simple' hosted on WordPress.com and registered through Automattic Inc. It features content focused on travel, vanlife, adventures, and personal reflections, targeting a general audience interested in lifestyle and travel stories. The business model is content blogging with a niche focus, and the site has been active since 2007, indicating a mature presence. Technically, the site uses WordPress with Jetpack and Gutenberg, hosted on WordPress.com infrastructure, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. No direct contact information or security policies are published. Overall, the site is safe, trustworthy, and professionally presented but could improve privacy and security transparency.

D

Design.ee

design.ee

51

Design.ee is a small Estonian-based design and development agency specializing in brand development, UX research, UI creation, graphic design, and web development primarily for games and commerce applications. The company has an established market presence since 2010 and targets businesses seeking creative and technical design solutions. The website is built on WordPress using modern technologies such as Bootstrap and WPBakery Page Builder, with integrated Google Analytics and Tag Manager for tracking. The site is mobile optimized and SEO friendly with structured data implemented. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. Contact information is limited to phone and physical address with no email or contact form visible. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

S

Sylvain Hellegouarch

defuze.org

53

defuze.org is a personal/professional website representing Sylvain Hellegouarch, primarily serving as a landing page linking to social media profiles such as Mastodon, GitHub, and LinkedIn. The site is minimalistic, built using the Astro framework, and hosted with DNS services from Google Cloud. The domain is well-established since 2004, registered in France, and shows no suspicious registration patterns. The website lacks privacy, cookie, and terms of service policies, and does not provide direct contact information or forms, indicating a low level of data collection and user interaction. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Overall, the site is safe, professional, and targeted at a general audience with no adult or questionable content.

T

Travis CI

travis-ci.org

66

Travis CI is a well-established technology company specializing in continuous integration and continuous delivery (CI/CD) tools aimed at developers and software teams. The website presents a professional and comprehensive overview of their services, emphasizing simplicity, flexibility, and trustworthiness in CI/CD pipelines. The digital infrastructure is built on WordPress with modern web technologies, providing a good user experience, mobile optimization, and SEO compliance. Security posture is solid with HTTPS enforced, though explicit security headers and dedicated security policies could be enhanced. Privacy compliance is strong with clear privacy and cookie policies, including GDPR adherence. The absence of WHOIS data transparency slightly impacts trust but is likely due to privacy protection. Overall, the site reflects a mature, credible business with a focus on developer-centric solutions.

S

SonarSource

tidelift.com

78

SonarSource is a technology company specializing in software security and code quality solutions, primarily through its flagship product SonarQube. The company targets developers, DevOps, and security teams by integrating advanced static application security testing (SAST), software composition analysis (SCA), infrastructure as code (IaC) scanning, and secrets detection into the developer workflow. SonarSource holds a strong market position as a leading provider of developer security tools with a professional and comprehensive online presence. Technically, the website is built using modern frameworks such as Gatsby and React, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, WHOIS data is missing, which slightly impacts transparency but does not detract from the overall legitimacy given the company's established reputation and certifications like ISO 27001. Overall, the website and business demonstrate a mature digital infrastructure and strong security culture.

Data Science Alliance is a small nonprofit organization founded in 2019, focused on promoting Responsible Data Science through community projects, educational events, and resources primarily in San Diego. Their mission centers on leveraging data science to foster positive social impact. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting data professionals, students, and community members interested in ethical AI and data science. Technically, the site uses modern frontend technologies including Bootstrap, Font Awesome, Google Fonts, and integrates secure payment processing via Stripe. Analytics tools such as Google Tag Manager and Hotjar are employed for user insights, though no cookie consent mechanism is present. Security posture is adequate with HTTPS and secure payment integration, but lacks explicit security headers and published privacy or cookie policies. Overall, the domain registration is privacy protected but consistent with nonprofit norms, and the site demonstrates a trustworthy and professional online presence.

Deepnote is a technology company offering a collaborative analytics and data science notebook platform designed for teams. Their platform integrates Python and SQL to enable data exploration and sharing insights in a unified environment. The website reflects a modern SaaS business model targeting data scientists and analytics professionals seeking collaborative tools. Technically, the site is built using modern frameworks such as Next.js and Chakra UI, hosted on AWS infrastructure, and incorporates multiple marketing and analytics scripts. Security posture is moderate with HTTPS enabled and domain registration consistent with a legitimate business, but lacks visible security policies and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and functional but could improve transparency and security documentation.

A

Asociace pro veřejné zakázky, z.s.

asociacevz.cz

53

Asociace pro veřejné zakázky (AVZ) is a Czech non-profit association established in 2006 that serves as a platform for entities involved in public procurement. It brings together contracting authorities, suppliers, lawyers, administrators, and consultants to promote qualified and responsible approaches to public procurement processes. The association offers educational programs such as the internationally recognized LL.M. in Public Procurement, organizes events, and publishes expert articles, positioning itself as a key player in the Czech public procurement sector. The website reflects a professional and consistent brand image, targeting professionals and organizations engaged in public procurement activities. Technically, the website is built on a Joomla CMS platform enhanced with modern frontend technologies including Bootstrap 5.3.3, Animate.css, and Tiny-slider. It is hosted on a Czech hosting provider (cesky-hosting.eu) and employs HTTPS with a cookie consent mechanism, indicating a moderate to good level of digital maturity. The site is mobile-optimized and provides a clear navigation structure, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses secure form submissions. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and advanced security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is supported by a GDPR document linked in the footer and an active cookie consent banner. Contact information is transparent and professional, enhancing trustworthiness. Overall, the website presents a low-risk profile with a strong business credibility and good privacy compliance. Strategic recommendations include publishing formal security policies, implementing vulnerability disclosure, enhancing accessibility, and adding security headers to further strengthen the security posture.

Ú

Úřad pro ochranu hospodářské soutěže

uohs.cz

48

Úřad pro ochranu hospodářské soutěže (UOHS) is the central governmental authority in the Czech Republic responsible for enforcing competition law, overseeing public procurement, monitoring public support, and regulating market power abuses. The agency operates under Czech law and is led by a chairman appointed by the president. The website serves as an official communication channel providing news, regulatory information, and resources for businesses and the public. It maintains a professional presence with regular updates and social media engagement. Technically, the website employs standard web technologies including jQuery, Select2, and Featherlight for UI enhancements. It implements a cookie consent mechanism compliant with GDPR requirements and uses Google Analytics for traffic monitoring. The site is mobile-optimized and structured for good user experience, though accessibility features are basic. The absence of WHOIS data limits domain registration transparency but does not detract from the site's legitimacy given its official government domain and content. Security posture is moderate with HTTPS usage implied and cookie consent implemented. However, no explicit security headers or incident response policies are visible, suggesting room for improvement in security best practices. No vulnerabilities or exposed sensitive data were detected in the content analysis. Overall, the website is a credible and professional government resource with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving accessibility compliance to strengthen trust and resilience.

S

SOVZ

sovz.cz

47

The website www.sovz.cz represents a Czech government-affiliated initiative focused on the National Strategy for Public Procurement in the Czech Republic. It serves as an informational and educational platform to support responsible public procurement practices, modernization of public investments, and compliance with relevant legislation. The site targets public sector entities, procurement professionals, and suppliers within the Czech Republic. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced UI and GDPR compliance. The website is well-structured, mobile-optimized, and includes cookie consent mechanisms aligned with EU regulations. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though it lacks some advanced security headers and explicit incident response policies. The absence of WHOIS data limits domain trust assessment, but the official government backing and content quality support legitimacy. Overall, the site is professional, compliant, and serves its public sector audience effectively.

S

Spojené nástroje elektronické s.r.o.

rozza.cz

51

ROZZA is a Czech government-backed platform designed to integrate electronic tools for public procurement, simplifying access for suppliers and promoting transparency through standardized and open data. The platform is managed by the Ministry of Regional Development and operated by Spojené nástroje elektronické s.r.o., positioning it as a key player in the Czech public procurement ecosystem. The website presents a professional and consistent brand image with clear business information and partner integrations. Technically, the site is built using Angular 5, employs Google Analytics for tracking, and is hosted under a registrar consistent with the domain's government affiliation. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS is detected, and the hosting provider is inferred from DNS data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is provided. The site is free from WAF blocking or content restrictions, allowing full content access. Overall, the platform is trustworthy and credible, serving a critical government function. However, improvements in privacy compliance, security headers, and accessibility would enhance its security posture and regulatory adherence.

B

Bizmorphic Research Pvt. Ltd

wisemelon.ai

68

Wisemelon is a technology company specializing in AI chatbot solutions designed to transform customer interactions through intelligent, natural conversations. Positioned as a comprehensive AI-driven engagement platform, it offers omnichannel messaging, CRM and e-commerce integrations, and automation tools tailored for businesses of all sizes. The company operates on a SaaS subscription model with tiered pricing plans targeting individuals, small teams, and enterprises. Technically, the website leverages modern JavaScript frameworks and integrates multiple analytics and marketing tools, hosted on AWS infrastructure. Security posture is solid with HTTPS and domain protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, lacking cookie consent mechanisms despite tracking scripts. Overall, the website is professional, well-branded, and trustworthy, supported by customer testimonials and a Meta Business Partner certification.

C

Codepip

codepip.com

51

Codepip is an educational technology platform specializing in gamified web development coding games designed to help learners improve their coding skills through interactive play. The platform offers a freemium business model with free basic games and paid pro subscriptions, including group and classroom plans. It targets individuals learning web development, ranging from beginners to intermediate users, aiming to provide engaging and effective learning experiences. The website is professionally designed, well-branded, and features endorsements from reputable organizations, enhancing its market credibility. Technically, the website is built on WordPress using modern technologies such as Bootstrap, jQuery, and Font Awesome, with Stripe integrated for payment processing. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Analytics and marketing tools like Google Analytics and Mailchimp are used for user tracking and engagement. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and some recommended security headers. There is no visible security policy or incident response information, and cookie consent mechanisms are absent, which may impact GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. Overall, Codepip presents a trustworthy and professional online presence with strong business credibility and good technical implementation. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance its security and compliance posture.

M

mingw-w64

mingw-w64.org

60

Mingw-w64 is an established open source project providing a comprehensive runtime environment for GCC and LLVM compilers targeting Windows platforms, including 32-bit, 64-bit, and ARM64 architectures. The project offers extensive Windows API headers, runtime libraries such as pthreads support, and tools for generating and compiling Windows interface files. It is widely adopted and collaborates with other major open source projects like Cygwin, ReactOS, Wine, and MSYS2, positioning itself as a critical component in the Windows open source development ecosystem. Technically, the website is built using modern static site generation tools (mkdocs and mkdocs-material), delivering fast performance and good mobile optimization. The site is well-structured with clear navigation and relevant content focused on software development. HTTPS is enforced, ensuring secure transport, although explicit security headers are not detected in the HTML source. No forms or data collection mechanisms are present on the main site, minimizing attack surface. From a security and compliance perspective, the site lacks visible privacy, cookie, or terms of service policies, and no contact information for security incidents or data protection officers is provided. The WHOIS data is unavailable or privacy protected, which is common for open source projects but limits domain registration transparency. No WAF or blocking mechanisms are detected, and no vulnerabilities or exposed sensitive data were found in the content. Overall, the site demonstrates a solid technical foundation and trustworthy business presence as an open source project, but it would benefit from improved privacy compliance documentation and enhanced security headers to strengthen its security posture and user trust.

R

RubyGems.org

rubygems.org

69

RubyGems.org is a well-established, community-driven platform that serves as the primary gem hosting service for Ruby developers worldwide. Founded in 2004, it provides essential services such as gem publishing, searching, and installation, supported by a robust API and comprehensive guides. The platform enjoys a strong market position as the leading Ruby gem repository, supported by partnerships with Ruby Central, Fastly, and other technology providers. The website demonstrates consistent branding and professional content tailored to its developer audience. Technically, RubyGems.org leverages a modern technology stack centered on Ruby on Rails, enhanced with JavaScript frameworks like StimulusJS and Turbo for dynamic user experience. The site is hosted behind Fastly's CDN, ensuring fast performance and good mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and maintains domain transfer restrictions. However, DNSSEC is not enabled, and some security headers are missing. The site provides a security policy page but lacks a public incident response contact and vulnerability disclosure mechanism. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism detected. Overall, RubyGems.org presents a high level of trustworthiness and professionalism with minor areas for improvement in security and privacy compliance. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing vulnerability disclosure information to enhance security posture and user trust.

C

Codetoday Unlimited

codetodayunlimited.com

67

Codetoday Unlimited is an educational business specializing in providing Python coding video courses targeted at children and teenagers. The company positions itself as a niche provider with a focus on self-led learning, led by a recognized Python educator. The website is professionally designed using the Wix platform, featuring structured data that includes contact phone and physical address in London, UK. The business model is primarily online education with a focus on youth programming skills development. Technically, the site uses modern web technologies and tracking tools such as Google Tag Manager and Facebook Pixel, hosted on Wix infrastructure. Security posture is moderate with HTTPS enforced and some script hardening, but lacks security headers and formal privacy or cookie policies. The WHOIS data is missing, raising concerns about domain registration legitimacy, though the website content and business information appear credible. Overall, the site is safe, professional, and targeted at a general audience of children and teenagers interested in coding.

S

Stichting KMVK

greenkey.nl

65

Green Key is a well-established international sustainability certification organization focused on the hospitality sector, operated in the Netherlands by Stichting KMVK. The website presents a professional and comprehensive digital presence with clear information about the certification, its benefits, and how businesses can participate. The site is well-structured, mobile-optimized, and uses modern web technologies including Google Fonts, jQuery, Swiper.js, and Google Analytics with a compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the website reflects a trustworthy and credible non-profit organization dedicated to promoting sustainability in hospitality.

H

Hotelsterren

hotelsterren.nl

63

Hotelsterren is a specialized service provider focused on the official classification of hotels in the Netherlands according to European standards. The company offers a web application called 'Klasse' to assist hotels in managing their classification process and compliance with 270 European norms. With over 1,200 hotels classified, Hotelsterren holds a strong market position as a trusted authority in the hospitality sector. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its target audience of hotel owners and travelers. Technically, the website is built on WordPress with modern technologies including Bootstrap, React, and jQuery. It leverages Cloudflare for security and performance, Google Analytics and Facebook Pixel for tracking, and includes a cookie consent mechanism compliant with GDPR. Security posture is strong with HTTPS enforced and bot mitigation via Cloudflare Turnstile and Google reCAPTCHA, though some security headers could be explicitly added for enhanced protection. Overall, the website demonstrates good privacy compliance, business credibility, and technical maturity. No critical vulnerabilities or suspicious content were detected. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness. Strategic improvements could focus on publishing formal security policies and enhancing accessibility features.

B

Beeld & Geluid

beeldengeluid.nl

52

Beeld & Geluid is a prominent Dutch media archive and cultural institution serving a broad audience including individual visitors, media professionals, educators, and researchers. The website reflects a well-established organization with a clear focus on media heritage and education. The digital presence is professionally designed, mobile-optimized, and uses modern web technologies such as Google Analytics and Tag Manager for user insights. However, explicit privacy and cookie policies are not detected in the provided content, which may impact compliance with GDPR requirements. Security posture is adequate with HTTPS enabled and some security best practices observed, but additional security headers and published policies would enhance trust and resilience. Overall, the domain registration aligns well with the organization's identity, supporting legitimacy and trustworthiness.

N

Nationaal Militair Museum

nmm.nl

66

The Nationaal Militair Museum is a prominent Dutch national museum dedicated to military history, offering a wide range of exhibitions, educational programs, and events. It serves a broad audience including families, schools, veterans, and military enthusiasts. The museum holds a strong market position as the largest military collection in the Netherlands and operates as a non-profit cultural institution. Technically, the website is built on WordPress with modern technologies such as Algolia Search, Google Tag Manager, and Bing Ads, ensuring fast performance, mobile optimization, and excellent SEO. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, providing clear contact and legal information. The domain registration aligns well with the museum's identity, supporting legitimacy.

D

DierenPark Amersfoort

dierenparkamersfoort.nl

58

DierenPark Amersfoort is a well-established Dutch zoo focused on providing adventurous and educational experiences primarily for children and families. The website reflects a strong brand presence with rich multimedia content, event promotions, and detailed animal information. The business model centers on visitor admissions, events, and group bookings, positioning it as a leading family-friendly attraction in the Netherlands. Technically, the site is built on WordPress with a modern stack including SEO and multilingual plugins, and integrates multiple marketing and analytics tools. Security posture is adequate with HTTPS and cookie consent, but lacks DNSSEC and explicit security headers or policies. Privacy compliance is partial, with cookie consent but no visible privacy or terms pages. Overall, the site is professional, trustworthy, and safe for general audiences.

Hoteliers.com operates as an online platform facilitating direct hotel bookings with discounts by eliminating commission fees. The website targets travelers seeking cost-effective hotel stays by connecting them directly to hotel websites. The platform showcases multiple hotel listings with images, pricing, and direct booking links, emphasizing commission-free benefits. Technically, the site is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, with integration of Google Analytics and Tag Manager for tracking and analytics. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks comprehensive security headers and formal privacy or cookie policies, which are important for compliance and trust. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the site presents a moderate risk profile with recommendations to improve privacy compliance, security headers, and domain registration transparency.

A

ASIANA, Co. Ltd.

asiana.design

53

Asiana Design is a small design resource website focused on providing brand materials, brand book guidelines, and photo/video content guides for products under the Asiana brand. The site targets internal teams and designers working with the Asiana brand, offering structured and consistent design resources. The technical infrastructure is based on Webflow CMS, utilizing Google Fonts and jQuery, with moderate performance and good mobile optimization. Security posture is basic with no advanced security headers or DNSSEC enabled, and no privacy or cookie policies published, indicating room for improvement in compliance and security maturity. Overall, the website is professional and trustworthy but lacks comprehensive privacy and security documentation.

Groen Centraal is a collaborative network of nine conference centers located in the Utrechtse Heuvelrug region of the Netherlands, providing meeting and event venues in a green, forested environment. The website targets business customers seeking professional conference and meeting spaces, emphasizing accessibility and natural surroundings. The business model focuses on venue rental and event hosting, positioning itself as a regional leader in hospitality services for corporate events. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates analytics and consent management tools such as Google Tag Manager and Cookiebot. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is moderate, with HTTPS enabled and cookie consent implemented, but lacking some advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in security policies and contact transparency are recommended.

C

CLC-VECTA Centrum voor Live Communication

clcvecta.nl

54

CLC-VECTA Centrum voor Live Communication is a well-established Dutch industry association serving companies and professionals involved in organizing, accommodating, and facilitating trade fairs, congresses, meetings, events, incentives, and entertainment. The organization positions itself as a key player in the live communication sector in the Netherlands, offering knowledge sharing, networking, member services, legal support, and lobbying activities. The website reflects a professional and consistent brand image with comprehensive content targeted at industry professionals and member companies. Technically, the website is built on the Umbraco CMS platform and leverages a modern front-end stack including jQuery, Bootstrap, and various UI plugins such as Revolution Slider and Owl Carousel. The site is mobile-optimized with good SEO practices and moderate performance. Hosting is provided by Internet Service Europe B.V., with domain registration dating back to 2009, indicating a mature online presence. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which could be improved. No explicit security policies or incident response contacts are published, and no cookie consent mechanism is detected despite GDPR compliance indicated by the privacy policy. No vulnerabilities or exposed sensitive data were found in the provided content. Social media integration is present but no analytics or tracking scripts were identified. Overall, the website demonstrates a solid business credibility and content quality with room for improvement in security best practices and privacy compliance mechanisms. The domain registration and WHOIS data support the legitimacy and consistency of the business identity.

Y

YOIN excellent meeting places

yoinexcellentmeetingplaces.com

54

YOIN excellent meeting places is a specialized certification and advisory organization focused on conference and event venues, providing independent quality assessments and facilitating knowledge sharing within the hospitality sector. The business is relatively new, founded in 2021, and is supported by the sector association CLC-VECTA, enhancing its credibility and industry integration. The website presents a professional image with clear navigation, multilingual support, and relevant content targeting venue professionals and event stakeholders. Technically, the site uses modern web technologies such as Bootstrap and jQuery, hosted by a reputable provider, and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the domain registration and WHOIS data align well with the business profile, indicating legitimacy and trustworthiness.

K

Kaap Doorn

kaapdoorn.com

41

Kaap Doorn is a well-established conference center and hotel located in the Netherlands, specializing in business meetings, training sessions, congresses, and multi-day events. The company operates under the umbrella of YMCA Nederland, emphasizing a sustainable and guest-focused approach. Their market position is strong within the hospitality sector for corporate clients, supported by certifications such as the Green Key and memberships in industry associations. The website reflects a professional and consistent brand image with clear service offerings and a focus on customer experience. Technically, the site is built on WordPress with modern plugins and tools, optimized for performance and multilingual support. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating high legitimacy.

T

The Engage Group

engagegroup.me

58

The Engage Group is a specialized employee communication and experience agency based in the Middle East, positioning itself as a market leader with a strong client portfolio including major international brands. Their services focus on internal communications, employee experience, corporate strategy, and related consulting services. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow CMS, Google Analytics, and Google Tag Manager. Security posture is good with HTTPS enforced and secure forms, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable due to privacy protection, which is common for agencies but slightly reduces transparency. Overall, the website presents a credible and trustworthy business presence with room for improvement in privacy compliance and security best practices.

E

Employera LLC

employera.com

51

Employera LLC is a specialized agency and consulting firm focused on employer branding, internal communications, recruitment marketing, and experience design to help companies and employees thrive. The company positions itself as a trusted partner for notable clients during periods of organizational change and growth, offering a collaborative, human-centered design approach. The website reflects a professional and consistent brand image with comprehensive service descriptions and client case studies. Technically, the site is built on WordPress using the Genesis Framework and Beaver Builder, with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Microsoft Clarity. The site is mobile-optimized and accessible, with good performance and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism aligned with GDPR requirements. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with no critical vulnerabilities or suspicious indicators.

S

SongDivision

songdivision.com

56

SongDivision is a specialized service provider offering innovative music-based team building and virtual event experiences designed to foster communication, connection, and collaboration within corporate teams. Their flexible programs cater to in-person, virtual, and hybrid teams, requiring no prior musical experience. The company appears to have a mature online presence with a domain registered since 2004, indicating established operations. Technically, the website is built on WordPress with modern plugins and tracking tools, including Google Analytics, Facebook Pixel, and Zoho SalesIQ, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is an area for improvement as no explicit privacy or cookie policies were found, which could expose the company to regulatory risks. Overall, the website is professional, trustworthy, and well-positioned in its niche, but should address privacy and security best practices to strengthen its risk profile.

S

Selerix Systems Inc.

selerix.com

59

Selerix Systems Inc. is a well-established provider of benefits administration software, founded in 2002 and headquartered in McKinney, Texas, USA. The company offers a comprehensive SaaS platform designed to simplify benefits administration, engage employees, and ensure compliance with healthcare regulations including ACA. Their market position is solid within the B2B technology and healthcare sectors, targeting employers, brokers, carriers, and resellers. The website reflects a professional and modern digital presence with strong SEO and mobile optimization, leveraging WordPress CMS and UIkit framework, hosted on AWS infrastructure. Security posture is robust with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms, although DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website and domain registration data indicate a trustworthy and credible business with good privacy compliance and marketing practices.

R

RADICL

radiclwork.com

62

RADICL is a technology company offering an AI-native platform designed to accelerate work impact for teams by enhancing clarity, capability, and connection. The company targets organizations seeking to improve employee experience and team productivity through AI-enabled software. The website is professionally designed using Squarespace and integrates marketing and analytics tools such as HubSpot and Google Tag Manager. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but missing several important security headers. Privacy compliance is limited, with no privacy policy or terms of service found, though a cookie consent banner is present. Contact information is not clearly provided, which impacts business credibility. Overall, the site presents a professional business offering but would benefit from improved transparency and security practices.

Discover Your Print offers PRINT®, a next-generation personal insights tool aimed at unlocking human potential for business results. The website is built on WordPress using the Avada theme and integrates Google Analytics and Tag Manager for user tracking. The technical infrastructure is moderate in performance with good mobile optimization but lacks advanced security headers and privacy compliance features. Security posture is basic with no visible security policies or incident response contacts. Overall, the site is professional but would benefit from enhanced privacy and security measures to improve trust and compliance.

P

Positive Foundry

positivefoundry.com

51

Positive Foundry is a specialized enterprise training company focused on improving employee well-being and organizational culture through science-backed, team-based training programs. The company appears to be a small but established player in the niche market of employee engagement and performance enhancement. The website is built on WordPress, hosted by SiteGround, and integrates marketing and analytics tools such as HubSpot and Google Analytics, indicating a moderate level of digital maturity. While the site is professionally designed and optimized for SEO and mobile use, it lacks critical privacy and cookie policies, which are essential for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled and domain registration protections in place, but could be improved by enabling DNSSEC and publishing security policies and incident response contacts. Overall, the site is legitimate and functional but would benefit from enhanced privacy compliance and security transparency.

K

Kudos Inc

kudos.com

73

Kudos Inc operates a sophisticated SaaS platform focused on employee recognition, rewards, and workplace culture enhancement. Positioned as a next-generation solution, Kudos offers a comprehensive suite of services including peer recognition, employee rewards, awards, milestones, and advanced people analytics. The platform targets businesses aiming to improve employee engagement, reduce turnover, and foster a positive culture. The website reflects a mature digital presence with modern technologies such as Webflow CMS, Google Tag Manager, and HubSpot forms, ensuring a seamless user experience and effective marketing analytics. From a security perspective, Kudos demonstrates strong commitment through SOC 2 Type II and ISO 27001 certifications, use of HTTPS, and implementation of Google reCAPTCHA to mitigate bot risks. Privacy compliance is robust with clear privacy and cookie policies, including GDPR adherence and consent mechanisms. However, there is room for improvement in security headers and publishing a vulnerability disclosure policy to enhance transparency and incident response readiness. Overall, the website is professionally designed, mobile-optimized, and content-rich, supporting high trustworthiness and business credibility. The absence of WHOIS data suggests domain privacy or registration nuances but does not detract from the legitimacy indicated by certifications and customer endorsements. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen security posture and trust.

H

Huler

huler.io

53

Huler is a technology company founded in 2020, offering a connected workplace platform that integrates digital work life tools, links, and media into a unified SaaS solution. The website positions Huler as a modern digital workplace platform targeting business professionals and organizations seeking productivity and integration solutions. Technically, the website is built on WordPress with popular plugins such as Yoast SEO and Elementor, hosted on Amazon AWS infrastructure, and employs modern analytics and marketing tools including Google Analytics, LinkedIn Insight, and Twitter tracking. The security posture is good with HTTPS enforced and use of Google reCAPTCHA, though it lacks explicit security headers and published security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the website is professional, well-branded, and trustworthy with moderate user tracking and good SEO optimization.

The website portal-vz.cz is an official government portal managed by the Ministry of Regional Development of the Czech Republic (Ministerstvo pro místní rozvoj ČR). It serves as a comprehensive resource for public procurement information, including legislation, methodologies, educational events, news, and links to related government systems. The portal targets public sector entities, suppliers, and stakeholders involved in public procurement processes within the Czech Republic. It holds a strong market position as the authoritative source for public procurement information in the country. Technically, the site is built on WordPress CMS version 5.3.2, utilizing common web technologies such as jQuery, FontAwesome, and Yoast SEO for optimization. The site is moderately performant, mobile-optimized, and includes basic accessibility features. Hosting and domain registration are consistent with the official government entity, with the domain registered since 2006, indicating a mature and stable online presence. From a security perspective, the site enforces HTTPS and uses some security-related plugins but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with a basic privacy/accessibility statement found but no cookie consent mechanism or GDPR-specific disclosures. Overall, the portal is a trustworthy, professional government resource with good content quality and business credibility. However, improvements in privacy compliance, security policy transparency, and accessibility would enhance its security posture and regulatory adherence.

ICT NWT s.r.o. is a medium-sized technology company based in the Czech Republic, specializing in IT technology supply, cloud solutions, data center services, and IT security. The company operates its own data center and maintains a strong partnership with Microsoft, positioning itself as a key player in the Czech IT market. Their service portfolio includes outsourcing, hardware and software supply, Microsoft Cloud and Azure services, modern workspace solutions, applications, trainings, and digitalization including IoT. The website reflects a professional and business-oriented approach with clear navigation and relevant content aimed at business clients. Technically, the website is built on WordPress using modern plugins such as Breakdance for design, Complianz for GDPR compliance, and Matomo and Google Analytics for user tracking. The hosting is managed by Webglobe, consistent with the domain registrar information. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security policy pages and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business profile, showing a domain age appropriate for the company's founding date in 2022. Overall, the website presents a trustworthy and professional image with good privacy compliance and moderate security posture. Strategic improvements could include publishing detailed security policies, incident response information, and enhancing security headers to further strengthen trust and compliance.

C

cloudtec AG

cloudtec.com

67

cloudtec AG is a Swiss-based technology company specializing in the development and operation of online platforms, web applications, and enterprise websites. Founded in 2008 and headquartered in Bern, the company serves a B2B audience with a focus on delivering reliable, secure, and scalable digital solutions. Their market position is strengthened by a strong Swiss client base and certifications such as Swiss Made Software. The website reflects a professional and modern digital presence with comprehensive service descriptions and customer success stories. Technically, cloudtec employs modern frameworks like Symfony and Sylius, containerization technologies such as Docker, and integrates video content via Wistia. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security posture is good with HTTPS enforced and domain transfer protections, though some security headers could be improved. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism via Cookiebot. Overall, cloudtec demonstrates a mature digital infrastructure and credible business presence.

S

Studium pro vás

studiumprovas.cz

44

Studium pro vás is an educational center affiliated with the Technical and Economic University in České Budějovice (VŠTE), offering a broad range of lifelong learning courses, professional qualifications, and language training tailored to current labor market trends. The website targets students, professionals, and older adults seeking continuing education. The business model focuses on providing accredited and interest-based courses, including specialized offerings such as 3D printing and technical German language courses. The organization positions itself as a regional leader in lifelong education with a clear focus on quality and relevance. Technically, the website is built on WordPress using modern plugins such as Elementor for page building, Yoast SEO for search optimization, and Complianz for GDPR cookie compliance. The site is mobile-optimized and uses Google Analytics for traffic analysis. The infrastructure appears standard for a small to medium educational institution, with moderate performance and good SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, with email addresses obfuscated to reduce spam. However, no advanced security headers were detected, and there is no public incident response or security policy documentation. The WHOIS data is unavailable, likely due to privacy protection, but the website's content and contact information indicate legitimacy and trustworthiness. Overall, Studium pro vás presents a professional and trustworthy online presence with good compliance to privacy regulations and a clear educational mission. Strategic improvements in security headers and public security policies would enhance its security posture and trust further.

M

Mikrobiologický ústav AV ČR, v. v. i.

mbucas.cz

46

Mikrobiologický ústav AV ČR, v. v. i. is the largest microbiological research institute in the Czech Republic, focusing on comprehensive study of microorganisms for both fundamental research and practical applications in industry, medicine, and other fields. The institute operates under the Czech Academy of Sciences and has a strong market position as a leading scientific entity with over 700 employees and numerous research projects. The website reflects a professional and well-maintained digital presence with multilingual support and active content updates. Technically, the website is built on WordPress CMS with modern technologies including jQuery, Rank Math SEO, and Google Tag Manager for analytics. It is optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security-wise, the site enforces HTTPS, obfuscates emails to prevent scraping, and implements cookie consent mechanisms, though it lacks explicit security headers and published security policies. The security posture is solid but could be improved by adding formal security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data due to privacy protection is typical for research institutions and does not detract from the site's legitimacy. Overall, the site is trustworthy, professionally managed, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding a vulnerability disclosure page to strengthen trust and compliance further.

S

Střední škola informatiky a právních studií, o.p.s.

stredniskola.cz

54

Střední škola informatiky a právních studií is a Czech secondary educational institution specializing in security/legal studies and information technology. Founded in 1993 and operating under official Czech Ministry of Education registration, it offers maturita-level education primarily in Bezpečnostně právní činnost. The website is professionally designed, content-rich, and targets prospective students and the local community. Technically, the site runs on WordPress with modern plugins and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or privacy issues were detected. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy institution.

D

Přehledné vzdělávání s rozhledem – putování-poznání-prožitek

dalekohled.cz

42

The website dalekohled.cz is an educational platform focused on providing clear and insightful learning experiences, including educational excursions and summer camps primarily targeting school-age children and educators in the Czech Republic. The site is built on WordPress using standard technologies such as Bootstrap and jQuery, offering a responsive and user-friendly interface. However, it lacks advanced SEO and accessibility features and does not implement structured data or Open Graph metadata. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are explicitly provided, limiting transparency and trust. No analytics or advertising scripts were detected, indicating minimal user tracking but also a lack of marketing tools. Overall, the website appears legitimate and consistent with its domain age and educational purpose. However, it would benefit from improved security practices, privacy compliance, and clearer contact information to enhance trustworthiness and user confidence.

P

Petr Syrný

kulturne.com

47

Kulturne.com is a well-established regional cultural media platform founded in 2008, focusing on cultural events and activities in South Bohemia, Czech Republic. It offers a comprehensive calendar of events, articles, photo reports, and promotional services for cultural happenings. The website is managed by Petr Syrný and maintains a consistent brand presence with active social media channels and newsletter subscriptions. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries, hosted by a reputable provider (WEDOS Internet, a.s.). Security posture is good with HTTPS enabled and partial security headers, though improvements such as DNSSEC and cookie consent mechanisms are recommended. The site is free from adult or explicit content and targets a general audience interested in culture and events. Overall, the platform demonstrates a solid business credibility and technical maturity suitable for its niche.