Security Directory

Rouse International Limited is a well-established UK-based global leader in intellectual property consultancy and enforcement, operating since 1990 with a network of over 750 professionals across 17 offices in 12 jurisdictions. Their services span trademarks, patents, copyrights, designs, brand protection, and dispute resolution, targeting businesses requiring comprehensive IP solutions worldwide. The website reflects a mature digital presence with professional design, clear navigation, and compliance with privacy regulations including GDPR and cookie consent mechanisms. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Cookiebot, hosted on Azure infrastructure, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS, CSRF protections, and bot mitigation via hCaptcha, though improvements in security headers and published policies are recommended. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

B

Bi-silque

bisilque.com

76

Bi-silque is a company focused on providing communication solutions, as indicated by their website's description 'Helping People Communicate.' The website presents a professional and consistent brand image, targeting a general audience interested in assistive communication technologies. The company appears to operate in a niche communication solutions market, likely serving both business and consumer segments. Technically, the website is built on WordPress with modern libraries such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. The presence of Google Analytics and Tag Manager indicates a moderate level of digital maturity in tracking user interactions. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, demonstrating awareness of privacy regulations. However, the lack of visible privacy policies, terms of service, and WHOIS registration data introduces concerns about transparency and legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security disclosures.

DMG Office is a UK-based B2B company specializing in office supplies and comprehensive workplace services. The company positions itself as a trusted partner to leading UK businesses, offering a broad range of services from office supplies and print services to furniture and hydration solutions. Their website reflects a professional and modern digital presence, leveraging multimedia content and clear navigation to engage their target audience effectively. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries, ensuring a responsive and interactive user experience. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and GDPR-compliant cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data due to domain registration errors is a notable anomaly but does not detract significantly from the overall legitimacy given the professional site content and business presentation. Strategic recommendations include enhancing security headers, updating third-party libraries, and verifying domain registration details to strengthen trust.

E

Eildon Housing

eildon.org.uk

67

Eildon Housing is a well-established non-profit housing association operating in the Scottish Borders region, providing affordable homes and supported housing for over 50 years. The organization targets residents seeking affordable rental options, shared ownership, and community support housing. Their market position is strong regionally, supported by a professional website that clearly communicates their services and contact information. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and performance. Cookie consent and privacy policies are implemented in compliance with GDPR standards. From a security perspective, the site uses HTTPS with strong SSL configuration and appropriate security headers. However, there is no publicly available security policy or incident response information, which could be improved to enhance transparency and trust. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with a solid business credibility and privacy compliance posture. The main limitation is the lack of WHOIS data due to domain registration query issues, but this does not detract from the legitimacy of the organization or website. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to further strengthen security posture and stakeholder trust.

U

UNION ENERGY HongKong Industries Ltd.

unionenergy.com.hk

38

UNION ENERGY HongKong Industries Ltd. is a specialist manufacturer and supplier of watch parts, bands, buckles, repair tools, and pogo pin connectors. The company targets businesses and professionals in the watch manufacturing and repair industry, positioning itself as a specialist with advanced machinery and a professional R&D team. The website reflects a small-sized manufacturing business based in Hong Kong with a focus on quality and systematic quality control. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Swiper.js, and is mobile optimized with good design and navigation. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which impacts its security posture. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is professional and safe but could improve in privacy compliance and security best practices.

P

PBS Utility Services Ltd

pbsutilities.co.uk

61

PBS Utility Services Ltd is a specialized service provider in the energy sector, focusing on power line and communication surveys, detailed designs, and construction support services. The company targets district network operators and tier 1 partners, positioning itself as a trusted and accredited utility services provider. Their website reflects a professional and consistent brand image with clear service offerings and multiple industry certifications, including ISO 9001 and Cyber Essentials. Technically, the website is built on the Webflow platform, leveraging modern web technologies and Google services for analytics and security. The site is mobile-optimized and performs well with good SEO practices. Security posture is generally strong with HTTPS and reCAPTCHA usage, but lacks some security headers and explicit incident response information. The WHOIS data is missing due to a domain registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the website presents a credible business front but should address domain registration issues and enhance privacy compliance.

A

Atchai Ltd

atchai.com

58

Atchai Ltd is a London-based AI strategy and engineering consultancy founded in 2011, specializing in delivering agentic AI solutions for enterprise and mid-market clients, including government departments and Fortune 500 companies. Their expertise spans AI strategy, engineering, and full product development, with a strong focus on regulated industries and secure AI deployment. The company has a solid market position supported by a professional website, client testimonials, and a portfolio of high-profile clients such as the UK Cabinet Office and Bank of England. Technically, the website is built on Webflow CMS, leveraging modern web technologies including Google Fonts, Google Tag Manager, and Cloudflare Turnstile captcha for form security. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security practices include HTTPS enforcement and CAPTCHA protection on forms, though explicit security headers are not detected. The security posture is generally strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, though the professional presentation and client references mitigate this concern. Overall, Atchai presents as a credible and professional AI consultancy with a robust technical and business foundation. Strategic recommendations include enhancing security headers, publishing a formal security policy, and verifying domain registration details to strengthen trust and compliance.

R

Rapid Industrial Fasteners Limited

rapidfast.co.uk

50

Rapid Industrial Fasteners Limited is a UK-based manufacturer and distributor specializing in standard and bespoke industrial fasteners and fixings. Established in 1998, the company operates a fully equipped manufacturing facility complemented by a distribution network, serving industrial clients primarily in the West Midlands and broader UK market. Their business model focuses on manufacturing bespoke fasteners, vendor managed systems, contract orders, and material certification services, positioning them as a reliable partner in the manufacturing sector. Technically, the website is built on WordPress with WooCommerce, leveraging modern front-end technologies such as Bootstrap, jQuery, and OwlCarousel for a responsive and user-friendly experience. The site is mobile optimized and incorporates SEO best practices, though accessibility features could be enhanced. Performance is moderate, with optimization plugins like Autoptimize in use. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. However, security headers are not explicitly present, and there is no dedicated incident response or security policy page. No vulnerabilities or exposed sensitive data were detected. The domain is long-established and registered with a reputable registrar, supporting the legitimacy of the business. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and security posture. Strategic improvements in security headers, incident response documentation, and accessibility would further strengthen their security and compliance stance.

P

Penta International

pentainternational.co.uk

57

Penta International is an established education services provider specializing in training, consultancy, school management, and inspection services primarily in the United Kingdom and internationally. Founded in 1996, the company serves a broad audience including primary, secondary, and special schools, as well as government education bodies. The website reflects a professional and consistent brand presence with clear service offerings and client testimonials, positioning Penta International as a reputable player in the education sector. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts and jQuery. Hosting is via Amazon CloudFront CDN, ensuring reasonable performance and availability. The site is mobile-optimized and exhibits good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data and the registry's indication that the domain is invalid raise concerns about domain legitimacy or possible misconfiguration. No signs of malware or phishing were detected, but the domain registration inconsistency warrants further investigation. Overall, the website presents a low to moderate risk profile with strong business credibility but some gaps in privacy compliance and domain legitimacy. Strategic improvements in security headers, privacy disclosures, and domain registration verification are recommended to enhance trust and compliance.

K

KBS Corporate

kbscorporate.com

66

KBS Corporate is a UK-based business sales advisory firm positioned as a leading corporate business sales adviser. The company offers expert guidance for buying and selling businesses, leveraging award-winning agents to serve business buyers and sellers primarily in the UK market. Their digital presence is professional and well-structured, reflecting a mature business model focused on brokerage and advisory services. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Microsoft Clarity, and Cookiebot for privacy compliance. The site demonstrates good SEO and accessibility practices, with responsive design and clear navigation. Security posture is strong with HTTPS enforcement, security headers, and use of reCAPTCHA, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy and professional, though the lack of WHOIS data introduces some uncertainty about domain registration legitimacy. Strategic recommendations include enhancing transparency around security policies and monitoring domain registration status.

C

Clear Insurance Management Limited

lukerrowe.com

61

Clear Insurance Management Limited is a UK-based independent Chartered insurance broker specializing in commercial, property, construction, manufacturing, and life sciences insurance, with a notable focus on audio visual and events insurance. The company operates multiple branches including the Amersham branch, and is part of the Clear Group. The website reflects a professional and comprehensive digital presence with clear navigation, detailed service offerings, and strong regulatory compliance signals such as FCA authorization. Technically, the site uses modern web technologies including jQuery, Google reCAPTCHA, Usercentrics CMP for consent management, Hotjar for analytics, and Feefo for customer reviews, hosted behind Cloudflare DNS and CDN services. Security posture is good with HTTPS enforced and secure form handling, though security headers and incident response information are not publicly detailed. Overall, the website is trustworthy, well-branded, and compliant with privacy regulations, making it a reliable resource for prospective clients seeking insurance services.

M

McCann Bainbridge Eddy Ltd.

mbeuk.net

39

McCann Bainbridge Eddy Ltd. operates a professional design agency website showcasing a portfolio of creative projects for notable clients such as McVities, Mars, and others. The company targets businesses seeking branding and design services, positioning itself as a niche creative agency. The website is built using Webflow CMS, employs Google Fonts, and includes jQuery for scripting, indicating a modern but straightforward technical infrastructure. Performance and mobile optimization are good, though accessibility features are basic. Security posture is moderate with no HTTPS or security headers explicitly confirmed, and no privacy or cookie policies are present, which impacts compliance and trust. The absence of WHOIS registration data for the domain www.mbeuk.net raises concerns about domain legitimacy and registration consistency. Overall, the website is professional and functional but requires improvements in security, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

W

WorkBox UK

workboxuk.co.uk

56

WorkBox UK is a professional office and commercial fit out and refurbishment company operating primarily in the UK with offices in Nottingham, Birmingham, London, Sheffield, and Barlborough. The company offers a comprehensive range of services including office fit out, healthcare, industrial, leisure and retail fit outs, interior design, space planning, and office refurbishment. Their market position is that of a reputable regional player with multiple certifications and local sponsorships, such as their partnership with Notts County FC. The website is built on modern technologies using Webflow CMS and integrates Google Tag Manager and Cloudflare Turnstile for security and analytics. Security posture is strong with HTTPS and bot protection, but lacks some security headers and formal privacy/cookie policies. Overall, the site is professional, well-branded, and trustworthy, though the WHOIS data indicates domain registration inconsistencies that should be investigated further.

Infant journal is a specialized UK-based healthcare publication targeting neonatal and paediatric healthcare professionals. It offers bi-monthly authoritative articles, open access to past issues, and additional resources such as a supplier guide and job listings. The website is professionally designed with a consistent brand and clear navigation, supporting a subscription-based business model supplemented by advertising and sponsored content. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics for user tracking. However, some security best practices such as security headers and cookie consent mechanisms are missing. The WHOIS data is unavailable and indicates domain registration issues, which raises some concerns about domain legitimacy despite the professional appearance and content quality. Overall, the site is safe for general audiences and demonstrates good business credibility but would benefit from enhanced security and privacy compliance measures.

I

Instrument Product Development Ltd. t/a Instrument Industries

instrument-pd.co.uk

52

Instrument Product Development Ltd., trading as Instrument Industries, is a UK-based small business specializing in integrated product development services including industrial design, engineering, manufacturing, and distribution. Founded in 2013, the company emphasizes sustainable and transparent supply chains and serves clients worldwide. The website presents a professional image with clear business information and contact details, supporting its market position as a specialist product development firm. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, Google Maps API, and Mailchimp for email marketing. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is good with HTTPS enforced and no tracking scripts, but lacks advanced security headers and formal policies. The security evaluation shows a respectable baseline with secure form handling and no visible vulnerabilities. However, the absence of privacy and cookie policies, as well as incident response information, indicates compliance gaps. The WHOIS data for the .co.uk domain is unavailable due to domain registration issues, but the company uses the instrument.industries domain actively, which aligns with the business identity. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to strengthen user trust and regulatory adherence.

C

Clear Insurance Management Limited

centor.co.uk

60

Clear Insurance Management Limited is a well-established independent Chartered insurance broker based in London, specializing in professional, financial, corporate, and property insurance lines. The company has a strong market position supported by a history of acquisitions and certifications such as Investors in People Platinum and B Corp. Their London Great Tower Street branch serves as a central hub for larger teams focusing on specialist risks and London markets. The website reflects a professional and trustworthy brand with comprehensive service offerings and clear contact channels. Technically, the site is built on modern platforms like Webflow, uses Cloudflare DNS, and integrates essential tools such as Google Tag Manager, Hotjar, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS, reCAPTCHA on forms, and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the site is safe, compliant with GDPR, and provides a positive user experience with excellent design and navigation.

C

Candyspace

candyspace.com

74

Candyspace is a professional digital product agency specializing in designing, building, and optimizing websites, mobile apps, and ecommerce platforms. They serve ambitious organizations focused on growth and digital transformation, leveraging expertise in website design, native and hybrid app development, and conversion rate optimization. The company is positioned as a medium-sized technology sector player with a strong client portfolio including ITV, Rolls-Royce, and Mazda, and holds ISO 27001 certification indicating a mature security posture. Technically, the website is built on the HubSpot CMS platform, utilizing modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, and 6sense tracking. The site demonstrates good performance, excellent mobile optimization, and solid SEO practices. Security measures include HTTPS, reCAPTCHA Enterprise, and cookie consent mechanisms, supported by ISO 27001 certification, although explicit security headers could be more visible. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. However, the absence of WHOIS registration data is a notable anomaly that reduces domain trustworthiness despite the professional website presence. Overall, Candyspace presents a trustworthy and professional digital agency with robust technical and security implementations. Strategic recommendations include improving domain registration transparency, publishing incident response contacts, and enhancing security header visibility to further strengthen trust and compliance.

F

Foundation Landscaping

foundationlandg.co.uk

50

Foundation Landscaping is a small, local landscaping and groundworks company based in Berkhamsted, England, serving Hertfordshire and surrounding counties. The company offers a range of services including garden design, planting, outdoor structures, and groundworks, targeting homeowners and commercial clients. The website is professionally designed using Webflow CMS, with good mobile optimization and clear navigation. It integrates Google Analytics for visitor tracking but lacks privacy and cookie policies, which is a compliance gap. Security posture is adequate with HTTPS enabled but missing security headers and vulnerability disclosures. WHOIS data is unavailable, which raises some concerns about domain legitimacy despite the professional presentation. Overall, the website reflects a credible local business but should improve compliance and security transparency.

The Priory at Scorton operates a boutique bed and breakfast accommodation and café located in Lancashire, UK. The business targets tourists, local visitors, and academic visitors to nearby Lancaster University, offering hospitality services in a scenic countryside setting. The website is professionally designed with clear navigation, modern technologies, and integrated social media channels, supporting a positive user experience and business credibility. However, the domain WHOIS data is unavailable due to an invalid domain registration error, which raises concerns about domain legitimacy and registration consistency. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google reCAPTCHA v3, and Google Analytics, hosted likely behind Cloudflare. The site is mobile optimized and performs moderately well, though accessibility features could be improved. Security posture is decent with HTTPS enforced and form protection via reCAPTCHA, but lacks important security headers and published security policies. Overall, the website presents a trustworthy and professional front for a small hospitality business, but the domain registration inconsistency and lack of privacy policy reduce trust and compliance levels. Strategic improvements in security headers, privacy documentation, and domain registration verification are recommended to enhance security posture and business credibility.

M

MEO

meo.pt

58

MEO is a leading Portuguese telecommunications and energy services provider offering a broad portfolio including 5G mobile, TV, fixed and mobile internet, telephone, energy, and health services. The company targets both individual consumers and businesses within Portugal, leveraging a strong brand presence and comprehensive service offerings. The website reflects a mature digital infrastructure built on Microsoft SharePoint with modern JavaScript libraries and third-party integrations for marketing and analytics. Security posture is robust with HTTPS enforcement and consent management, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting a large enterprise business model.

N

Nauda

nauda.money

58

Nauda is a fintech company focused on providing streamlined financial services tailored for freelancers and small to medium enterprises (SMEs). Their platform offers multi-currency business accounts, efficient international payment solutions, and business loans up to £500,000, positioning themselves as a cost-effective alternative to traditional banks. The website reflects a professional and consistent brand image with clear service descriptions and pricing plans, targeting startups and SMEs globally. Technically, the website is built on the Webflow platform, utilizing modern frontend technologies including jQuery. It is mobile-optimized and provides a good user experience with clear navigation and responsive design. However, the site lacks visible advanced security headers and explicit incident response or security policies, which are important for fintech platforms handling sensitive financial data. From a security perspective, the site uses HTTPS (implied by Webflow hosting), has a cookie consent mechanism, and no exposed sensitive data was found in the HTML. The absence of WHOIS registrant data suggests privacy protection, which is common and justified for fintech businesses. No signs of WAF blocking or malicious content were detected. Overall, the security posture is moderate but could be improved by implementing stronger HTTP security headers and publishing security policies. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility compliance. These steps will strengthen trust and compliance, critical for fintech customer confidence and regulatory adherence.

Conexiant Education is a newly founded (2024) healthcare education platform focused on delivering accredited continuing education programs for healthcare professionals globally. The company offers personalized learning paths, live events, and on-demand multimedia content accredited by recognized bodies such as ADA CERP, AGD PACE, and COPE. Their market position is that of a premier provider with a large user base and strategic partnerships. Technically, the website is built on Webflow CMS, uses modern fonts and analytics tools like Microsoft Clarity, and is hosted on AWS infrastructure. The site is well-designed with good mobile optimization and clear navigation, though accessibility and SEO could be improved. Security posture is moderate; HTTPS is implied but no security headers or DNSSEC are enabled, and form submission uses GET method which risks data exposure. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the business credibility is high with strong branding and trust indicators. Recommendations include improving form security, enabling DNSSEC, adding security headers, and implementing cookie consent to enhance compliance and security.

D

Društvo za marketing Slovenije (DMS)

b2bkonferenca.si

51

The website www.b2bkonferenca.si represents the B2B Konferenca 2025, an established business conference organized by Društvo za marketing Slovenije (DMS), Slovenia's largest marketing community. The conference targets ambitious B2B companies and marketing professionals, focusing on sharing best practices, networking, and advancing B2B marketing strategies. The event is well-positioned in the Slovenian market as the only dedicated B2B conference with a strong history since 2017 and a growing participant base. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Analytics with IP anonymization, YouTube video embeds, and a cookie consent mechanism compliant with GDPR. The site demonstrates excellent design quality, mobile optimization, and user experience, with clear navigation and professional content presentation. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security headers and incident response transparency would further enhance trust and security posture.

D

Desk Kreativne Europe – Ured MEDIA Hrvatske

mediadesk.hr

54

Desk Kreativne Europe – Ured MEDIA Hrvatske is the official Croatian office supporting the Creative Europe MEDIA sub-programme. It serves Croatian audiovisual creators, film and TV professionals, and video game authors by providing information, organizing workshops, and facilitating access to EU funding opportunities. The website reflects a well-established entity with over 15 years of operation, consistent with its domain age and WHOIS data. The business model is non-profit and government-supported, focusing on cultural and media sector development within Croatia and the EU framework. The target audience includes professionals and organizations in the audiovisual and cultural sectors seeking EU MEDIA programme support. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as jQuery, Google reCAPTCHA, Google Tag Manager, and Plausible Analytics. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with bilingual content in Croatian and English. The presence of accessibility features and cookie consent mechanisms indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, explicit security headers are not detected in the HTML content, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Privacy compliance is supported by visible privacy and cookie policies, with GDPR considerations addressed. Contact information is clearly provided, enhancing trust and transparency. Overall, the website presents a low-risk profile with a strong business credibility and good technical implementation. It effectively serves its niche audience with relevant content and services. Strategic recommendations include enhancing security headers, formalizing incident response policies, and maintaining up-to-date third-party components to sustain security and compliance standards.

S

Salexor

salexor.com

60

Salexor is a technology-driven SaaS company specializing in AI-powered digital marketing solutions designed to maximize conversion rates and reduce marketing spend. The platform offers a comprehensive suite of products including real-time visitor engagement, AI agents, audience segmentation, email campaigns, automation flows, targeted offers, content management, analytics, mobile apps, and integrations with leading e-commerce and CRM platforms. The company targets businesses primarily in North America and Europe, aiming to enhance digital sales performance and customer engagement. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed product information. Technically, the site leverages modern web technologies such as Webflow CMS, Google Tag Manager, and PureCounter.js, ensuring good performance and user experience. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some security headers and a cookie consent mechanism. WHOIS data is missing or indicates the domain may be newly registered or privacy protected, which slightly impacts trust but is mitigated by the presence of a parent company, Sirma, and detailed contact information. Overall, Salexor presents a credible and mature digital marketing platform with room for improvement in privacy compliance and security transparency.

T

Tschudi Ship Management AS

tschudishipmanagement.com

67

Tschudi Ship Management AS is a well-established ship management company with Nordic roots and a global reach, offering a comprehensive range of services including technical, crew, operational, insurance, financial, supervision, and consultancy management. The company is part of the larger Tschudi Group, which has a long history dating back to 1883, positioning it as a reputable player in the maritime and offshore energy sectors. Their target audience primarily includes vessel owners and managers worldwide seeking reliable and flexible ship management solutions. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience with clear navigation and professional design. Hosting is managed via Webflow's CDN, ensuring fast load times and reliability. From a security perspective, the website employs HTTPS with excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and explicit security or incident response policies indicates room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Business credibility is supported by detailed service descriptions, clear contact information, and trust signals such as group affiliation and professional branding. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main concern lies in the missing WHOIS domain registration data, which conflicts with the company's claimed long-standing history and reduces domain trustworthiness. Verification of domain registration details is recommended to enhance legitimacy and trust.

T

Tschudi Shipping Company AS

tschudigroup.com

68

Tschudi Shipping Company AS is a well-established, family-owned Norwegian maritime and logistics group with a history dating back to 1883. The company offers a broad range of integrated services including shipping, ship management, transshipment, energy advisory, ocean industries support, offshore wind support, logistics, and financial services. With a strong Nordic and European presence and offices in 12 countries, Tschudi Group targets businesses requiring comprehensive maritime and logistics solutions. The website reflects a professional and consistent brand image, emphasizing their expertise and global reach. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and accessibility, with clear navigation and rich content. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. However, explicit security headers are missing, and no public security policy or incident response information is available. From a security perspective, the site enforces HTTPS and anonymizes IPs in analytics, but the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. No vulnerabilities or exposed sensitive data were detected, but improvements in security headers and transparency about security practices are recommended. Overall, the site demonstrates a solid security posture with room for enhancement. The overall risk assessment is moderate with a legitimacy score impacted by missing WHOIS data. Strategic recommendations include verifying domain registration, enhancing security headers, publishing security policies, and implementing vulnerability disclosure mechanisms to strengthen trust and compliance.

J

Jan Gregor

jgregor.cz

52

Jan Gregor is a certified Webflow Premium Partner specializing in custom Webflow web development solutions primarily targeting businesses and agencies seeking high-quality, scalable, and SEO-optimized websites. The company has established a strong market position in the Czech Republic with a portfolio of notable clients and projects, emphasizing technical SEO, localization, and lead automation. The website demonstrates a modern technical infrastructure leveraging Webflow CMS, GSAP animations, and secure AJAX form submissions, reflecting a mature digital presence. Security posture is solid with HTTPS and secure form handling, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

S

Solid Solutions

solidsolutionsai.com

52

Solid Solutions is a small technology company based in the Netherlands specializing in custom AI and large language model (LLM) application development. Their services focus on delivering tailor-made conversational AI solutions that integrate with business processes to enhance efficiency and growth. The website presents a professional image with clear descriptions of their offerings, targeting businesses seeking AI automation and personalized AI solutions. Technically, the site is built on Webflow with modern web fonts and scripts, delivering moderate performance and good mobile optimization. However, the security posture is limited due to lack of visible security headers and absence of privacy or cookie policies. The WHOIS data is missing, raising concerns about domain registration legitimacy. Contact information is limited to an email address on a different domain, which may affect trust. Overall, the site is functional and business-focused but would benefit from improved security and compliance transparency.

M

Markthalle Aarau

markthalle-aarau.ch

63

Markthalle Aarau is a community-focused venue and event space located in Aarau, Switzerland, operating since 2002. It offers a variety of services including event hosting, sustainable exchange programs like 'Madame Frigo' and an open clothes cupboard, as well as community gardening initiatives. The website is professionally designed and targets local residents and visitors interested in cultural and sustainable activities. Technically, the site is built on Webflow, uses modern web fonts, and integrates Google Tag Manager for analytics. It is hosted on Webflow's CDN and performs moderately well with good mobile optimization. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy linked via a partner site but no cookie consent mechanism visible. Overall, the domain registration data aligns well with the website's claims, indicating a legitimate and trustworthy entity.

W

W.A.G. payment solutions, a.s.

inelo.pl

65

Eurowag, incorporating Inelo, is a leading European provider of integrated mobility and payment solutions tailored for the road transport sector. Their offerings include advanced telematics, seamless payment services such as fuel cards and mobile payments, and comprehensive compliance and driver management solutions. The company targets transport companies and fleet managers, aiming to optimize fleet efficiency and regulatory adherence across multiple European markets. The website reflects a mature digital presence with multilingual support and extensive service descriptions. Technically, the website is built on Webflow CMS, leveraging modern JavaScript libraries and integrations such as Google Tag Manager and LiveChat for analytics and customer engagement. The site is well-optimized for mobile devices, features accessibility considerations, and employs security best practices including HTTPS and CAPTCHA on forms. The technical infrastructure suggests a robust and scalable platform suitable for enterprise operations. From a security perspective, the site demonstrates a strong posture with encrypted communications, secure form handling, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers could be more clearly implemented, and incident response contact details are not publicly provided. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR adherence and user consent mechanisms. Overall, the website and business exhibit high professionalism, trustworthiness, and operational maturity. The lack of public WHOIS data is consistent with privacy protection practices common among large enterprises. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure policies, and providing clearer incident response contacts to further strengthen trust and security readiness.

M

memo-media Verlags-GmbH

eventbranchenverzeichnis.de

55

The website www.eventbranchenverzeichnis.de operates as a comprehensive German-language event industry directory, offering access to over 20,000 contacts for event professionals including artists, service providers, and locations. It is managed by memo-media Verlags-GmbH, a recognized entity in the event media sector. The platform provides a user-friendly search interface, a free inquiry service, and additional event-related publications and newsletters, positioning itself as a key resource for event planning in Germany. Technically, the site employs modern frontend technologies such as Bootstrap 4.6, jQuery, Font Awesome, Swiper.js, and Typed.js, ensuring a responsive and visually appealing user experience. The use of HTTPS and cookie consent mechanisms reflects a commitment to privacy and security compliance. However, the absence of explicit security headers and incident response policies suggests areas for improvement in security maturity. From a security perspective, the site demonstrates good practices including encrypted connections and minimal exposure of sensitive data. The integration of Fathom Analytics indicates privacy-conscious user tracking. No critical vulnerabilities or malicious content were detected. The WHOIS data aligns with the business profile, showing consistent registration without privacy protection, enhancing trust. Overall, the website presents a professional, trustworthy, and GDPR-compliant platform with solid business credibility and technical implementation. Strategic enhancements in security headers and published security policies would further strengthen its posture and user confidence.

M

Mein E-Handwerk Anmeldung

mein-ehandwerk.de

63

The website 'Mein E-Handwerk Anmeldung' serves as a login portal for a German craft or trades platform, leveraging Microsoft Azure B2C for user authentication. It provides secure OAuth2.0 authorization code flow for user sign-in, targeting professionals within the German craft sector. The platform's technical infrastructure is modern, utilizing Microsoft cloud services and standard web technologies such as jQuery and Handlebars.js. While the login interface is professionally designed and mobile-optimized, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security practices are generally sound with secure form inputs and CSRF protections, but the absence of HTTP security headers and explicit security policies reduces the overall security posture. The domain is a subdomain of Microsoft's B2C login service, indicating legitimate use, though WHOIS data is unavailable due to the nature of the subdomain. Overall, the site is functional and secure for authentication purposes but would benefit from enhanced privacy disclosures and security transparency.

J

Jadrolinija

jadrolinija.hr

11

Jadrolinija is Croatia's largest passenger shipping company, providing ferry and catamaran transport services connecting numerous local and international destinations. The company operates a comprehensive online platform offering schedule information, ticket purchasing, and prepaid travel card services, targeting both local residents and tourists. The website reflects a mature digital presence with consistent branding and a focus on user convenience. Technically, the website employs modern web technologies including jQuery, Plyr video player, and Swiper sliders, alongside Google Fonts and accessibility tools. It is hosted under a Croatian academic network registrar, indicating a stable and regionally appropriate hosting environment. The site is mobile-optimized and accessible, with good SEO practices and performance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit published security policies, incident response plans, and vulnerability disclosure information. The use of third-party tracking pixels from Google, Meta, and TikTok indicates moderate user tracking, balanced by privacy controls. Overall, Jadrolinija's website is professional, trustworthy, and well-aligned with its business objectives. Strategic improvements in security transparency and incident readiness would enhance its security posture and user trust further.

T

Tschudi Energy

tschudienergy.com

9

Tschudi Energy is a specialized consultancy and agency service provider focused on the procurement of essential energy commodities such as LNG, oil, and coal, as well as shipping coordination. The company operates as part of the larger Tschudi Group, leveraging its network and expertise to deliver tailored solutions to clients primarily in the energy and shipping sectors. The website presents a professional image with clear contact information and a consistent brand identity. Technically, the website is built on the Webflow platform using modern web technologies including jQuery and CSS3. It is well-optimized for mobile devices and performs well in terms of loading speed and accessibility. However, there is a lack of advanced SEO optimization and no visible analytics or tracking tools, indicating a minimal data collection approach. From a security perspective, the website uses HTTPS (implied by external CDN links), but no security headers were detected in the provided data. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies and the lack of incident response information represent compliance gaps. The WHOIS data is notably missing or inaccessible, which raises concerns about domain registration legitimacy and trustworthiness. Overall, while the business and website appear professional and credible, the missing WHOIS registration data and lack of privacy compliance documentation reduce the overall trust score. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance the security posture and compliance standing.

P

Pixelibris

pixelibris.com

43

Pixelibris is a small educational technology entity focused on creating interactive multimedia presentations and learning resources in astronomy, mathematics, statistics, and computer graphics. The website is built on WordPress using modern plugins such as Elementor and Yoast SEO, indicating a moderate level of digital maturity. The technical infrastructure supports good SEO and mobile responsiveness, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data raises some concerns about domain legitimacy, but the professional content and partner affiliations suggest a legitimate educational project. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and clarifying domain registration details to improve trust and compliance.

M

Muzej za umjetnost i obrt

muo.hr

48

Muzej za umjetnost i obrt is a well-established Croatian museum institution dedicated to art and crafts, with a history dating back to 1880. The website serves as a digital platform to showcase exhibitions, educational programs, publications, and cultural projects targeting the general public, art enthusiasts, and educational institutions. The museum maintains a strong market position as a key cultural entity in Croatia. Technically, the website is built on WordPress with common plugins such as WooCommerce, Yoast SEO, and Jetpack, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though it lacks explicit security policies and advanced security headers. Overall, the site is professional, trustworthy, and compliant with GDPR and accessibility standards, with active social media engagement and partner affiliations. Recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process.

F

Flexigate, s.r.o.

flexigate.cz

43

Flexigate, s.r.o. operates an electronic platform named FLEXIGATE, targeting providers of performance balancing services (SVR) in the Czech and Slovak energy markets. The platform facilitates secondary market transactions of SVR contracts through auctions, enabling providers to find counterparties for contract transfers. The company is relatively new, founded in 2022, and positions itself as a niche player in the energy sector's secondary contract market. The website is professionally designed using Webflow CMS, with good mobile optimization and clear navigation, though it lacks some standard compliance documents such as privacy policy and terms of service. Technically, the site uses modern web technologies including jQuery and Google Fonts, and integrates a cookie consent mechanism via CookieScript. Security posture is moderate, with HTTPS implied but no explicit security headers detected. No contact emails or phone numbers are provided, but company registration and address details are clearly displayed, enhancing business credibility.

N

Nuvia Group

nuvia.com

62

Nuvia Group is an international company specializing in nuclear technology, offering a comprehensive range of services including engineering, EPC, services and works, and products. The company operates under the parent company Vinci Construction Group, positioning itself as a key player in heavily regulated environments such as nuclear, healthcare, defense, and industrial sectors. The website reflects a professional and consistent brand image targeting business clients and professionals in these industries. Technically, the website is built on WordPress with modern libraries such as jQuery, Owl Carousel, and Leaflet, and integrates privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers are not detected and no explicit security policy or incident response information is published. The absence of WHOIS data for the domain is a notable gap, reducing transparency and trust slightly. Overall, the website is well-designed, compliant with privacy regulations, and safe for general audiences.

S

Slovenský zväz biatlonu

biathlon.sk

44

Slovenský zväz biatlonu operates as the official Slovak Biathlon Federation, providing comprehensive information, event updates, and resources related to biathlon in Slovakia. The website serves athletes, clubs, fans, and the broader sports community with news, competition calendars, documents, and an e-commerce platform. The organization maintains partnerships with national sponsors and integrates social media channels to engage its audience. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by plugins such as Yoast SEO and Complianz for GDPR compliance. The site uses modern web technologies including Bootstrap and jQuery, hosted on Slovak nameservers, and implements HTTPS with a good SSL configuration. Performance and mobile optimization are adequate, with room for improvement in accessibility. From a security perspective, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policy disclosures and incident response information. Security headers are not fully evident, suggesting potential areas for enhancement. No vulnerabilities or suspicious activities were detected in the analyzed content. Overall, the website presents a professional and trustworthy digital presence for the Slovak Biathlon Federation, with strong compliance to privacy regulations and a solid technical foundation. Strategic improvements in security policies and accessibility could further strengthen its posture.

K

Krka, tovarna zdravil, d. d., Novo mesto

lekarna-na-dom.si

65

Lekarna-na-dom.si is an established Slovenian online pharmacy platform specializing in the sale of Krka pharmaceutical and veterinary products. The website serves consumers seeking convenient access to self-medication and veterinary products, positioning itself as a niche e-commerce retailer within the healthcare sector in Slovenia. The platform offers product search, categorized listings, and delivery services, leveraging Krka's brand recognition. Technically, the site is built on modern JavaScript frameworks including Nuxt.js, with integration of Google Tag Manager and advertising technologies. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, but lacks explicit security policy and incident response disclosures. WHOIS data confirms domain legitimacy with consistent registration details dating back to 2010. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though improvements in security transparency and contact information visibility could enhance user trust and compliance.

S

Solid Solutions

solidsolutions.so

54

Solid Solutions is a small technology company specializing in AI-driven SaaS products and solutions. Their website showcases an ecosystem of AI tools including custom AI agents, AI email writers, and sales agents for WhatsApp. The company targets developers, engineers, and growth professionals interested in AI innovation. The technical infrastructure is based on Webflow CMS with standard web technologies and moderate performance. The website is well designed, mobile optimized, and provides clear contact options but lacks formal privacy and security policies. Security posture is basic with HTTPS enabled but no DNSSEC or security headers detected. WHOIS data shows inconsistencies with a future domain creation date, which raises trust concerns. Overall, the company appears legitimate but should improve transparency and security documentation.

Teva Czech Republic operates as a local branch of the global pharmaceutical leader Teva Pharmaceutical Industries. The website provides comprehensive corporate information, product details, and social responsibility initiatives targeted at healthcare professionals and the general public in the Czech Republic. The company positions itself as a trusted manufacturer of generic and specialty medicines with a strong focus on patient safety and quality. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, Microsoft Application Insights, and Microsoft Clarity, integrated with a GDPR-compliant cookie consent mechanism. The site is well-structured, mobile-optimized, and professionally designed, offering a good user experience and clear navigation. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not published. The absence of WHOIS data limits domain trust assessment, but the corporate branding and content quality support legitimacy. Overall, the website reflects a mature digital presence aligned with industry standards and compliance requirements.

A

AZ KLIMA SK, s.r.o.

azklima.sk

51

AZ KLIMA SK, s.r.o. is a medium-sized Slovak company established in 2000, specializing in comprehensive technical building equipment services including project design, manufacturing, realization, and servicing. The company holds a strong market position in Slovakia, supported by its membership in the CEZ and SPP joint venture and industry associations. The website reflects a professional business presence with clear service offerings and references to notable projects. Technically, the website is built on WordPress, uses modern libraries such as jQuery and OwlCarousel, and incorporates SEO best practices including structured data and Open Graph tags. The site is mobile-optimized and performs moderately well. Security-wise, the site enforces HTTPS but lacks security headers and formal privacy or cookie policies, which are areas for improvement. No forms or analytics scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional but could enhance privacy compliance and security posture.

R

Retargetly

retargetly.com

61

Retargetly is a Latin American technology platform specializing in data-driven advertising solutions, now operating as part of the global marketing company Epsilon. The website serves primarily as a transitional landing page informing visitors of this corporate change, with limited direct content or interactive features. The business is positioned as a leader in data and advertising convergence in Latin America, serving over 250 clients. Technically, the site is built on Webflow with standard web technologies such as jQuery and Google Fonts, hosted with Cloudflare DNS services. Security posture is moderate with HTTPS enabled and domain transfer lock in place, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partial, with privacy policies available but no cookie or terms of service policies evident. No direct contact or incident response information is published, limiting transparency. Overall, the site is safe, professional, and consistent with the business narrative but could improve in privacy and security disclosures.

W

W.A.G. payment solutions, a.s.

cvs-mobile.com

52

W.A.G. payment solutions, a.s., operating under the Eurowag brand, is a leading European provider of integrated mobility and payment solutions focused on the transportation sector. The company offers a comprehensive suite of services including fleet management telematics, fuel cards, toll payment solutions, tax refund services, and eMobility options. Their recent integration of CVS Mobile enhances their fleet management capabilities with advanced real-time tracking and route planning, positioning them strongly in the European transport market. The website reflects a mature digital presence with multi-language support and country-specific offerings, targeting fleet operators and logistics managers across Europe. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager for analytics and tracking, and intl-tel-input for phone input handling. The site is well-optimized for mobile devices, accessible, and fast-loading, demonstrating a high level of digital maturity. The presence of comprehensive legal, privacy, and cookie policies indicates a strong commitment to compliance and user privacy. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers are not detected in the provided data. No vulnerabilities or exposed sensitive data were found in the content. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation, regulatory disclosures, and trust signals support a strong security posture. Overall, the website presents a low-risk profile with robust business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing an incident response page, and adding a vulnerability disclosure policy to further strengthen security transparency and resilience.

W

W.A.G. payment solutions, a.s.

gbox.pl

65

W.A.G. payment solutions, a.s. operates as a leading European provider of integrated mobility and payment solutions, primarily serving the transportation and fleet management sectors. Their website promotes the GBox telematics platform, offering real-time vehicle tracking, driver monitoring, and data analytics to optimize fleet operations and reduce costs. The company targets transport companies, fleet managers, and logistics operators with a comprehensive suite of telematics and payment services, supported by multiple digital portals and mobile applications. Technically, the website is built on the Webflow CMS platform, leveraging modern JavaScript libraries such as jQuery and intl-tel-input, and integrates Google Tag Manager and LiveChat for analytics and customer support. The site is well-optimized for mobile devices, accessibility, and SEO, with a fast loading performance and structured navigation. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR requirements. From a security perspective, the site enforces HTTPS, uses CAPTCHA on forms, and avoids exposing sensitive data. However, explicit security headers like CSP and HSTS are not detected, and no public vulnerability disclosure or incident response contacts are provided. The WHOIS data is unavailable publicly, which slightly reduces transparency but is common for corporate domains. Overall, the security posture is solid but could be enhanced with additional headers and disclosure practices. The overall risk assessment indicates a trustworthy and professional online presence with moderate to high credibility. Strategic recommendations include improving security header implementation, publishing a security.txt file, and enhancing incident response transparency to further strengthen trust and compliance.

W

W.A.G. payment solutions, a.s.

ocrk.pl

63

W.A.G. payment solutions, a.s. operates a professional website focused on providing integrated mobility and payment solutions for the European transport sector. The site highlights expert services in driver work time management, compliance, and financial settlements, targeting transport companies and fleet managers. The company positions itself as a leading provider with a broad portfolio including fuel cards, toll services, telematics, and financial services. The website is well-structured, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern web technologies including Webflow CMS, JavaScript libraries like jQuery and intl-tel-input, and integrates Google Tag Manager and LiveChat for analytics and customer support. The site is mobile-optimized and accessible, with cookie consent mechanisms and GDPR-compliant privacy policies. Security measures include HTTPS and CAPTCHA on forms, though explicit security headers and incident response information are not evident. The security posture is solid but could be improved by adding security headers and publishing vulnerability disclosure information. The absence of WHOIS data reduces trust slightly but the professional presentation and consistent business information mitigate concerns. Overall, the site demonstrates a strong business and technical foundation with room for enhanced security transparency. Strategic recommendations include implementing security headers, publishing a security.txt file, providing incident response contacts, and improving WHOIS transparency to enhance trust and compliance.

W

W.A.G. payment solutions, a.s.

webeye.eu

64

W.A.G. payment solutions, a.s., operating under the brand Eurowag, is a leading provider of integrated mobility and payment solutions tailored for the European transportation sector. The company offers a comprehensive suite of services including fleet management, toll payment solutions, fuel cards, tax refunds, and financial services, targeting commercial fleet operators and logistics companies. Their market position is strong, supported by a large-scale operation and a broad geographic presence across multiple European countries. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, and Google Tag Manager, hosted on a performant CDN infrastructure. The site is well-optimized for mobile devices, accessibility, and SEO, reflecting a mature digital presence. The integration of multiple login portals and partner platforms indicates a complex and well-managed technical ecosystem. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with privacy regulations such as GDPR. However, explicit security headers are not visibly configured, and there is no public incident response or vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a large enterprise in the transportation and payment services industry. The lack of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and formalizing vulnerability disclosure policies to strengthen trust and compliance.

H

h2a s.a.

h2a.lu

47

h2a s.a. is a well-established communication agency based in Luxembourg, operating since 2004. The company specializes in creative communication services including digital campaigns, branding, and accessibility consulting. Their market position is that of a trusted local agency with a professional portfolio and a consistent brand image. The website reflects a mature digital presence with modern design and good user experience, targeting businesses and organizations seeking communication expertise in Luxembourg. Technically, the site is built on WordPress with a custom theme and uses jQuery and Google Tag Manager for analytics and marketing. The site is mobile optimized and accessible, with comprehensive privacy and cookie policies that comply with GDPR requirements. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though security headers are missing and WHOIS data is unavailable, limiting full trust verification. Overall, the site is professional, trustworthy, and compliant with privacy regulations.