Security Directory

I

Instituto da Conservação da Natureza e das Florestas, I.P.

icnf.pt

54

The Instituto da Conservação da Natureza e das Florestas (ICNF) is a Portuguese governmental institute dedicated to the conservation of nature and forests. It serves as the national authority for environmental protection, forestry management, rural fire monitoring, and regulation of hunting and fishing activities. The website targets a broad audience including the general public, environmental professionals, and government stakeholders. It provides access to official information, geographic data services, and public support resources. The ICNF holds a strong market position as the authoritative body in its sector within Portugal. Technically, the website is built on AngularJS with supporting libraries such as jQuery and Progressbar.js. It uses modern web fonts and icons, and integrates Google Analytics for traffic monitoring. The site is mobile-optimized with a responsive design and clear navigation, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not display a cookie consent mechanism, which is important for GDPR compliance. There is no visible security policy or incident response contact information, and no vulnerability disclosure policy is published. These gaps represent areas for improvement to enhance the site's security posture and compliance. Overall, the website is professional, trustworthy, and serves its governmental function well. The domain registration aligns with the official nature of the organization, reinforcing legitimacy. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing privacy compliance to strengthen trust and security.

A

Agência Portuguesa do Ambiente

apambiente.pt

61

The Agência Portuguesa do Ambiente (APA) is the official Portuguese government agency responsible for implementing environmental policies in Portugal. The website serves as a comprehensive portal for environmental information, water resource management, licensing, and public engagement. It targets a broad audience including the general public, government entities, and environmental stakeholders. The APA holds a strong market position as the national authority on environmental matters, offering key services such as environmental monitoring, licensing, and education. The site is well-branded and professionally maintained, reflecting its authoritative status. Technically, the website is built on Drupal 10, leveraging modern web technologies and libraries such as Google Analytics for user behavior insights and CookiesJSR for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting details are not explicitly identified. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with anonymized IP tracking in Google Analytics, indicating a strong privacy posture. However, explicit security headers like X-Frame-Options and Content-Security-Policy are not clearly visible in the provided data, suggesting potential areas for enhancement. No vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response page is noted. Overall, the APA website is a secure, trustworthy, and professionally managed government portal with excellent content quality and privacy compliance. Strategic recommendations include enhancing security header implementation, publishing a security policy and incident response information, and considering a security.txt file for vulnerability disclosures to further strengthen trust and security posture.

I

Instituto Nacional de Estatística (Statistics Portugal)

ine.pt

73

Instituto Nacional de Estatística (Statistics Portugal) is the official national statistics authority of Portugal, providing comprehensive statistical data, publications, and demographic, economic, and social indicators. The website serves a broad audience including researchers, policymakers, government entities, and the general public. It operates as a governmental public service with a strong market position as the primary source of official statistics in Portugal. Key services include data dissemination, interactive applications, microdata access, and thematic studies. The site is well-branded, consistent, and includes trust signals such as ISO certifications and GDPR compliance. Technically, the website uses a mature but somewhat dated technology stack including jQuery 1.11.3 and Bootstrap 3.x, with custom scripts and Matomo analytics for user tracking. The site is mobile optimized, accessible, and SEO friendly, though some modernization opportunities exist. Performance is moderate, and the hosting provider is not explicitly identified. Security posture is strong with HTTPS enforced and ISO 27001 certification, but lacks explicit HTTP security headers and a published vulnerability disclosure policy. Overall, the security posture is robust with good privacy compliance and business credibility. No critical vulnerabilities or blocking mechanisms were detected. The domain WHOIS data aligns perfectly with the official entity, confirming legitimacy. The site includes cookie consent mechanisms and a comprehensive privacy policy, supporting GDPR compliance. Social media presence and multiple trusted external links enhance credibility and user engagement. The website is safe for general audiences, with no adult or questionable content. Recommendations include implementing security headers, publishing a security.txt file, and providing explicit incident response contacts to further enhance security and transparency.

2

2adapt

2adapt.pt

46

2adapt is a specialized company founded in 2017 in Portugal, focusing on climate risk assessment and adaptation services. Their offerings include technological solutions such as climate risk alert systems, soil moisture monitoring, geographic information analysis, and sustainability education. The company collaborates with municipalities and notable organizations like Deloitte and the European Space Agency, positioning itself as a niche player in the climate resilience sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of municipalities and environmental organizations. Technically, the site uses modern frameworks like Bootstrap and integrates analytics tools such as Google Analytics and Plausible. However, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and trust. The security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in policy transparency and incident response readiness. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

M

MARE - Centro de Ciências do Mar e do Ambiente

mare-centre.pt

59

MARE - Centro de Ciências do Mar e do Ambiente is a Portuguese national research center focused on marine and environmental sciences. It operates as a scientific research, technological development, and innovation hub with a broad territorial presence in Portugal. The center targets academic researchers, students, and environmental stakeholders, offering educational programs and engaging in collaborative projects with national and international partners. The website reflects a well-structured and professionally designed platform built on Drupal 7, featuring multilingual support and integration with social media and analytics tools. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent. Contact information is limited on the website, and no dedicated security or incident response policies are published. Overall, the site is trustworthy and serves its educational and research mission effectively.

U

Universidade de Lisboa

ulisboa.pt

62

Universidade de Lisboa is the largest Portuguese university and among the largest in Europe, offering a wide range of undergraduate and graduate programs, research initiatives, and international cooperation. The website reflects a mature digital presence built on Drupal CMS, with good mobile optimization, accessibility, and SEO practices. The site uses modern analytics tools such as Google Analytics and Tag Manager, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not published. WHOIS data confirms the legitimacy and consistency of the domain registration, matching the university's public identity. Overall, the website is professional, trustworthy, and well-maintained, serving a broad academic audience effectively.

C

Conselho Nacional do Ambiente e do Desenvolvimento Sustentável

cnads.pt

43

The Conselho Nacional do Ambiente e do Desenvolvimento Sustentável (CNADS) is a Portuguese national council dedicated to environmental and sustainable development advisory services. Established in 1997, it serves as a government-linked non-profit entity providing policy advice, reports, and organizing events related to sustainability. The website reflects a professional and consistent brand presence targeting government officials, environmental professionals, and the public interested in sustainability. Technically, the site is built on WordPress with the Avada theme, incorporating Google Analytics and translation tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and basic headers but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and well-positioned within its niche but could improve compliance and security transparency.

M

MoEngage

hashgrowth.org

66

MoEngage is a technology company specializing in customer engagement and marketing automation solutions. The company offers a comprehensive SaaS platform that includes push notifications, email campaigns, in-app messaging, web push, SMS marketing, and customer analytics. Positioned as an enterprise-grade solution, MoEngage targets businesses seeking to enhance customer retention and engagement through data-driven marketing strategies. The website content and branding are consistent with a professional B2B SaaS provider, supported by trust signals such as Gartner Peer Insights ratings and integration with HubSpot marketing tools. Technically, the website is built on HubSpot CMS and leverages a modern technology stack including Google Analytics 4, Facebook Pixel, LinkedIn Insight Tag, and other marketing and analytics tools. Hosting is provided via AWS infrastructure, and the site demonstrates good mobile optimization and moderate performance. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism implemented via OneTrust. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible advanced security headers and published security policies or incident response contacts. The domain is privacy protected via Domains By Proxy, which is justified for this business type. No WAF or blocking mechanisms were detected, and no vulnerabilities or suspicious patterns were found in the WHOIS or site content. Overall, the website presents a trustworthy and professional front for MoEngage, though the analyzed URL is a 404 error page, limiting content quality. Recommendations include enabling DNSSEC, publishing a security policy, and adding vulnerability disclosure information to enhance security posture and transparency.

C

CLIKT.com

clikt.com

64

CLIKT.com is a small business technology service provider specializing in digital marketing, social media, web design, AI, content management, and e-learning solutions. The company targets small businesses and technology users, leveraging open-source tools to keep costs down and adhering to industry standards. The website presents a professional image with a clear portfolio of client projects and a range of marketing and business tools integrated into its offerings. The domain is mature, registered since 2006, and hosted via GoDaddy, indicating a stable online presence. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, with integrations for Google Analytics and Google Tag Manager for tracking and marketing insights. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in performance and security hardening. The technical stack includes modern web technologies and third-party marketing tools, reflecting a moderate level of digital maturity. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security or incident response policies. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data is consistent and trustworthy, with no privacy protection masking the registrant information. Overall, the security posture is moderate but could be enhanced with better policy disclosures and technical controls. The overall risk assessment suggests a generally trustworthy and professional website with minor compliance and security gaps. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response information to improve trust and compliance.

A

Alibaba Cloud Computing (Beijing) Co., Ltd.

pifyapp.com

60

PifyApp operates as a Shopify app provider focused on enabling merchants to build customized Shopify stores. The website serves primarily as a demo store showcasing their customization capabilities, including announcement bars and form builders. The business targets Shopify store owners seeking enhanced store personalization and promotional tools. Technically, the site is built on the Shopify platform using standard Shopify Liquid templates, JavaScript, and third-party tools like PageFly for page building. Hosting is provided by Alibaba Cloud with DNS managed via Cloudflare, ensuring reliable infrastructure. Security posture is moderate with HTTPS enabled and use of hCaptcha for form protection; however, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the site is functional but basic in content and security maturity, suitable for a small e-commerce SaaS provider.

D

Datová kostka

dataovozidlech.cz

49

The website dataovozidlech.cz serves as an official portal providing access to vehicle registration data for the Czech Republic. It offers open data compliant with national legislation, vehicle technical information search, individual data issuance, and statistical summaries. The site is positioned as a government or government-affiliated service, targeting researchers, businesses, and the general public interested in vehicle data. The platform is moderately sized and founded in 2019, reflecting a stable operational history. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with deferred script loading to optimize performance. Hosting is provided by Active24, a known Czech hosting provider. The site is mobile-optimized with a clear and consistent branding approach. However, there is room for improvement in SEO, accessibility, and security headers implementation. From a security perspective, the site uses HTTPS (implied by domain and modern standards though SSL details are not explicit), but lacks visible security headers and formal privacy or cookie policies. No contact information for security incidents or data protection officers is provided, which limits transparency and compliance with GDPR best practices. No vulnerabilities or malicious content were detected. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user trust and regulatory adherence.

E

Elektromobilní platforma, z.s.

eplatforma.cz

59

The Czech E-mobility Platform is a non-profit technological platform dedicated to supporting the development of e-mobility, charging infrastructure, and related scientific research and education within the Czech Republic. It serves as a key partner to government ministries, coordinating legislative, communication, and educational efforts to advance the National Clean Mobility Action Plan. The platform's membership includes representatives from automotive, energy, scientific, research, and governmental sectors, positioning it as a central hub for electromobility initiatives in the country. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and Amazon Cloudfront CDN for hosting static assets. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with no significant technical issues detected. The site employs HTTPS with a strong SSL configuration, ensuring secure communications. From a security perspective, the site benefits from HTTPS and a cookie consent mechanism, but lacks visible security headers and published privacy or security policies. No contact information or incident response channels are provided, which limits transparency and user trust. The absence of WHOIS data reduces confidence in domain registration legitimacy, although the website content and hosting appear professional and consistent with the stated mission. Overall, the platform presents a credible and professional front for e-mobility development in the Czech Republic but would benefit from enhanced transparency through published privacy policies, contact information, and security best practices. Addressing these gaps would improve trustworthiness and compliance with data protection regulations.

E

EV FireSafe

evfiresafe.com

58

EV FireSafe is a small Australian-based educational resource focused on providing free electric vehicle fire safety knowledge targeted at emergency responders. The website is professionally designed using the Wix platform and offers relevant content to a niche audience in the energy and transportation sectors. The business model centers on information dissemination and education without evident commercial transactions. Technically, the site leverages Wix's infrastructure with standard JavaScript polyfills and is hosted securely with HTTPS enabled. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS but lacks advanced security headers and privacy compliance mechanisms. Overall, the site is functional and trustworthy in content but requires improvements in compliance and domain registration transparency.

C

CIMTO, s.r.o.

cimto.cz

47

CIMTO, s.r.o. is a Czech-based company specializing in testing and certification of transport packaging, including packaging for hazardous goods. The company operates an accredited laboratory authorized by the Czech Ministry of Transport, offering services such as UN code allocation, transport simulation, inspection of IBC containers, and consulting. Their market position is that of an independent, trusted certification body serving businesses requiring compliance with international transport regulations. The website is built using modern technologies like React and Gatsby, providing a fast and mobile-optimized user experience. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit privacy/security policies. Contact information and social media presence enhance business credibility. However, the absence of WHOIS data limits full trust verification. Overall, the site is professional and trustworthy for its niche audience.

T

Transport Research Centre (CDV)

avcrashes.net

51

The AV Crashes website is a specialized platform providing a unique database and visualization of autonomous vehicle crashes worldwide. It is developed and maintained by researchers at the Transport Research Centre (CDV), indicating a research-focused and authoritative source in the transportation technology sector. The platform targets researchers, policymakers, and the public interested in autonomous vehicle safety data, offering interactive maps and statistical insights. Technically, the site employs modern web technologies including React, Material-UI, Leaflet.js for mapping, and integrates Google Analytics for user metrics. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and CAPTCHA on its feedback form, but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trust slightly, but the affiliation with CDV and the professional presentation support its legitimacy. Overall, the site is a credible, well-structured resource with moderate technical maturity and some gaps in privacy compliance and security best practices.

C

Centrum dopravního výzkumu, v. v. i.

ceskovpohybu.cz

47

The website 'Česko v pohybu' represents a comprehensive national transport behavior survey conducted in the Czech Republic by the Centrum dopravního výzkumu in collaboration with a marketing agency and supported by the Ministry of Transport. It provides detailed data and interactive visualizations about travel patterns, transport means, and purposes, aimed at improving transport planning and investment decisions. The site is well-structured, content-rich, and professionally designed, targeting government agencies, researchers, and the public interested in transport data. Technically, the website is built using modern frameworks such as Gatsby and React, with embedded R Shiny applications for interactive data visualization. The site demonstrates good performance, mobile optimization, and accessibility. However, no explicit CMS or hosting provider information is available. Security practices include HTTPS and cookie consent mechanisms, but lack explicit security headers or published security policies. Security posture is moderate with no detected vulnerabilities or exposed sensitive data, but improvements are recommended in publishing security policies, incident response contacts, and vulnerability disclosure information. Privacy compliance is good, with a cookie consent banner and linked cookie policy, though no direct privacy policy page on the main domain was found. Business credibility is supported by government affiliation and transparent data sharing, though no direct contact emails or phone numbers are provided. Overall, the website is a trustworthy and valuable resource for transport data in the Czech Republic, with room for enhanced security transparency and contact information to improve trust and compliance.

C

Centrum dopravního výzkumu, v. v. i.

czrso.cz

48

The website 'Observatoř bezpečnosti silničního provozu' is a Czech Republic-based platform operated by the Centrum dopravního výzkumu, v. v. i., focused on providing comprehensive information and research data to improve road safety. It serves government bodies, local authorities, and traffic safety professionals by offering data, surveys, educational content, and strategic insights. The site is well-structured with clear navigation and professional design, supporting its role as an authoritative resource in the transportation safety sector. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for data visualization and user interaction. It uses Google Analytics and Tag Manager for traffic analysis and implements cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks explicit security headers such as CSP and HSTS, which are recommended to enhance protection. No WHOIS data was retrievable, which slightly impacts trust assessment, but the website's content and external references strongly indicate legitimacy. No adult or questionable content is present, making it safe for general audiences. Overall, the website demonstrates a solid business and technical foundation with moderate security posture. Strategic improvements in security headers, WHOIS transparency, and accessibility would further strengthen its trustworthiness and compliance.

C

Centrum dopravního výzkumu, v. v. i.

detivdoprave.cz

46

The website 'Děti v dopravě' is an educational platform operated by Centrum dopravního výzkumu, v. v. i., focused on providing traffic safety education materials primarily for children, parents, and educators in the Czech Republic. It offers certified methodologies and downloadable resources to support traffic education in kindergartens, primary, and secondary schools. The site holds accreditation from the Ministry of Education, which enhances its credibility and market position as a trusted educational resource. Technically, the website is built using modern web technologies including React and Gatsby, with Material-UI for styling. It is a statically generated site optimized for performance and mobile responsiveness, providing a good user experience and accessibility. The site implements cookie consent mechanisms aligned with GDPR requirements, though no explicit privacy policy page was found on the main domain; instead, a related domain hosts the cookie policy. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and formal security policies or incident response contacts. No vulnerabilities or tracking scripts were detected in the analyzed content, indicating a low-risk profile. However, the absence of WHOIS data reduces transparency and slightly impacts trustworthiness. Overall, the website is a well-structured, professional educational resource with strong content quality and compliance with privacy norms. The main risk lies in the lack of publicly available domain registration data and limited explicit contact information, which could be improved to enhance trust and security posture.

C

Centrum dopravního výzkumu, v. v. i.

autonomne.cz

55

The website autonomne.cz serves as an informational platform focused on autonomous vehicles, their testing, safety, and operation primarily within the Czech Republic. It is supported and funded by the Ministry of Transport and the Centre for Transport Research (Centrum dopravního výzkumu, v. v. i.), positioning it as a credible source in the transportation research sector. The site provides news, articles, event information, and FAQs targeting both the general public and professionals interested in autonomous mobility advancements. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, Google Fonts, and lightGallery.js, with a responsive design optimized for mobile devices. The site uses Google Analytics and Google Tag Manager for visitor tracking and marketing insights, complemented by a cookie consent mechanism that aligns with GDPR requirements. However, no CMS or hosting provider details are evident, and some modern security headers appear to be missing. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain reduces trust from a registration standpoint, but the strong affiliation with official Czech transport institutions and professional presentation mitigate this concern. Overall, autonomne.cz is a well-structured, informative, and trustworthy website within its niche. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and verifying domain registration details to improve trustworthiness further.

C

Centrum dopravního výzkumu, v. v. i.

vyzkumnehod.cz

44

The website represents Centrum dopravního výzkumu, a Czech research institute specializing in in-depth analysis of traffic accidents primarily in the South Moravian region. The organization provides expert research services focusing on traffic safety, human factors, and infrastructure analysis. Their work supports public and private stakeholders including road managers and vehicle manufacturers. The site is well-structured, professionally designed, and targets both experts and the general public interested in traffic safety. Technically, the website is built on a modern React and Gatsby framework with Material-UI components, ensuring good performance, mobile optimization, and accessibility. The site uses HTTPS and implements a cookie consent mechanism, reflecting awareness of privacy regulations. However, no advanced security headers or incident response information are published. From a security perspective, the site is secure with HTTPS but lacks some best practices such as security headers and published security policies. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the website content and contact details suggest a legitimate entity. No signs of malware or phishing were detected. Overall, the website is a credible and professional platform for traffic accident research with good technical implementation and privacy compliance. Strategic improvements in security documentation and domain registration transparency are recommended to enhance trust and compliance.

G

Green NCAP

greenncap.com

55

Green NCAP is a consortium-driven platform providing independent and official environmental assessments of new vehicles, focusing on how green cars are through star ratings and life cycle assessments. The website serves consumers, automotive industry stakeholders, and environmental organizations by offering detailed vehicle ratings, award recognitions, and educational content. Technically, the site is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, and uses Matomo for analytics and Google reCAPTCHA v3 for form security. The site is well-structured, mobile-optimized, and SEO-friendly, with comprehensive privacy and cookie policies indicating GDPR compliance. Security posture is good with HTTPS and anti-bot measures, though explicit security policies and incident response information are absent. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the professional content and consistent branding support legitimacy. Overall, the site is a reliable resource for green vehicle information with moderate technical maturity and a solid security baseline.

E

Euro NCAP

euroncap.com

70

Euro NCAP is a leading European organization dedicated to providing consumer information on the safety of new cars through comprehensive crash testing and safety ratings. The website serves as a trusted resource for consumers, automotive professionals, and safety engineers, offering detailed safety assessments, assisted driving gradings, and safety campaign information. The organization positions itself as a key authority in automotive safety within Europe, supporting safer vehicle design and consumer awareness. Technically, the website employs modern web technologies including AngularJS and jQuery, with integration of multiple analytics platforms such as Google Analytics, Matomo, and Microsoft Application Insights. The site is mobile optimized, well-structured, and demonstrates good SEO and accessibility practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses secure analytics scripts but lacks explicit security headers and published incident response policies. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and branding appear professional and trustworthy. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Overall, the website presents a strong business and technical profile with minor security and transparency gaps. Strategic improvements in security headers, incident response disclosure, and WHOIS transparency would further strengthen its security posture and trustworthiness.

S

Spirii

spirii.com

68

Spirii is a Denmark-based company specializing in EV charging solutions and eMobility business platforms. Their offerings include a Charge Point Management System, an EV charging app, and a suite of services such as branded solutions, financial services, grid services, and operational support. The company operates across multiple European countries with dedicated offices and subsidiaries, positioning itself as an experienced and reliable player in the eMobility sector. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for privacy compliance, delivering a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, but the presence of VAT registration and detailed business information supports the company's credibility. Overall, Spirii presents a professional and trustworthy digital presence with room for improvement in transparency around security policies and domain registration details.

The website crashday.cz represents a small academic research team from the Institute of Forensic Engineering at Brno University of Technology, specializing in traffic accident analysis and automotive crash testing. The site serves as an informational platform showcasing their work and research activities. The technical infrastructure is based on a modern WordPress CMS with standard plugins and themes, hosted by WEDOS, a Czech hosting provider. The site is accessible via HTTPS with a valid SSL certificate, ensuring secure communication. However, the site lacks critical privacy and cookie policies, as well as explicit contact information, which limits its compliance with GDPR and general privacy best practices. Security posture is moderate with room for improvement in security headers and incident response disclosures. Overall, the site is professionally presented but minimalistic in content and compliance documentation.

The website evozero.com represents a pioneering product initiative by Heidelberg Materials, focusing on the world's first carbon captured net-zero cement. The business is positioned as an industry innovator in sustainable construction materials, leveraging carbon capture and storage technology to reduce CO₂ emissions significantly. The target audience includes construction partners committed to sustainability and environmental responsibility. The site provides rich multimedia content, product brochures, and detailed information about the Brevik CCS project, reinforcing its market leadership in decarbonizing cement production. From a technical perspective, the website is built using modern web technologies including Nuxt.js and Tailwind CSS, ensuring fast performance, excellent mobile optimization, and good accessibility. The site employs HTTPS with strong security headers, indicating a solid security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response information are not published, which could be improved. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Despite this, the website content and branding strongly associate with Heidelberg Materials, a reputable multinational company, lending credibility to the site. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a high level of professionalism, security, and compliance, with room for improvement in transparency of security policies and domain registration details.

H

Heidelberg Materials

quarrylifeaward.cz

64

Quarry Life Award is a scientific and educational competition organized by Heidelberg Materials to promote biodiversity awareness in mining sites. The website is professionally designed using Drupal CMS and modern frontend technologies, providing rich content primarily in Czech. Contact information and privacy policies are clearly presented, supporting GDPR compliance. Security posture is good with HTTPS enforced, though some security headers are missing and no incident response info is provided. The absence of WHOIS data raises questions about domain registration legitimacy, but the strong branding and partner associations mitigate concerns. Overall, the site is trustworthy and well-maintained for its educational purpose.

H

Heidelberg Materials

heidelbergmaterials.com

77

Heidelberg Materials is a global leader in the manufacturing and supply of building materials including cement, aggregates, ready-mixed concrete, and asphalt. The company emphasizes sustainability and digital innovation as core pillars of its business strategy, targeting construction industry professionals, investors, and sustainability stakeholders worldwide. The website reflects a mature digital presence built on Drupal 10, with excellent design, mobile optimization, and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is unusual for a large enterprise and warrants further verification. Overall, the website presents a professional, trustworthy, and comprehensive corporate presence.

S

Savage

verysavage.com

58

Savage is a small, professional branding and digital design collective founded in 2019, offering services including branding, illustration, UI design, and video production. The company targets ambitious companies globally and maintains a strong portfolio with external links to Behance and social media profiles. Technically, the website uses modern front-end technologies such as Bootstrap 5, jQuery, Firebase, and Google Analytics, delivering a responsive and visually engaging user experience. Security posture is moderate with HTTPS implied but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.

D

Delta AG

delta.at

52

Delta AG operates as a comprehensive service provider in the construction sector, offering architecture, general planning, construction management, green building, and IT services primarily in Austria. The company positions itself as a trusted partner for building projects, with a professional and consistent online presence targeting business clients in the real estate and construction industries. The website is built on WordPress with modern SEO and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site demonstrates good compliance with GDPR and marketing transparency, but lacks visible direct contact information and formal security policies. The domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

N

Národná diaľničná spoločnosť

ndsas.sk

50

Národná diaľničná spoločnosť, a.s. is the national highway company of Slovakia responsible for the preparation, construction, maintenance, and tolling of highways. The website reflects a well-established government entity with a clear market position as the primary operator of the Slovak highway network. Key services include electronic vignette sales, electronic toll collection, traffic information, and motorway patrol services. The company targets motorists, transport companies, and public authorities within Slovakia. The digital infrastructure employs modern web technologies such as jQuery, Bootstrap, and Matomo analytics, ensuring a responsive and accessible user experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

J

Józsefvárosi Önkormányzat

jozsefvaros.hu

54

The website 'jozsefvaros.hu' serves as the official online presence of the Józsefváros local government in Hungary, providing informational content primarily targeted at residents and citizens of the district. The site is built on WordPress CMS and employs common web technologies such as jQuery, Bootstrap, and FontAwesome, indicating a standard but functional technical infrastructure. The content quality is basic, focusing on public announcements and community services without commercial elements. Security posture is moderate with HTTPS enabled but lacking important security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are explicitly provided, limiting user engagement and trust in security matters. Overall, the site is legitimate and consistent with its governmental role but would benefit from enhanced privacy compliance and security best practices.

T

The Sigrid Rausing Trust

sigrid-rausing-trust.org

62

The Sigrid Rausing Trust is a well-established philanthropic grant-making foundation based in London, founded in 1995. It focuses on supporting human rights, open societies, and environmental causes globally. The website reflects a professional and consistent brand image, targeting non-profit organizations and social causes. The Trust operates with a significant endowment and a clear mission to fund impactful programs. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Tag Manager, and cookie consent tools, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response policies are absent. WHOIS data is privacy protected, which is typical and justified for this type of organization. Overall, the website is trustworthy, compliant with privacy regulations, and professionally maintained.

K

Kingdom of the Netherlands

netherlandsandyou.nl

62

The website 'Netherlands and you' serves as an official government platform representing the Kingdom of the Netherlands. It aims to connect international partners with the Netherlands by providing information on diplomatic relations, permanent representations, business support, and cultural engagement. The site targets international audiences including businesses and governmental partners, positioning itself as a trusted source of official information. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript frameworks such as React and Alloy UI. The infrastructure supports responsive design and accessibility features, ensuring a good user experience across devices. Performance is moderate with a well-structured navigation system. From a security perspective, the site enforces HTTPS and employs secure cookies, but lacks visible security headers and publicly available security policies. No vulnerabilities or exposed sensitive data were detected. However, the absence of privacy and cookie policies, as well as contact information, indicates gaps in privacy compliance and user transparency. Overall, the website is professional and trustworthy, consistent with its government affiliation. Strategic improvements include publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear contact channels for security incidents and user inquiries.

P

Porticus Amsterdam C.V.

porticus.com

66

Porticus Amsterdam C.V. is a well-established philanthropic organization founded in 1996, focused on creating a just and sustainable future where human dignity flourishes. The organization operates globally with a network of offices and partners, emphasizing social and environmental impact through grant-making and community resilience programs. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation aimed at partners, NGOs, and the public interested in social change. Technically, the website is built on modern frameworks such as Next.js and React, with Umbraco CMS managing content. It employs Matomo analytics, indicating a privacy-conscious approach to user tracking. The site is mobile-optimized and accessible, with good SEO practices and performance. From a security perspective, the site enforces HTTPS, includes standard security headers, and has a domain registration consistent with the organization's profile. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website presents a low-risk profile with strong privacy compliance and business credibility. Strategic improvements could include publishing security policies and enabling DNSSEC to further strengthen security posture.

M

MagNet Bank Zrt.

magnetbank.hu

72

MagNet Bank Zrt. is a Hungarian financial institution providing a broad range of banking services including retail and corporate accounts, loans, deposits, and digital banking solutions. The bank emphasizes community banking and sustainable finance, targeting individuals, companies, and nonprofit organizations. The website reflects a medium-sized bank with a solid market position in Hungary, offering comprehensive services and community-oriented programs. Technically, the website uses modern JavaScript frameworks like Vue.js and integrates popular analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security-wise, the site enforces HTTPS, employs multiple security headers, and integrates recaptcha for form protection, indicating a strong security posture. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with GDPR and other relevant regulations.

N

Norvég Civil Támogatási Alap

norvegcivilalap.hu

51

The website norvegcivilalap.hu represents the Norwegian Civil Support Fund, a non-profit organization supporting civil society projects in Hungary since 2008. The site provides information about grant programs, supported projects, news, and events, targeting Hungarian NGOs and civil society stakeholders. The business model is focused on grant-making and community support, positioning itself as a key player in the Hungarian non-profit sector with a consistent brand presence and historical content.

Ö

Ökotárs Alapítvány

civiljogok.hu

42

The Civil Jogok website is operated by the Ökotárs Foundation, a Hungarian non-profit organization dedicated to improving the legal framework and operational environment for civil society organizations. The site provides legal research, advocacy materials, and practical guidance aimed at civil organizations and policymakers. It has a clear focus on transparency, cooperation, and reform within the civil sector. Technically, the site is built on Drupal CMS with standard web technologies including jQuery and Google Tag Manager for analytics. While the site is functional and content-rich, it lacks some modern security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The contact information is clearly presented, and the domain age and WHOIS data support the legitimacy of the organization.

R

Reclaim Our Civil Space

civilspace.eu

48

The website 'Reclaim Our Civil Space' is a non-profit advocacy platform focused on empowering and supporting civil society organizations in Central and South-eastern Europe. It operates as a regional network addressing democratic backsliding and shrinking civic space, collaborating with partners across multiple countries. The site is built on Drupal 9 and employs Google Tag Manager for analytics, indicating a moderate level of digital maturity. The content is well-structured, mobile-optimized, and accessible, targeting NGOs, activists, and the general public interested in civil rights and democracy. However, the absence of explicit privacy, cookie, and security policies, as well as lack of direct contact information, limits its compliance and trustworthiness aspects. Security headers and incident response details are also missing, which could expose the site to risks. Overall, the site is functional and professional but requires improvements in privacy compliance and security posture to enhance trust and resilience.

K

Közös Értékeink Program

kozosertekeink.hu

49

The Közös Értékeink Program website serves as an informational and support platform for a Hungarian non-profit initiative funded by the European Union. It focuses on supporting civil organizations that promote fundamental rights and values within the EU framework. The site is built on Drupal 10, employs modern web technologies, and provides a good user experience with mobile optimization and accessibility features. While the site lacks direct contact information and dedicated security or terms pages, it maintains a moderate security posture with HTTPS and cookie consent mechanisms. The domain registration aligns well with the program's recent launch, and partner organizations add credibility. Overall, the website is professional, trustworthy, and serves its target audience effectively.

A

Asitis

asitisready.com

56

Asitis is a newly established consulting company specializing in climate change adaptation and mitigation, targeting firms, municipalities, and other entities primarily in the energy sector. The company leverages a team of experienced experts and modern technologies to prepare clients for climate change impacts. The website is professionally designed using WordPress with modern tools and demonstrates good digital maturity with SEO and analytics integrations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and DNSSEC are missing. No critical vulnerabilities or exposed sensitive data were found. Overall, the site reflects a trustworthy and professional business presence with room for enhanced security policies and incident response information.

I

Ing. Karel Melecký

karelmelecky.cz

44

Ing. Karel Melecký operates a professional website offering senior UX/UI design, SEO copywriting, and consultation services primarily targeting businesses and teams in need of content and design expertise. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. The technical infrastructure is based on WordPress with common plugins such as Yoast SEO and Contact Form 7, hosted likely via Czech providers consistent with the domain registrar data. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates a high level of professionalism and trustworthiness with clear contact information and client testimonials. No critical security or compliance issues were detected.

Ž

Židovská obec v Praze

kehilaprag.cz

59

Židovská obec v Praze (ŽOP) is a well-established non-profit organization serving the Jewish community in Prague. It focuses on religious, cultural, social, and health services for its members and the wider community. The website reflects a community-oriented mission with detailed information about departments, events, partners, and services. The organization maintains partnerships with reputable international and local entities, enhancing its credibility and outreach. Technically, the website uses a moderate modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA for security on forms. The site is mobile-optimized with good navigation and content quality. However, there is room for improvement in accessibility and SEO optimization. The absence of a CMS identification suggests a custom or less common platform. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a cookie consent banner but no clear privacy policy or terms of service pages. WHOIS data is missing, which reduces domain trust assessment but the website content and contact information appear legitimate. Overall, the site is a credible digital presence for a community organization but should enhance transparency and security practices to improve trust and compliance.

S

Sportity OÜ

sportity.com

63

Sportity OÜ is a small Estonian technology company specializing in IT solutions for sports events and organizations. Their offerings include a digital infoboard app and a comprehensive accreditation system designed to streamline event management and communication. The company targets sport events, organizations, and clubs, positioning itself as a niche provider with notable clients in international sports federations. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on the Tilda CMS platform, uses modern analytics tools, and is hosted behind Cloudflare DNS, ensuring good performance and security basics. However, the absence of privacy and terms of service policies indicates compliance gaps. Security posture is solid with HTTPS and secure domain registration but lacks advanced security headers and published security policies. Overall, the website is trustworthy and functional but could improve privacy compliance and security transparency.

L

LogWork

logwork.com

62

LogWork is a mature SaaS company specializing in time tracking and employee monitoring software designed for teams and remote workers. Their platform offers multi-platform desktop applications for Windows and Mac, mobile-friendly apps, and extensive integrations with popular productivity tools. The website is professionally designed, well-branded, and provides clear information about their services and features, targeting businesses seeking productivity and time management solutions. Technically, the website uses modern web technologies including jQuery and Bootstrap, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks visible security headers and explicit incident response policies. Privacy compliance is partially met with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the website is trustworthy and functional with room for security and privacy improvements.

P

Pardini USA LLC

pardiniguns.com

55

Pardini USA LLC operates as the US importer and supporter of Pardini Armi, a manufacturer specializing in high-quality sports firearms used in international competitions such as ISSF World Championships and the Olympics. The company targets competitive shooters and firearm enthusiasts, offering a range of pistols, rifles, accessories, and training services. The website is professionally designed using WordPress, featuring detailed product information, technical articles, and customer testimonials, supporting a niche market position in competitive shooting sports. Technically, the website employs a standard WordPress CMS with the Twenty Seventeen theme and uses jQuery and Everest Forms for functionality. Google Tag Manager is integrated for analytics. The site is HTTPS secured, though it lacks some advanced security headers and cookie consent mechanisms. Performance and mobile optimization are adequate, with good SEO and accessibility basics. Security posture is moderate with HTTPS enforced and no visible vulnerabilities, but improvements are recommended in security headers and privacy compliance. The absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, despite the professional appearance and clear contact information. No incident response or vulnerability disclosure information is provided. Overall, the website presents a credible business front with solid content and technical implementation but should address domain registration transparency and enhance security and privacy compliance to improve trust and reduce risk.

Pardini is a firearms manufacturer with a presence in Italy and the United States, operating through Pardini Armi Srl and Pardini USA LLC respectively. The company targets shooting sports enthusiasts and dealers, offering manufacturing and distribution services. The website is professionally branded and provides clear contact information but lacks comprehensive privacy and security policies. Technically, the site uses standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with basic mobile optimization and moderate performance. Security measures are minimal, with no HTTPS verification visible in the data and no security headers detected, though email obfuscation is implemented. The absence of WHOIS registration data for the domain www.pardini.com raises concerns about domain legitimacy, despite the professional appearance of the site. Overall, the site is functional but requires improvements in security, privacy compliance, and domain registration verification.

zeroheight is a mature SaaS company founded in 2015 that provides a centralized platform for design system documentation and collaboration, targeting design, engineering, product, and marketing teams. The company is well-positioned in the technology sector with a strong market presence, evidenced by trusted clients such as Adobe, Uber, and Guardian. Their platform integrates with popular design and development tools, offering automation, governance, and community engagement features. Technically, the website is built on WordPress hosted on AWS, leveraging modern analytics and marketing technologies with proper consent mechanisms. The site is fast, mobile-optimized, and SEO-friendly, reflecting a high level of digital maturity. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be enhanced. Privacy compliance is strong with clear policies and cookie consent. Overall, zeroheight demonstrates a professional, trustworthy online presence with extensive resources and community support.

V

VisionSpace Intelligent Systems UG

karel.ai

62

VisionSpace Intelligent Systems UG operates the website karel.ai, offering an AI-powered conversational assistant named Karel designed to support operations of complex and critical systems. The assistant provides functionalities such as answering operational questions, predictive analytics, task automation, explainable AI reasoning, skill teaching via API, and team collaboration. The company is positioned as a niche technology provider with backing from the European Space Agency incubation program and EU funding, targeting operators and managers in aerospace and industrial sectors. The website is professionally designed, mobile-optimized, and includes EU trust signals, but lacks explicit security and incident response policies. The technical infrastructure leverages modern front-end technologies including Bootstrap, jQuery, FontAwesome, and Google Analytics, with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS implied and cookie consent implemented, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the website and business present a credible and professional front with room for enhanced security transparency and compliance documentation.

L

LANaaS by Wavecom

lanaas.pt

50

LANaaS by Wavecom offers a managed LAN as a Service solution targeting corporate clients in Portugal. Their service includes switching, firewall security, and Wi-Fi infrastructure with 24/7 monitoring and support, enabling businesses to flexibly scale their network infrastructure. The website is built on WordPress with modern plugins and SEO tools, reflecting a professional digital presence. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and privacy policies are missing. Tracking technologies like Google Analytics and LinkedIn Insight are used moderately. Overall, the website is trustworthy and well-positioned in the technology sector, but could improve privacy compliance and contact transparency.

A

ABNT

abntcatalogo.com.br

54

ABNT Catalogo is a professional e-commerce platform operated by ABNT, the Brazilian Association of Technical Standards, providing access to Brazilian technical standards, certifications, and related educational resources. The platform targets businesses and professionals requiring official standards for compliance and quality assurance. The website is well-branded, consistent, and offers a good user experience with clear navigation and mobile optimization. It integrates Google Analytics for user tracking and provides contact information including email and phone support. Technically, the site is built on a mature ASP.NET WebForms framework with Telerik UI components, indicating a stable but somewhat legacy infrastructure. Performance is moderate with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced but lacks some advanced security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the security posture is solid but could be improved by implementing additional security headers and cookie consent mechanisms. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. No critical vulnerabilities or suspicious patterns were detected, and the content is safe for general audiences.