Security Directory

C

Centribal

centribal.com

64

Centribal is a technology company specializing in AI-driven chatbot and virtual assistant platforms designed to enhance customer and employee experiences through conversational AI and omnichannel engagement. Founded in 2020, the company offers a SaaS platform that integrates generative AI and supports multiple communication channels such as WhatsApp, Instagram, email, SMS, push notifications, and voice. Their market position is that of a specialized provider with a medium-sized footprint and a portfolio of notable clients, emphasizing scalability, customization, and rapid deployment. Technically, the website is built on WordPress with modern SEO practices using Yoast SEO and jQuery libraries. The platform mentions Kubernetes for scalable deployments, indicating a mature technical infrastructure. The site is mobile-optimized and performs moderately well, with good accessibility and SEO optimization. Hosting and domain registration are managed through IONOS SE, with DNS servers provided by UI-DNS. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and some recommended security headers. No explicit security or incident response policies are published, and no cookie consent mechanism is present, which may affect GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, Centribal presents a professional and trustworthy online presence with solid business credibility and technical implementation. Strategic improvements include enhancing privacy compliance with cookie consent, enabling DNSSEC, and publishing security policies to strengthen trust and regulatory adherence.

C

Captain Up

captainup.com

62

Captain Up is a technology company specializing in gamification and loyalty platforms tailored for the sports betting, casino, iGaming, and e-commerce industries. With over a decade of experience, the company offers a cloud-based SaaS platform that enhances customer engagement and retention through behavioral economics, game mechanics, and personalized rewards. Their market position is supported by notable partnerships and certifications such as ISO 27001 and ISO 27017, underscoring their commitment to security and compliance. Technically, the website is built on modern frameworks including Webflow CMS, Google Tag Manager, and Cloudflare DNS, delivering a fast and mobile-optimized user experience. The platform integrates advanced features like real-time analytics, communication tools, and gamified modules such as tournaments and prize drops. However, there is room for improvement in security headers and explicit privacy mechanisms. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA on forms, and displays relevant certifications, indicating a mature security posture. The WHOIS data corroborates the legitimacy and consistency of the domain registration with the business claims. No critical vulnerabilities or suspicious patterns were detected. Overall, Captain Up presents a professional, trustworthy, and technically sound online presence with a strong focus on customer engagement solutions. Strategic enhancements in privacy compliance and security headers would further strengthen their digital maturity and trustworthiness.

G

GetSocial, S.A.

getsocial.io

68

GetSocial, S.A. operates a SaaS platform specializing in Dark Social Analytics and Social Automation, enabling marketers and publishers to track and optimize content sharing across private channels. The company is positioned as a niche player in social media analytics with a focus on uncovering hidden sharing patterns to maximize ROI. The website reflects a professional and consistent brand image targeting agencies, brands, publishers, and e-commerce businesses. Technically, the site uses modern web technologies including Google Analytics, Facebook Pixel, Intercom, and Bootstrap, hosted via Gandi SAS. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS and domain transfer protections, but lacks some security headers and explicit security policies. Privacy compliance is partial with a clear privacy policy but no cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trust.

S

Smarty.cz

smarty.cz

54

Smarty.cz is a prominent Czech retailer specializing in smart electronics, gaming products, and accessories. The company operates both an e-commerce platform and multiple physical stores across the Czech Republic, offering services such as device servicing, buyback, and express delivery. Their market position is strong within the Czech retail sector for technology and gaming products, targeting consumers interested in the latest electronics and gaming gear. The website is professionally designed, mobile-optimized, and provides a rich user experience with clear navigation and comprehensive product offerings. Technically, Smarty.cz employs modern web technologies including HTML5, CSS3, JavaScript, and utilizes third-party services like Google Tag Manager and Startquestion widgets for analytics and customer engagement. The site demonstrates good performance and accessibility standards, with secure HTTPS connections and appropriate security headers in place. From a security perspective, the website shows a solid posture with HTTPS enforcement and secure form handling. However, there is a lack of publicly available security policies, incident response information, and vulnerability disclosure programs, which are areas for improvement. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, though the business presence and content quality support legitimacy. Overall, Smarty.cz presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing transparency around security policies, publishing incident response and vulnerability disclosure information, and improving WHOIS data availability to bolster trust and compliance.

ShareDefender.com is a newly established digital security service provider focused on protecting sensitive data and systems, particularly in the cryptocurrency sector. The website presents a basic informational page describing their customizable security license and proactive defense technologies. The business targets both individuals and companies seeking enhanced digital asset protection. Technically, the site is built using a simple hosting page builder with standard HTML and CSS, hosted by Infomaniak Network SA. There is no evidence of advanced frameworks or CMS platforms. Security posture is minimal with no DNSSEC, no security headers, and no visible HTTPS enforcement details. Privacy and cookie policies are absent, and no contact information or forms are provided, limiting user engagement and compliance. The domain registration is recent but consistent with the business launch timeline, registered with a reputable registrar and hosting provider. Overall, the website is functional but basic, with significant room for improvement in security, compliance, and content depth.

S

SHEAN s.r.o.

omnix.cz

58

Omnix.cz is a Czech-based technology company operated by SHEAN s.r.o., providing an integrated CMS and e-commerce platform tailored for businesses seeking unified web content management and online sales solutions. The platform emphasizes system integrations, multilingual content, configurators, and automation to serve a diverse client base with over 170 e-shop solutions and 200 web presentations. Technically, the website employs modern web technologies including HTTPS, Google Tag Manager, and reCAPTCHA, ensuring a secure and user-friendly experience. However, the absence of WHOIS data and explicit security policies slightly diminishes trustworthiness. Overall, the site is professional, well-structured, and compliant with GDPR, though improvements in security transparency and WHOIS data availability are recommended.

B

Bidding Fox technologies, s.r.o.

bidding-fox.cz

59

Bidding Fox technologies, s.r.o. operates the website bidding-fox.cz, providing an automated bidding solution for e-commerce platforms Heureka.cz, Heureka.sk, and Zboží.cz. The company offers a SaaS product integrated with the Mergado platform, targeting e-shops seeking to optimize their paid product listings. The website is professionally designed, content-rich, and includes certified marketing partners, enhancing its market credibility. Technically, the site uses Drupal CMS with modern libraries such as jQuery and Bootstrap, and integrates analytics and marketing tools like Google Analytics, Facebook Pixel, and MailerLite. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies are missing. The absence of WHOIS data and privacy policy pages slightly reduce trust but do not critically impair the site's legitimacy. Overall, the site is well-positioned in the Czech e-commerce technology sector with a clear business model and active digital presence.

A

ABRA Software

flexibee.eu

73

ABRA Software operates a professional website promoting ABRA Flexi, a cloud-based accounting software designed for modern businesses. The company targets businesses seeking automation and API integration in their accounting processes, positioning itself as a modern, technology-driven software provider in the Czech Republic. The website is built on WordPress using the Kadence theme and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and consent management. While the site is well-designed and optimized for SEO, it lacks explicit privacy policy and contact information on the analyzed page, which are important for compliance and user trust. The domain is privacy protected under EURid, which is common for .eu domains, and no suspicious patterns were detected in the WHOIS data. Overall, the site demonstrates a good level of digital maturity and business credibility.

S

Shean s.r.o.

exportpilots.cz

58

Export Pilots, operated by Shean s.r.o., is a Czech-based consultancy specializing in assisting businesses with international expansion, particularly for web and e-commerce platforms. The company offers a comprehensive suite of services including market analysis, brand building, localization, marketing, and legal consulting to facilitate successful entry into foreign markets. Their market position is supported by over 100 clients and a strong partnership ecosystem, including parent company SHEAN s.r.o. and Limetis. The website reflects a professional and trustworthy business with clear contact information and client testimonials. Technically, the website is built on Webflow, leveraging modern web technologies such as Google Tag Manager, Google Analytics, and Smartsupp live chat. The site is well-optimized for performance, mobile responsiveness, and SEO. Security measures include HTTPS enforcement, security headers, CAPTCHA integration, and a GDPR-compliant cookie consent mechanism, indicating a mature digital infrastructure. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain reduces trustworthiness and suggests a need for further verification of domain registration legitimacy. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a low-risk profile with good security hygiene. Recommendations include publishing explicit security policies, incident response procedures, and vulnerability disclosure information to enhance transparency and trust. Implementing a security.txt file and continuing regular audits of third-party scripts will further strengthen security posture.

S

Sdružení dopravních podniků ČR

sdp-cr.cz

48

Sdružení dopravních podniků ČR is a well-established association founded in 1992, representing the largest public transport companies in Czech cities. The organization coordinates 22 major transport operators, including tram and trolleybus services, collectively transporting over 2.6 billion passengers annually. The website reflects a professional and consistent brand presence with active news updates and event calendars, targeting transport companies, partners, and the general public interested in Czech public transportation. Technically, the website uses a modern tech stack including Bootstrap 4, Font Awesome, Swiper.js, Owl Carousel, and Google Tag Manager, built on the niCMS platform. The site is mobile-optimized with good SEO practices and a cookie consent mechanism, though it lacks a published privacy policy and terms of service pages. Performance is moderate, and accessibility is basic. From a security perspective, HTTPS is enforced, and cookie consent is implemented, but security headers and incident response information are missing. The WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional site and active content. No vulnerabilities or suspicious content were detected. Overall, the site is credible and trustworthy with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing privacy and security policies, adding security headers, and providing incident response contacts to enhance trust and compliance.

National Medical Supplies is a South African-based supplier and manufacturer of premium medical devices and equipment serving the African continent. Established in 2006, the company positions itself as a leader in quality and innovation within the healthcare sector. Their website reflects a professional business with clear contact information, social media presence, and an emphasis on quality management aligned with ISO13485 standards. The business model focuses on supplying and manufacturing medical products with a target audience of healthcare providers and related stakeholders in Africa. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins such as Yoast SEO and Contact Form 7. The site demonstrates moderate performance and good mobile optimization, with SEO best practices implemented. Hosting is provided by xneelo (Pty) Ltd, a reputable South African hosting provider. However, some technical improvements could be made, such as enabling DNSSEC and adding security headers to enhance security posture. From a security perspective, the site uses HTTPS and restricts physical and data access as per its Quality Policy. However, the absence of DNSSEC, security headers, and a vulnerability disclosure policy indicates room for improvement. No incident response contacts or security.txt files are present. Privacy compliance is weak due to the lack of privacy and cookie policies, which is a notable gap given GDPR and other regulations. Overall, the website is trustworthy and professional but would benefit from enhanced security measures and privacy compliance to reduce risk and improve user trust. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing a formal vulnerability disclosure process.

O

Ophthalmic Product Supplier

amarak-distribution.com

46

Amarak Medicals is a specialized ophthalmic product supplier operating primarily in the UAE market. The company offers a broad range of ophthalmology equipment, consumables, and clinical materials targeting optical clinics and hospitals. Their website reflects a professional presence with a clear focus on ophthalmology supplies and services, positioning them as a regional leader in this niche healthcare sector. The business model is B2B, focusing on supplying medical equipment and consumables to healthcare providers. Technically, the website is built on WordPress with WooCommerce, leveraging popular plugins like WPBakery and Slider Revolution for content management and presentation. Hosting is provided by HOSTINGER operations, UAB, a reputable hosting provider. The website is moderately optimized for mobile and SEO, with good design and navigation clarity. Security-wise, the site uses HTTPS and has domain transfer protection, but lacks advanced security headers and published security or privacy policies, which are areas for improvement. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and security practices.

S

Simovision BV

simovision.com

47

Simovision BV is a Belgium-based company specializing in ophthalmology innovation, providing surgical products and capital equipment primarily to eye care professionals in Belgium and the Netherlands. The company operates a professional, multi-language website built on SilverStripe CMS, featuring a comprehensive product catalog, support tools, and customer service resources. The website demonstrates good content quality, clear navigation, and consistent branding aligned with its healthcare industry focus. Technically, the site uses modern front-end libraries and integrates analytics and marketing tools such as Google Analytics and HubSpot, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is addressed with a cookie consent banner and privacy policy, though no dedicated security or incident response policies are published. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is professional and trustworthy with room for security enhancements.

V

Vertek

vertek.com.br

54

Vertek is a Brazilian company specializing in ophthalmological and veterinary products, targeting healthcare and veterinary professionals. The website is built using modern web technologies including React and Next.js, and incorporates Google Tag Manager for analytics. The site is accessible and mobile-optimized with a clean design, but contains minimal textual content and lacks key compliance documents such as privacy and cookie policies. Security posture is basic with no detected security headers or incident response information, and no contact details are provided on the homepage. Overall, the website presents a professional but minimal online presence with room for improvement in compliance and security transparency.

S

Salient Medical

salientmed.com

47

Salient Medical Solutions is a Canadian-based distributor specializing in advanced medical technologies and skincare products across multiple healthcare sectors including vision, aesthetics, skin science, wellness, and orthopedics. The company positions itself as a leader in providing world-class medical devices and clinical support to Canadian healthcare providers, emphasizing flexible payment plans and comprehensive customer service. Their digital presence is built on a WordPress platform with modern frontend technologies and integrated marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. The absence of WHOIS data is unusual but the website content and business information appear legitimate and professional. Overall, the site demonstrates strong business credibility and technical implementation with room for enhanced security practices.

М

Медична компанія «Медікус»

medicus.ua

43

Медична компанія «Медікус» є провідним українським постачальником офтальмологічного обладнання, фармацевтичної продукції та мережі аптек, що працює з 1992 року. Компанія обслуговує медичні заклади, офтальмологів та кінцевих споживачів, пропонуючи широкий асортимент обладнання від світових виробників, фармацевтичні продукти та авторизований сервіс. Вебсайт демонструє професійний підхід з чіткою структурою, сучасним дизайном та інтеграцією WooCommerce для електронної комерції.

J

JS VISION

jsvision.com

48

JS VISION is a well-established medical devices importer and distributor with a strong presence in Thailand's healthcare logistics sector. The company boasts nearly three decades of operation, a broad partner network, and a significant volume of sold products. Their website reflects a professional business model focused on healthcare providers and institutions, offering importation, distribution, warehousing, and delivery services. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance transparency.

S

Loading... Please wait

sterilmedic.com

43

The website sterilmedic.com currently presents as a minimal placeholder or loading page with no accessible business content, contact information, or policies. The only metadata indicates copyright by Nixser Technology from 2020, and the site uses the Nuxt.js framework. The domain is registered since 2015 with consistent WHOIS data, suggesting a legitimate registration but the website itself lacks meaningful content or user engagement features. Technically, the site uses modern JavaScript frameworks but suffers from poor SEO, accessibility, and performance indicators due to incomplete content. Security posture is weak with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site appears underdeveloped or blocked, limiting trust and business credibility.

PT. Surgika Alkesindo is a well-established Indonesian company specializing in the distribution of high-quality local and international medical devices. Founded in 1996 and headquartered in Jakarta, the company operates with over 600 employees and multiple branch offices nationwide. Their website reflects a professional presence with detailed information about their business sectors, including surgery, ICU equipment, orthopedic devices, and more. The company targets hospitals, clinics, and healthcare providers across Indonesia, positioning itself as a leading medical device distributor with a strong market presence and multiple awards. Technically, the website uses modern web technologies such as Bootstrap and Revolution Slider, providing a good user experience with mobile optimization and clear navigation. However, there is room for improvement in accessibility and SEO optimization. Security-wise, the domain is stable and not privacy protected, but lacks DNSSEC and security headers, which are recommended to enhance protection. The absence of privacy and cookie policies indicates compliance gaps that should be addressed. Overall, the website is trustworthy and professional but could benefit from enhanced security and privacy compliance measures.

A

ALCYON ITALIA

alcyonitalia.com

52

Alcyon Italia is a specialized veterinary company operating an e-commerce platform tailored for veterinary professionals in Italy. The company offers a broad range of veterinary products, including consumables, equipment, pharmaceuticals, and software solutions such as dr.veto. The website reflects a medium-sized business with a clear focus on the veterinary healthcare sector, supported by ISO 9001 certification and comprehensive contact information. Technically, the site is built on PrestaShop with modern web technologies and provides a good user experience with mobile optimization and clear navigation. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though improvements are recommended in security headers and incident response transparency. The absence of WHOIS data is a notable risk factor affecting domain legitimacy and trust. Overall, the site is professional and trustworthy but would benefit from enhanced security practices and clearer domain registration transparency.

C

Compagnia Italiana Oftalmologica S.c.a.r.l.

cioitalia.com

46

Compagnia Italiana Oftalmologica (C.I.O.) is a small-sized Italian company specializing in the distribution of ophthalmologic products and equipment. Established in 2003, the company operates primarily in the healthcare sector, targeting ophthalmologists and eye care professionals. Their website presents basic information about their services, brands, and distributors, with a focus on regional market presence in Italy. The business model centers on product distribution and brand representation within the ophthalmology field. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery, Modernizr, Bootstrap, and CKEditor. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. There is no evidence of modern frameworks or platforms, and no structured data markup is present. From a security perspective, the website lacks visible HTTPS enforcement confirmation and security headers, and DNSSEC is not enabled for the domain. No explicit security or incident response policies are published. Privacy compliance is minimal, with only a basic privacy policy PDF linked and no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but basic, with moderate trustworthiness and some security and privacy gaps. Strategic improvements in security posture, privacy compliance, and technical modernization would enhance the company's digital maturity and risk profile.

GASPERO, zastopanje in inženiring, d.o.o. is a small Slovenian company specializing in medical and laboratory equipment, project planning, and healthcare aids. The company has an established domain since 2004, indicating a stable presence in the healthcare sector. The website currently displays minimal content as it is under renovation, limiting the digital maturity and user engagement. Technical infrastructure is basic, relying on simple HTML and CSS without modern frameworks or CMS. Security posture is weak with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present, which impacts compliance and trust. Overall, the website requires significant improvements in content, security, and user experience to better reflect the company's business and ensure regulatory compliance.

優

優視德股份有限公司

coneyecrystal.com.tw

44

優視德股份有限公司 is a Taiwan-based company specializing in the supply and distribution of high-quality ophthalmic microsurgical instruments and related medical equipment. The company targets ophthalmic surgeons and healthcare providers, offering a range of products including intraocular lenses, ophthalmic and dental equipment, surgical instruments, and consumables. Their website is bilingual (Traditional Chinese and English) and provides detailed product information, event news, and contact details, positioning them as a specialized supplier in the healthcare sector within Taiwan and Asia. Technically, the website employs common JavaScript libraries such as jQuery, Modernizr, WOW.js, and Slick Carousel, alongside Google Analytics for user tracking. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, it lacks advanced CMS indicators and detailed hosting information. From a security perspective, the website uses HTTPS as implied by Open Graph tags but lacks visible HTTP security headers and cookie consent mechanisms. No explicit security or incident response policies are published, and no vulnerability disclosure or data protection officer information is available. The use of Google Analytics indicates moderate user tracking without clear privacy compliance beyond a basic privacy policy. Overall, the website is functional, professional, and trustworthy for its business domain but would benefit from enhanced security practices, privacy compliance improvements, and clearer incident response information to strengthen its security posture and regulatory adherence.

S

SurgiVision

surgivision.com.au

56

SurgiVision is a specialized supplier of ophthalmic equipment and instruments serving healthcare professionals primarily in Australia and New Zealand. With over 20 years of industry experience, the company offers a broad portfolio of products including intraocular lenses, surgical instruments, and consumables from reputable brands. The website reflects a professional B2B business model focused on quality and trusted partnerships. Technically, the site is built on WordPress using the Divi theme and includes common plugins for SEO and forms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, representing areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its niche but should enhance compliance and security measures to reduce risk and improve user trust.

S

Spectrum Ophthalmics

spectrum-uk.co.uk

63

Spectrum Ophthalmics is a UK-based supplier specializing in ophthalmology equipment, targeting healthcare professionals and clinics in the UK and Ireland. The company positions itself as a leading provider of advanced ophthalmic technology and solutions. The website reflects a professional and focused business model centered on healthcare equipment supply. Technically, the website is built on WordPress 6.0.1, utilizing modern analytics and marketing tools such as Google Analytics, Hotjar, and Cookiebot for cookie consent management. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, but lacks visible security headers and explicit security policies, which are recommended for improvement. The WHOIS data for the domain is unavailable due to a domain registration error indicating the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy. Overall, the website is professional and safe, but the domain registration inconsistency should be addressed to enhance trust and credibility.

The website at tehnooptics.com/lander is currently a minimal landing or parking page with very limited content and no visible business information. The domain is registered with GoDaddy.com, LLC since 2007, indicating a long-standing registration, but the website itself does not provide any substantive information about the business, services, or contact details. The technical infrastructure includes JavaScript loading from external sources such as Google Adsense and wsimg.com, with a landing system identified as PW Lander. There is no evidence of a CMS or advanced frameworks beyond this minimal setup. Security posture is weak due to lack of DNSSEC, absence of security headers, and no visible privacy or cookie policies. No forms or user input fields are present, reducing attack surface but also indicating no active user engagement. Overall, the site appears to be a placeholder or parked domain rather than an active business website.

O

Oertli Ophthalmedic Schweiz AG

oertli-ophthalmedic.ch

51

Oertli Ophthalmedic Schweiz AG is a Swiss-based medical technology company specializing in ophthalmology and ophthalmic surgery products and services. As a 100% subsidiary of Oertli Instrumente AG, it serves as a competence and distribution platform offering eye surgery essentials, personalized consulting, technical support, and training for eye care professionals. The company positions itself as a trusted partner in the Swiss ophthalmology market with a focus on quality and innovation. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site is built on TYPO3 CMS using modern frameworks and includes privacy-conscious analytics and cookie consent mechanisms. Security posture is good with HTTPS and some security best practices, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is well-structured, user-friendly, and compliant with GDPR requirements, supporting the company's credibility and trustworthiness in the healthcare sector.

Polytech Domilens is a German-based company positioned as the largest independent provider of ophthalmological devices and equipment in Germany. The website presents a professional image with a clear focus on healthcare professionals in ophthalmology, offering a broad range of products and consultation services. The business model centers on distribution and support within the ophthalmology sector, targeting medical professionals and clinics. The company leverages modern digital tools such as WordPress CMS, Yoast SEO, and Cookiebot for compliance and marketing purposes, indicating a moderate level of digital maturity.

L

LightVision

lightvisionmx.com

45

LightVision operates an e-commerce platform specializing in ophthalmological products, targeting medical professionals and clinics in Mexico. The website offers a range of specialized medical supplies including intraocular lenses, surgical blades, and injectors, positioning itself as a niche supplier in the healthcare sector. The business model focuses on retail sales through an online store built on WordPress and WooCommerce, supported by various page builder plugins to enhance user experience. The company maintains active social media profiles and provides clear contact information, enhancing its market presence and customer engagement. Technically, the website leverages a mature CMS ecosystem with WordPress and WooCommerce, incorporating popular plugins such as Elementor and Live Composer. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO features are basic. The absence of advanced security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The site is accessible without WAF or security challenges, allowing full content analysis. From a security perspective, the site uses HTTPS but lacks critical security headers like Content-Security-Policy and HSTS, which could expose it to certain web-based attacks. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a privacy policy page present but no cookie consent banner or GDPR indicators. WHOIS data for the subdomain is unavailable, which is typical for subdomains, but this limits domain registration trust analysis. Overall, the site shows a moderate security posture suitable for a small healthcare e-commerce business but would benefit from enhanced security controls. The overall risk assessment suggests the business is legitimate and operational with moderate trustworthiness. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, and maintaining up-to-date software to mitigate vulnerabilities. Enhancing privacy compliance and transparency will also improve customer trust and regulatory adherence.

The website www.careaccess.eu is currently displaying a maintenance placeholder page with minimal content and no active business information. The site uses WordPress CMS with jQuery and Bootstrap libraries but lacks essential elements such as privacy policies, contact details, and security headers. The absence of HTTPS and security best practices indicates a low security posture. The domain WHOIS data is not publicly available, suggesting privacy protection, but no registrant or business information can be verified. Overall, the site appears inactive or under development, limiting its credibility and trustworthiness.

M

Medicontur Medical Engineering Ltd

smladvisor.com

43

Medicontur Medical Engineering Ltd operates the SML Advisor website as a multilingual portal for its medical engineering products and services. The company is established since 1989 and targets healthcare professionals with specialized tools and resources. The website is built using Angular 2.4.4 and offers basic content and navigation with links to the main corporate site and legal pages. Technical infrastructure is moderate with room for improvement in mobile optimization and SEO. Security posture is average, with no DNSSEC enabled and lack of security headers, but domain registration is consistent and legitimate. Privacy compliance is limited due to absence of cookie consent mechanisms. Overall, the site is functional but basic in design and security.

1

1stQ

1stq.de

49

1stQ is a specialized healthcare company focused on intraocular lenses (IOL) and innovations in lens surgery. Positioned as a leading specialist in IOL solutions, the company targets healthcare professionals and clinics in Germany. The website reflects a professional and consistent brand image with good content quality and clear messaging about their services and expertise in the healthcare sector. Technically, the site is built on WordPress with modern SEO and multilingual capabilities, hosted on German infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit privacy and terms of service policies are missing, which impacts compliance completeness. Overall, the site is trustworthy and well-maintained but could improve transparency and compliance documentation.

Medicontur Medical Engineering Ltd operates a specialized website offering a Toric IOL Calculator tool aimed at ophthalmologists and eye care professionals involved in cataract surgery. The business is positioned as a niche provider of medical engineering solutions with a focus on intraocular lens optimization. The website content is professional, medically relevant, and targeted to a specialized audience, reflecting a small-sized healthcare company founded in 1989 with a domain registered since 2010. The technical infrastructure leverages AngularJS framework with Bootstrap for styling and includes Google Analytics for user tracking. The website demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. No CMS or hosting provider details are explicitly identified. From a security perspective, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. There is no visible security policy or incident response information published, and no cookie consent mechanism is present, indicating partial GDPR compliance. The WHOIS data is transparent and consistent with the business history, supporting legitimacy. Overall, the security posture is moderate but could be improved with enhanced DNS security, security headers, and published policies. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in security policies, privacy compliance, and technical hardening would enhance trust and compliance. The website is safe for general audiences with no adult or questionable content detected.

U

UASNL

uasnl.eu

42

UASNL is a European network representing Dutch Universities of Applied Sciences, focusing on applied research and innovation to address regional and global challenges. The organization operates as a non-profit entity advocating for the interests of applied sciences universities in Europe. Their website reflects a professional and consistent brand image, targeting policy makers, entrepreneurs, citizens, and industry leaders interested in applied research collaborations and innovation. Technically, the website is built on WordPress with modern technologies including jQuery, Modernizr, and the Yoast SEO plugin. It uses HTTPS with a good SSL configuration and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS but lacks some security headers and cookie consent mechanisms, which are recommended for full compliance with EU privacy regulations. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected by EURid, which is common for .eu domains and justified for this type of organization. Overall, the website demonstrates a solid security posture with room for improvement in privacy compliance and security policy transparency. The overall risk is low, with recommendations to enhance privacy compliance by implementing cookie consent, publishing terms of service, and adding security headers. These steps will improve trust and regulatory adherence, supporting the organization's credibility and operational security.

U

U!REKA, European University Alliance

ureka.eu

49

U!REKA is a European University Alliance comprising over 30 higher education institutions and partners focused on educating future professionals to lead the transition to climate-neutral, smart, and sustainable cities. The alliance offers collaborative education, research, staff training, and organizes events and workshops to foster innovation and sustainability in European cities. The website positions U!REKA as a significant player in European higher education collaboration with a large network of partners and a strong focus on sustainability and innovation. Technically, the website is built on WordPress using modern plugins such as Elementor and The Events Calendar, with Google Tag Manager integrated for analytics. The site demonstrates good SEO practices, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. Hosting and domain registration are consistent with the business profile, and the site uses HTTPS with no visible security vulnerabilities. From a security perspective, the site employs HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies and incident response information, which could be improved. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. The site collects minimal user data primarily through newsletter subscription forms and event registrations. Overall, U!REKA's website is professional, trustworthy, and well-structured, supporting its mission as a European university alliance. Strategic recommendations include enhancing security transparency, formalizing incident response contacts, and optimizing analytics configuration to improve privacy compliance and security posture.

H

Hogeschool van Amsterdam

hva.nl

70

Hogeschool van Amsterdam (HvA) is a prominent university of applied sciences in the Netherlands, offering a wide range of higher professional education programs including bachelors, masters, associate degrees, and research opportunities. The website clearly targets prospective students, researchers, and professionals interested in education and research in Amsterdam. The institution emphasizes practical and societal impact through its educational and research activities. Technically, the website is built on modern frameworks such as Next.js and integrates third-party services like Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response information are not publicly detailed. Overall, the website reflects a mature digital presence consistent with a large educational institution, with high trustworthiness and compliance with privacy regulations.

The website navdmp.com is currently inaccessible due to a security or WAF blocking mechanism, presenting an 'Access Denied' page with minimal content. This prevents extraction of any meaningful business, technical, or security information from the site itself. The domain is registered with GoDaddy.com, LLC since 2011, indicating a stable and moderately aged domain, but no registrant organization details or privacy protection are present. The site appears to be hosted behind Akamai's CDN or security services, as indicated by the nameservers and error references. Due to the blocked content, no privacy, cookie, or terms of service policies are detectable, nor any contact or security incident response information. The lack of accessible content results in a very low AI score and an inability to assess the website's technical maturity or security posture comprehensively.

V

VELUX Group

velux.com

71

The VELUX Group website represents a well-established global manufacturer specializing in roof windows, sun tunnels, blinds, and shutters designed to improve indoor environments with natural light and fresh air. The company targets homeowners, builders, architects, and commercial building professionals, emphasizing sustainability and healthy building practices. The website is professionally designed with clear navigation, mobile optimization, and comprehensive content that supports the brand's market position as a leader in daylight solutions. Technically, the site leverages a mature technology stack including ASP.NET CMS, jQuery, Font Awesome, and integrates multiple marketing and analytics tools such as Google Tag Manager, Cookiebot, Hotjar, and Visual Website Optimizer. The presence of cookie consent mechanisms and privacy policies indicates a strong commitment to privacy compliance, including GDPR adherence. Performance is moderate with good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforced and use of CSRF tokens, though explicit security headers are not clearly visible in the HTML source. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is missing or unavailable, which reduces domain transparency and trust slightly, but the overall website and business indicators suggest legitimacy. Overall, the website is secure, privacy-conscious, and professionally maintained, supporting a reputable global manufacturing business. Strategic improvements include enhancing security headers and verifying domain registration details for improved trust.

A

ActivIT, s.r.o.

activit.sk

50

ActivIT, s.r.o. is a Slovak technology company with over 25 years of experience specializing in custom development of web and mobile applications, e-commerce platforms, and web presentations. The company serves a diverse client base including notable enterprises and organizations, positioning itself as a reliable partner for digital transformation projects. Their website reflects a professional and consistent brand image with a clear focus on technology services tailored to business needs. Technically, the site is built on Drupal 7 with a variety of JavaScript libraries enhancing user experience, although the CMS version is approaching end-of-life, which poses security risks. The company demonstrates good privacy compliance with GDPR-aligned cookie consent mechanisms and a comprehensive privacy policy. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content.

A

Asociácia hotelov a reštaurácií Slovenska

zhrsr.sk

55

Asociácia hotelov a reštaurácií Slovenska is a Slovak national association representing hotels and restaurants. The website serves as an informational platform targeting hospitality industry professionals in Slovakia, providing advocacy and industry representation. The business operates as a small-sized association founded in 2018, with a clear focus on the hospitality sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted on Delnet servers. The site is mobile-optimized and implements a cookie consent mechanism via Cookiebot, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and published security policies indicates room for improvement. Privacy compliance is partial, with cookie consent present but lacking a dedicated privacy policy or terms of service. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

P

Plyo.com

plyo.com

61

Plyo.com is a well-established Norwegian company founded in 2004, specializing in digital solutions for the real estate market. Their platform offers immersive products such as 3D property exploration, photorealistic visuals, advanced sales websites, and listing portals tailored for real estate developers and home buyers. Positioned as a preferred supplier among leading developers, Plyo.com demonstrates a strong market presence in the real estate technology sector. Technically, the website is built on modern frameworks like Next.js and leverages cloud services such as Cloudinary and Google Tag Manager, ensuring fast performance and mobile optimization. Security-wise, the site enforces HTTPS, employs standard security headers, and integrates a GDPR-compliant cookie consent mechanism, although DNSSEC is not enabled. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with clear contact channels and social media presence. Strategic recommendations include enabling DNSSEC, publishing explicit security policies, and adding a vulnerability disclosure channel to enhance security transparency.

T

TÜV Saarland

tuev-saar.de

54

TÜV Saarland is a well-established German organization with over 150 years of history, specializing in safety, quality, certification, and consulting services. The company operates a comprehensive portfolio including accredited certifications (ISO standards and automotive industry standards), training and seminars, information security consulting, real estate valuation, vehicle inspections, and environmental and occupational safety. It is part of a larger corporate group with multiple subsidiaries and partner companies, reflecting a strong market position in the certification and consulting industry. Technically, the website is built on a modern WordPress platform with Bootstrap and jQuery, enhanced by SEO and performance plugins such as Rank Math and WP Rocket. The site is mobile-optimized, accessible, and well-structured, providing a professional user experience. Security measures include HTTPS enforcement and Captcha protection on forms, though some security headers and incident response information are not explicitly present. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with a comprehensive privacy policy and GDPR adherence, but lacks a cookie consent mechanism. The domain and WHOIS data show no suspicious patterns, though registrant details are minimal. Overall, the website is trustworthy, professional, and aligned with industry best practices. Strategic recommendations include implementing cookie consent, adding security headers, publishing incident response contacts, and maintaining regular security audits to enhance compliance and trust.

TÜVIT is a reputable IT security certification and testing company operating under the TÜV NORD GROUP umbrella. The company offers a broad range of services including cyber security, hardware and software evaluation, information security management, and data protection. Their market position is strong in Germany and internationally, supported by recognized certifications and a professional digital presence. The website is well-structured, multilingual, and designed with modern web technologies, reflecting a mature digital infrastructure. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms implemented. No critical vulnerabilities or suspicious activities were detected. Overall, TÜVIT demonstrates a high level of professionalism and trustworthiness in the IT security domain.

D

Doctolib Siilo

siilo.com

83

Doctolib Siilo operates a secure medical messaging platform tailored for healthcare professionals, enabling confidential communication and patient data sharing within medical teams. The platform positions itself as a free, secure solution in the healthcare communication niche, supported by the parent company Doctolib. The website content is professionally presented, targeting healthcare providers and organizations, with a clear emphasis on security and privacy compliance. Technically, the site employs modern JavaScript libraries such as Alpine.js, integrates Matomo for analytics, and uses Cookiebot for GDPR-compliant cookie management. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and provides a detailed cookie consent mechanism, though it lacks explicit security headers and a public vulnerability disclosure policy. The absence of WHOIS data limits domain trust verification, but the overall site professionalism and privacy compliance indicate a mature security posture. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving transparency around security certifications. Overall, the site presents a solid, trustworthy platform for healthcare communication with room for security and compliance enhancements.

Q

Quarkslab

quarksflow.io

55

Quarkslab is a cybersecurity company specializing in software protection, data protection, and security audit consulting services. The company targets technology professionals and enterprises seeking advanced security solutions. Their market position is that of a specialized cybersecurity provider with a focus on innovation protection, data security, and IoT lifecycle security. The website is built on WordPress with Elementor and integrates modern analytics and consent management tools, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS and cookie consent mechanisms in place, but lacks explicit privacy policies and security headers. The absence of WHOIS data for the domain raises some concerns about domain registration transparency. Overall, the website is professional but the missing page and lack of some compliance documents suggest room for improvement.

D

Doctolib

doctolib.com

66

Doctolib is a leading European healthcare technology company specializing in online appointment booking and teleconsultation services. The platform serves patients and healthcare professionals primarily in France, Germany, and Italy, offering a seamless way to find specialists and manage medical appointments. The company also provides professional management software for healthcare providers, enhancing operational efficiency. The website reflects a mature digital presence with comprehensive legal, privacy, and user support documentation, reinforcing trust and compliance with GDPR regulations. Technically, the website employs modern web technologies including React, Sentry for error tracking, Datadog for real user monitoring, and advanced consent management via Didomi. The infrastructure leverages Cloudflare services for security and performance, with strong SSL/TLS configurations and security headers implemented. The site is mobile-optimized and accessible, providing a fast and user-friendly experience. From a security perspective, Doctolib demonstrates robust practices such as HTTPS enforcement, cookie security with SameSite and Partitioned flags, and CAPTCHA integration to mitigate abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data limits full domain legitimacy verification, though the overall trust signals and professional branding mitigate this concern. Overall, Doctolib presents a secure, compliant, and professionally managed online platform with strong market positioning in healthcare technology. Strategic recommendations include enhancing transparency with a published security.txt file and continuous monitoring of third-party dependencies to maintain security posture.

D

Doctolib

doctolib.fr

66

Doctolib is a leading healthcare technology company based in France, providing an online platform for patients to quickly find healthcare specialists and book appointments online. The platform also offers teleconsultation services and practice management software for healthcare professionals, positioning itself as a key player in the European healthcare digital transformation. The website is professionally designed, highly accessible, and optimized for mobile users, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as React, integrates advanced monitoring tools like Sentry and Datadog, and employs robust consent management via Didomi, indicating a strong commitment to performance and privacy compliance. Security posture is solid with HTTPS enforcement, secure cookie handling, and anti-abuse captchas, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain and website exhibit high legitimacy and trustworthiness, with no signs of blocking or suspicious activity. Strategic recommendations include publishing detailed security and vulnerability disclosure policies and enhancing transparency around data protection officer contacts to further strengthen compliance and trust.

D

Doctolib

doctolib.legal

66

Doctolib is a leading French healthcare technology company specializing in online appointment booking and telehealth services. The platform enables patients to find healthcare professionals and book appointments easily, supporting a broad range of medical specialties. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy information, reflecting a mature digital presence. Technically, Doctolib employs modern web technologies including React, Sentry for error tracking, Datadog for performance monitoring, and robust consent management tools to ensure GDPR compliance. Security posture is strong with HTTPS enforcement and modern security headers, though no explicit incident response or vulnerability disclosure policies are publicly available. Overall, Doctolib demonstrates a high level of digital maturity and trustworthiness appropriate for a healthcare service provider.

K

Kofola a. s.

kofola.sk

52

Kofola a. s. is a well-established beverage company operating primarily in Slovakia, producing soft drinks and tonics with a focus on quality and lifestyle branding. The company maintains a strong market presence supported by active marketing campaigns, event sponsorships, and a consistent brand image. Their website reflects a professional digital presence with good content quality and user experience, targeting general consumers interested in beverages and lifestyle content. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, CSRF tokens, and no visible vulnerabilities, though the absence of publicly available privacy and security policies limits full compliance transparency. Overall, the domain registration and business information are consistent and trustworthy, supporting the legitimacy of the company and its online presence.

B

Big & BIGGER s.r.o.

bigeron.com

58

Big & BIGGER s.r.o. operates the Bigeron platform, providing cloud-based online reservation and property management solutions tailored for the hospitality industry in Slovakia. Their offerings include booking engines, PMS systems, CRM client zones, and marketing services, targeting hotels, guesthouses, cottages, and apartments. The website presents a professional and consistent brand image with clear service descriptions and client references, positioning the company as a niche technology provider in the Slovak hospitality sector. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries for UI enhancements and analytics integration with Google Analytics and Tag Manager. The site is mobile-optimized with good navigation and content structure, though some SEO and accessibility features could be improved. Security-wise, HTTPS is implied but no explicit security headers were detected, and no cookie consent mechanism is present, indicating room for compliance enhancements. The WHOIS data is notably missing or inaccessible, which raises concerns about domain registration legitimacy despite the active and professional website presence. No security blocking or WAF challenges were detected, allowing full content access. Overall, the site is functional and business-focused but would benefit from improved transparency and security practices. Strategic recommendations include implementing comprehensive security headers, adding cookie consent for GDPR compliance, clarifying domain registration details, and enhancing privacy and incident response disclosures to strengthen trust and compliance.