Security Directory

K

KDM Events Ltd

kdmevents.co.uk

59

KDM Events Ltd is a UK-based corporate events management company specializing in team building, conferences, and corporate event services. The company positions itself as an award-winning provider delivering services across the UK, targeting corporate clients seeking professional event planning and management. Their key offerings include team building activities, conference management, audio visual services, content and design, audience engagement, and awards ceremonies. The website reflects a medium-sized business with a professional and consistent brand presence. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Google Analytics, Google Tag Manager, Google reCAPTCHA, New Relic monitoring, and CookieYes for consent management. The site is mobile optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate with room for improvement in accessibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to mitigate spam, and implements cookie consent mechanisms. However, it lacks visible security headers and does not publish a privacy policy or terms of service within the analyzed content. The WHOIS data is unavailable or invalid, raising concerns about domain registration legitimacy, although the website content itself appears professional and trustworthy. Overall, the website presents a solid business and technical foundation but should address privacy policy publication, improve security headers, and clarify domain registration details to enhance trust and compliance.

The University of South Alabama is a large, comprehensive public university located on the Alabama Gulf Coast, serving a broad audience including prospective and current students, faculty, staff, and the local community. It offers over 120 academic degree programs with a strong emphasis on healthcare education and research, supported by the region's only academic healthcare system. The university positions itself as the flagship institution of the Gulf Coast, providing extensive student services, research opportunities, and community engagement. The website reflects this with rich content, clear navigation, and consistent branding. Technically, the website employs a mature technology stack including Bootstrap, jQuery, Google Tag Manager, and various analytics and marketing tools. It is mobile-optimized and accessible, with good SEO practices. The site uses HTTPS and implements security best practices such as rel="noopener" on external links and reCAPTCHA on forms, though it lacks some advanced security headers like Content-Security-Policy. From a security perspective, the site demonstrates a solid baseline posture with HTTPS and some security best practices, but it lacks explicit incident response contacts, vulnerability disclosure mechanisms, and a cookie consent banner, which are important for compliance and transparency. The WHOIS data is unavailable, which is typical for .edu domains, and does not detract from the domain's legitimacy. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

H

Hayling Garage

haylinggarage.co.uk

52

Hayling Garage is a small automotive dealership based in Hayling Island, UK, specializing in used cars with a niche focus on classic American vehicles. The business offers a range of automotive services including carbon cleaning, DPF cleaning, custom exhausts, and MOT servicing. The website is professionally designed with good content relevance and clear navigation, targeting local car buyers and enthusiasts. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, with a cookie consent mechanism implemented inline. Security posture is good with HTTPS enabled and reCAPTCHA used, but lacks some security headers and a formal privacy policy page. WHOIS data is unavailable due to an invalid query format, limiting domain legitimacy verification. Overall, the website presents a trustworthy and professional front for the business, though improvements in privacy and security disclosures are recommended.

PowerScribe Internet Solutions Limited is a UK-based small business specializing in custom website design, SEO, web hosting, ecommerce solutions, and digital marketing services. The company targets businesses and individuals seeking affordable and professional internet solutions primarily in the UK and abroad. Their website showcases a range of services including web design, ecommerce platforms, email marketing, and mobile app development, supported by client testimonials and a physical UK address. Technically, the website employs a standard modern tech stack including Bootstrap, jQuery, and popular slider and popup libraries. The site is moderately optimized for mobile and SEO, with a professional design and clear navigation. However, there are security concerns due to the lack of HTTPS confirmation, presence of mixed content (HTTP scripts), and absence of security headers. Privacy and cookie policies are missing, indicating low privacy compliance. The security posture is weak with no visible incident response or security policy information. The WHOIS lookup failed to retrieve domain registration data, raising questions about domain legitimacy and ownership consistency. Despite this, the site content is accessible and professional, with clear contact details and social media presence. Overall, the website presents a credible small business offering web services but requires urgent improvements in security, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

T

Total Pump Solutions Ltd.

totalpumpsolutions.co.uk

43

Total Pump Solutions Ltd. is a UK-based independent distributor specializing in pumps and related equipment for HVAC, process, and industrial markets. Established in 2004, the company leverages extensive industry experience and strong manufacturer partnerships to provide competitive pricing, technical expertise, and comprehensive stock availability. Their website reflects a professional business with clear service offerings and a focus on technical knowledge and customer support. Technically, the website uses a modern Bootstrap framework with common JavaScript libraries but lacks advanced analytics or tracking. Security posture is moderate with no visible HTTPS enforcement or security headers, and privacy compliance is limited by the absence of cookie consent mechanisms. Overall, the business appears credible and trustworthy with a solid market position in its niche.

L

Londonwide Local Medical Committees Limited

lmc.org.uk

52

Londonwide Local Medical Committees Limited operates as the professional voice of general practice in London, representing 27 boroughs and providing specialist advice, guidance, and support to GPs and practice teams. The organization offers a range of services including workforce training, buying group services, representation, and communications to help practices navigate the complex healthcare environment. The website reflects a well-established entity with a clear focus on healthcare professionals in London. Technically, the website is built on WordPress and leverages modern JavaScript libraries and analytics tools such as Matomo, Google Tag Manager, and Hotjar. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs a comprehensive cookie consent mechanism and maintains privacy compliance, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers in the HTML content. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to domain naming rules error limits full trust verification, but the professional presentation and company registration details support legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical and privacy compliance. Strategic improvements in security header implementation and incident response transparency would enhance the security posture further.

3

3D Eye

3-d-eye.co.uk

43

3D Eye is a well-established creative production house based in West London, specializing in delivering 3D solutions for the fashion, retail, events, and brand activation industries. Founded in 1999, the company operates from a large workshop and studio, offering integrated design and fabrication services with a skilled in-house team. Their market position is strong, supported by collaborations with high-profile clients and a professional online presence. Technically, the website is built on WordPress with modern plugins and themes, providing good SEO and mobile optimization, though some performance and security enhancements are possible. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, but improvements in privacy and security policies are recommended.

S

Seymour Kitchens

seymourkitchens.co.uk

42

Seymour Kitchens is a well-established, family-run bespoke kitchen manufacturer and supplier based in Guildford, Surrey. With over 30 years of experience, the company offers a range of traditional and contemporary kitchen designs, emphasizing craftsmanship and client-focused service. Their market position is strong within the local bespoke kitchen sector, supported by positive customer testimonials and an active social media presence. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and SEO optimization. Security posture is adequate with HTTPS enabled, though improvements in security headers and privacy compliance are recommended. Overall, the business presents a credible and professional online presence with room for enhanced privacy and security practices.

S

Stanwick Village Hall

stanwickvillagehall.org

48

Stanwick Village Hall operates as a community-focused non-profit organization providing venue hire and event hosting services to the local village community in the United Kingdom. The website serves as an informational portal for residents and event organizers, emphasizing local engagement and community activities. The digital presence is built on Joomla CMS with the Helix Ultimate template framework, incorporating modern web technologies such as Bootstrap and Font Awesome for styling and icons. The site demonstrates good mobile optimization and accessibility features, ensuring usability across devices. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place; however, the absence of security headers and privacy policy pages indicates room for improvement in compliance and security best practices. The lack of WHOIS data limits full domain trust assessment, but the website content and structure suggest a legitimate community service entity. Strategic recommendations include publishing privacy and terms of service policies, enhancing security headers, and providing clear contact information for incident response.

Knight James Associates Ltd is a UK-based independent financial advisory firm established in 2001, offering key services including wealth management, mortgages and lending, and commercial insurance. The company positions itself as impartial and expert, targeting UK customers seeking professional financial advice. The website reflects a professional and consistent brand image, with clear regulatory compliance references such as FCA authorization and Financial Ombudsman Service information. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and DNSSEC. No privacy policy or incident response information is found, indicating room for compliance improvement. Overall, the domain registration data supports the legitimacy and longevity of the business, with no suspicious indicators detected.

R

Record Electrical Associates Limited

reauk.com

61

Record Electrical Associates Limited operates as a specialized manufacturer and supplier of analogue electrical instruments and meters, serving customers primarily in the UK and internationally. The company emphasizes quality and precision, manufacturing and calibrating instruments in-house to ISO 9001:2015 standards and holding ATEX certification. The REA Group also includes subsidiaries Townson & Mercer and Benchmark Instruments, expanding its reach into laboratory manufacturing and marketing. The website reflects a professional and well-structured digital presence with clear business information and contact details. Technically, the website employs a modern technology stack including Google Analytics, Google reCAPTCHA, jQuery, and GSAP for animations, alongside a proprietary CMS named Web Wizard 3. The site is mobile-optimized with good SEO practices and accessibility features, though some improvements in security headers could enhance the security posture. HTTPS is enforced, and cookie consent mechanisms are implemented, supporting GDPR compliance. From a security perspective, the site demonstrates good baseline practices such as HTTPS and CAPTCHA usage but lacks explicit security policies and incident response information. No vulnerabilities or exposed sensitive data were detected in the analysis. However, the WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy and trustworthiness, despite the professional appearance and certifications presented on the site. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, but the absence of WHOIS data and security policy details suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen trust.

The website 'MB-Distribution - Now MB DIY' appears to represent a small retail business focused on DIY and decor products. The content is minimal, with a brief description indicating two main sites: MB Diy and MB Decor. The technical infrastructure is basic, relying on common frontend libraries such as Bootstrap and jQuery, without evidence of a modern CMS or backend platform. The site lacks privacy, cookie, and terms of service policies, and no contact information is provided, which limits user trust and compliance with data protection regulations. Security posture is weak, with no HTTPS or security headers detected, and the domain registration is flagged as invalid by the UK registry, raising significant legitimacy concerns. Overall, the site is functional but lacks professionalism and security maturity.

M

Marshall Construction

marshallconstruction.co.uk

59

Marshall Construction is a well-established, family-managed construction and civil engineering company based in central Scotland, operating since 1983. The company employs approximately 200 skilled staff and manages projects ranging from small maintenance contracts to large developments exceeding £50 million. Their market position as a foremost independent building contractor in Scotland is supported by a strong reputation for quality and reliability. The website reflects a professional business model focused on direct employment of tradespeople and in-house management expertise. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery, Google Fonts, and Cloudflare Turnstile for bot protection. The site is mobile-optimized, SEO-friendly, and integrates Google Analytics for visitor insights. Performance is moderate with good accessibility and navigation clarity. From a security perspective, the site enforces HTTPS and uses Cloudflare's Turnstile captcha to protect forms. GDPR compliance is evident through cookie consent mechanisms and privacy policies. However, there is room for improvement in security headers, incident response disclosures, and vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

P

Parkhead Welding Co Ltd

parkheadwelding.com

48

Parkhead Welding Co Ltd is a Glasgow-based metal fabrication company specializing in structural steelwork, secondary steelwork, staircases, architectural metalwork, and maintenance/repair services. The company presents itself as an established player with over 50 years of industry experience and holds multiple certifications that enhance its credibility in the construction and manufacturing sectors. The website targets construction companies, architects, and industrial clients, operating primarily in a B2B model. Technically, the website is built on WordPress using the Divi theme, leveraging common JavaScript libraries such as jQuery and Slick Carousel. SEO is supported by Yoast SEO plugin, and the site is mobile optimized with good navigation and content quality. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS data for the domain reduces trust in domain legitimacy, although the website content and certifications suggest a legitimate business. Overall, the site scores well in content quality and business credibility but could improve in privacy compliance and security best practices.

R

RAFT Solutions Ltd

raftsolutions.co.uk

69

RAFT Solutions Ltd is a UK-based company specializing in sustainable livestock production through research, advanced breeding, consultancy, and training services. Established in 2010, the company serves farmers, veterinarians, and industry professionals with a focus on innovation and sustainability. Their website reflects a professional and consistent brand with clear navigation and relevant content. Technically, the site uses an ASP.NET Web Forms CMS with common JavaScript libraries and integrates Google Tag Manager for analytics. Security posture is moderate with some best practices like reCAPTCHA and cookie consent but lacks explicit security headers and uses an outdated jQuery version, which poses risks. The WHOIS data for the domain queried is unavailable due to domain naming errors, indicating a possible misconfiguration or use of a different registered domain. Overall, the website is trustworthy and professional but would benefit from improved security measures and domain registration clarity.

D

Denstone College

denstonecollege.org

70

Denstone College is a coeducational boarding and day school serving students aged 4 to 18, located in the United Kingdom. The institution offers a broad range of educational services including Pre-Prep, Prep, Senior, and Sixth Form education, complemented by co-curricular activities and boarding facilities. The website reflects a well-structured educational institution with clear navigation and professional content aimed at parents, students, and staff. The school positions itself as an accessible and comprehensive educational provider in the Staffordshire and Derbyshire region. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Kendo UI, and Slick Carousel, hosted on a CMS platform named Amais. It integrates Google Tag Manager and CookieYes for analytics and privacy compliance, respectively. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses anti-forgery cookies, alongside a robust cookie consent mechanism that complies with GDPR standards. However, explicit security headers are not detected, and there is no publicly available incident response or vulnerability disclosure information. The WHOIS data is privacy protected or unavailable, which is typical for educational institutions and does not raise immediate concerns. Overall, Denstone College's website presents a professional and trustworthy online presence with good privacy compliance and moderate technical maturity. Strategic improvements in security headers, incident response transparency, and contact information visibility could further enhance trust and security posture.

A

ABC Stainless Ltd

abcstainless.co.uk

58

ABC Stainless Ltd is a well-established UK-based specialist in stainless steel fabrication, operating since 1981. The company offers a broad range of bespoke manufacturing and design services, serving diverse industries such as aerospace, pharmaceutical, petrochemical, and food processing. Their market position is strong within the UK, supported by multiple certifications and a reputable client portfolio. The website reflects a professional business with clear service offerings and a focus on quality craftsmanship. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various UI libraries, with good mobile optimization and SEO practices. Security measures include HTTPS and Google reCAPTCHA on forms, though there is room for improvement in security headers and incident response transparency. Overall, the digital presence supports the company's credibility and operational maturity.

A

Apodi

apodi.co.uk

60

Apodi is a UK-based healthcare services provider specializing in facilitating access to medicines and healthcare services, primarily serving pharmaceutical companies, healthcare professionals, and patients. Their offerings include market insight services, specialist healthcare professional (HCP) services, homecare, recruitment, HR and development, and a patient portal. The company positions itself as a trusted partner with strong industry certifications and a focus on improving patient outcomes through innovative healthcare solutions. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI/UX enhancement libraries. It is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. Analytics tools such as Google Analytics and planned LinkedIn analytics are integrated with user consent. However, some security best practices like security headers are not visibly implemented, representing an area for improvement. From a security perspective, the site uses HTTPS with a strong SSL configuration and does not expose sensitive data. The cookie consent mechanism and privacy policy indicate good privacy compliance. The absence of a dedicated security policy or incident response contact reduces transparency. WHOIS data for the domain is unavailable or indicates the domain queried is not registered, which slightly impacts trust from a domain legitimacy standpoint but does not detract from the professional presentation and certifications. Overall, Apodi's website demonstrates a solid business and technical foundation with good security and privacy practices. Strategic improvements in security headers, incident response transparency, and domain registration clarity would enhance trust and security posture further.

3

3PIĘTRO

3pietro.eu

42

3PIĘTRO is a small real estate agency based in Poland, specializing in property sales, rental management, and home staging services primarily in Sosnowiec and nearby cities. The website presents a professional and content-rich platform with detailed property listings and team member contacts, supported by active social media channels. Technically, the site uses a custom real estate CMS with common web technologies such as jQuery, Bootstrap, and Google Fonts, delivering a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks important security headers and explicit privacy or cookie policies, which are compliance gaps. WHOIS data is unavailable due to registry privacy, limiting domain trust assessment, but the website content and structure indicate a legitimate local business. Overall, the site scores moderately well in content quality and business credibility but should improve privacy compliance and security best practices.

S

Schule Glarus

schule-glarus.ch

65

Schule Glarus is a public educational institution serving the Glarus region in Switzerland, offering kindergarten, primary, and secondary education. The website provides comprehensive information about the school’s offerings, locations, projects, and contact details, targeting parents, students, and the local community. The institution appears well-established with a clear focus on education and community engagement. Technically, the website is built on the GOViS CMS platform, uses modern libraries such as jQuery and Font Awesome, and integrates Matomo for privacy-conscious analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response policies suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professional, reflecting a legitimate public institution.

E

Ein Hoch auf Sensibilität! – Hochsensibilität Schweiz

hs-schweiz.ch

49

Ein Hoch auf Sensibilität! – Hochsensibilität Schweiz is a Swiss-based small business focused on providing coaching, education, and resources related to high sensitivity (Hochsensibilität). The website offers comprehensive information, strategies, and support for highly sensitive individuals, their families, and professionals. Key services include coaching, workshops, a podcast, and a specialized card set for exploring sensitivity. The business positions itself as a niche expert in the Swiss market with a strong emphasis on community and awareness. Technically, the website is built on WordPress using the Avada theme and several plugins including Yoast SEO and Google Site Kit, indicating a modern and SEO-optimized infrastructure. The site is mobile-friendly and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

G

Gemeinde Kestenholz

kestenholz.ch

67

Gemeinde Kestenholz operates as the official municipal government website for the community of Kestenholz in Switzerland. It provides residents and visitors with comprehensive information about local politics, administration, public services, events, and community life. The website leverages the GOViS eGovernment CMS platform, ensuring a structured and accessible digital presence. Key services include online administrative services, event announcements, and detailed information about municipal departments and political bodies. The site targets local residents and stakeholders seeking municipal information and services. Technically, the website employs modern web technologies including jQuery, Font Awesome, and Matomo analytics for visitor tracking with a strong emphasis on privacy compliance through a detailed cookie consent mechanism. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure suitable for a small government entity. From a security perspective, the site enforces HTTPS and integrates cookie consent with granular user controls. While no explicit security headers were detected, the site does not expose sensitive data or vulnerable libraries. However, there is no publicly available security policy or incident response contact, which could be improved to enhance trust and preparedness. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include adding explicit security headers, publishing a security policy, and implementing a vulnerability disclosure program to further strengthen security posture and transparency.

V

Vareo Digital

vareo.si

52

Vareo Digital is a Slovenian digital consulting and solutions provider specializing in digital optimization, marketing automation, and web development primarily targeting medium-sized businesses. The company emphasizes a strategic approach combining marketing and technology to accelerate digital transformation. Their website is professionally designed, mobile-optimized, and provides clear navigation with content primarily in Slovenian and an English language option. Technically, the site uses modern frontend libraries and frameworks such as Bootstrap, jQuery, and GSAP, with Google Tag Manager for analytics and LinkedIn integration for social presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies could be improved. WHOIS data is unavailable due to the .digital TLD restrictions, limiting transparency but the website content and business presence indicate legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

W

Weidmüller Lanškroun s.r.o.

weidmueller-lanskroun.com

42

Weidmüller Lanškroun s.r.o. is a manufacturing subsidiary of the multinational Weidmüller Holding Co&KGaA, specializing in the production of precise spare parts, tools, molds, and providing metal and plastic pressing along with simple automation solutions. The company targets industrial clients requiring high-quality manufacturing services. The website reflects a professional and consistent brand image with clear contact details and partner affiliations, positioning the company as a reliable manufacturing entity within its sector. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, hosted on Active24 infrastructure. The site is mobile optimized with good navigation and moderate performance. However, no CMS or advanced frameworks were detected, indicating a straightforward static or custom-built site. From a security perspective, the site uses HTTPS (implied by domain status and typical practice), but lacks visible security headers and does not implement DNSSEC. There is no privacy or cookie policy present, which is a compliance gap. No incident response or security policy information is provided. No forms are present on the main page, reducing attack surface but also limiting user interaction. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve its security posture and regulatory adherence.

Q

QM Sports Care

qmsportscare.eu

44

QM Sports Care is a small retail business specializing in premium, natural-based massage and sports care products targeted at professional and recreational athletes. The company positions itself as a trusted supplier in the sports care market, emphasizing natural ingredients and quality. The website reflects a professional brand image with consistent branding and a clear focus on its target audience. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, and various UI libraries, providing a good user experience with mobile optimization and clear navigation. However, the site lacks visible privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS implied but no visible security headers or vulnerability disclosures. Overall, the site is safe and trustworthy but would benefit from enhanced privacy compliance and security best practices.

Ř

Řešení pro audio / videokonference

headsety.cz

45

The website www.headsety.cz is an e-commerce platform specializing in professional audio and videoconferencing equipment, primarily targeting call centers, offices, and industrial users in the Czech Republic. The site offers a range of products including headsets, videoconferencing devices, and hands-free communication tools. The business presents itself professionally with clear product offerings, pricing, and customer support channels. The website is built on the OpenCart CMS platform and employs modern web technologies such as jQuery, Bootstrap, and Google Analytics for tracking and marketing purposes. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. However, the absence of WHOIS registrant data and lack of explicit security policies or incident response information slightly reduce the overall trustworthiness. The site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers and a vulnerability disclosure page. Overall, the website is functional, secure at a basic level, and professionally maintained, suitable for its niche market.

MAXX Creative s.r.o. is a well-established creative agency based in the Czech Republic, specializing in marketing strategy, creative design, and campaign execution. Founded in 1998, the company has built a solid reputation with approximately 150 clients and multiple industry awards, positioning itself as a trusted partner for businesses seeking comprehensive creative services. The website reflects a professional and consistent brand image, targeting business clients in need of marketing and advertising solutions. Technically, the site employs modern frontend technologies including jQuery, Foundation, and Google Tag Manager, hosted on Tele3 infrastructure. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks advanced security headers and published privacy or terms of service policies. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the site is trustworthy and professionally maintained, with a moderate to good security posture and compliance level.

C

CHEMAGAZÍN s.r.o.

laborexpo.cz

44

LABOREXPO is a well-established event organizer specializing in trade fairs and exhibitions for laboratory and process analysis equipment in the Czech Republic. The company, CHEMAGAZÍN s.r.o., founded in 2005, holds a strong market position with a focus on showcasing innovations and technologies relevant to laboratory professionals and industry stakeholders. The website provides comprehensive event information, partner details, and visitor guidance primarily in Czech with an English option, reflecting a regional focus with international accessibility. Technically, the site employs modern JavaScript libraries and frameworks such as jQuery, Foundation, and Slick Carousel, ensuring a responsive and interactive user experience. The presence of Google Analytics and retargeting scripts indicates moderate user tracking aligned with common marketing practices. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and published security policies, suggesting room for improvement in security posture and transparency. The WHOIS data confirms domain legitimacy and consistency with the business claims, supporting trustworthiness. Overall, the website is professional, content-rich, and trustworthy, with moderate technical and security maturity.

C

CHEMAGAZÍN s.r.o.

pigmentyapojiva.cz

43

The website pigmentyapojiva.cz represents a professional international conference focused on pigments and binders in the coatings industry. It serves as a platform for manufacturers, researchers, academia, and suppliers to collaborate and share knowledge. The event is organized by CHEMAGAZÍN s.r.o. in cooperation with academic and industry partners, positioning itself as a niche but reputable conference within the manufacturing sector in the Czech Republic. The site content is primarily in Czech with an English option, targeting industry professionals and researchers. Technically, the website employs a modern JavaScript stack including jQuery, Foundation framework, and various UI libraries such as SweetAlert2 and Slick Carousel. Google Analytics and Tag Manager are used for visitor tracking. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. No CMS or hosting provider details were detected. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS (implied by domain and scripts loaded from HTTPS sources), but no explicit security headers were detected in the provided data. A cookie consent banner is implemented, indicating some privacy compliance efforts, but no privacy policy or terms of service are published. Contact information is limited to a phone number, with no email or incident response contacts. No forms or data collection beyond analytics scripts were found. Overall, the website is legitimate and trustworthy with a solid business foundation but could improve its security posture and privacy compliance by publishing relevant policies, enhancing security headers, and providing clearer contact channels for security incidents.

M

MEVA-HU Kft

mevakomi.hu

44

MEVA-HU Kft is a Hungarian company specializing in industrial products including waste storage, oil management, warehousing, workshop equipment, and outdoor equipment. The company operates a B2B e-commerce platform supported by regional partner sites in Slovakia, Poland, Germany, and the Czech Republic. Their market position is that of an established regional supplier with a comprehensive product catalog and ISO 9001:2015 certification, indicating quality management standards. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience for industrial clients. Technically, the site uses a BohemiaSoft e-commerce platform with common JavaScript libraries and Google Analytics for tracking. Security posture is generally good with HTTPS, CSRF protections, and cookie consent mechanisms, though some outdated libraries and missing security headers present moderate risks. Privacy compliance is strong with clear GDPR-aligned policies and consent banners. Overall, the site is trustworthy and credible, with clear contact information and certifications. Recommendations include updating JavaScript libraries, enhancing security headers, and publishing a vulnerability disclosure policy to further strengthen security and trust.

F

Farmakoterapie

farmakoterapie.cz

51

Farmakoterapie.cz is a specialized Czech online medical journal and educational platform targeting healthcare professionals. It offers a wide range of clinical articles, case studies, video content, podcasts, and e-books primarily focused on pharmacotherapy and related medical fields. The site maintains partnerships with major pharmaceutical companies, enhancing its credibility and market position within the Czech healthcare sector. The content is professional, relevant, and designed to support medical education and clinical practice. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, FontAwesome, and analytics tools such as Google Analytics and Google Tag Manager. The site is mobile optimized and provides a good user experience with clear navigation and structured content. However, some improvements in accessibility and SEO could be considered. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is no visible cookie consent mechanism, which could be enhanced to improve GDPR compliance. The absence of a security.txt or vulnerability disclosure policy suggests room for improvement in transparency and incident response readiness. Overall, Farmakoterapie.cz presents a trustworthy and professional platform for its niche audience. The lack of WHOIS data limits domain ownership transparency but does not detract from the site's legitimacy given its content quality and industry partnerships. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing privacy compliance mechanisms.

K

Kardioakademie IKEM

kardioakademie.cz

64

Kardioakademie IKEM is a specialized educational platform focused on postgraduate training in cardiology, offering modular courses targeted at medical professionals and cardiology specialists primarily in the Czech Republic. The website presents a professional and consistent brand image with good content quality and relevant educational information. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The infrastructure is hosted via a Czech registrar and hosting provider, ensuring regional consistency and domain legitimacy. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, although there is room for improvement in security headers and explicit privacy policy documentation. Overall, the site is safe, trustworthy, and well-positioned within its niche educational market.

E

ERN GENTURIS

genturis.eu

56

ERN GENTURIS operates as a European Reference Network dedicated to patients with rare genetic tumour risk syndromes, aiming to improve diagnosis, treatment, and healthcare quality across Europe. The organization is positioned as a key healthcare network funded by the European Commission, collaborating with healthcare providers, researchers, and patient advocacy groups. Their services include expert healthcare access, patient referral guidance, educational initiatives, and research facilitation. The website reflects a professional and consistent brand aligned with European healthcare standards. Technically, the website employs a traditional JavaScript and jQuery-based stack with additional libraries such as Magnific Popup and Google Tag Manager for analytics. The site is mobile-optimized with moderate performance and basic accessibility features. While HTTPS is enforced, the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site demonstrates good practices with no exposed sensitive data or vulnerable libraries detected. However, the lack of security headers and incident response information suggests moderate maturity in security posture. The domain WHOIS data is protected by EURid privacy policies, which is typical for .eu domains and justified given the healthcare context. Overall, the website presents a trustworthy and professional front for ERN GENTURIS, with strong business credibility and good content quality. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance the security posture and regulatory alignment.

E

everso | Live music experience

eversomusic.com

53

everso is a German-based live music experience provider offering an exclusive artist team of over 80 performers for successful events. The website targets event organizers seeking professional live music entertainment. The business model revolves around artist booking services, positioning itself as a specialized media and entertainment service provider. The website is built on WordPress with the Divi theme and uses modern plugins for multilingual support and SEO optimization. The technical infrastructure is moderately optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the active and professional website suggests a legitimate business. Overall, the site is trustworthy but would benefit from enhanced transparency and security practices.

C

CHEMAGAZÍN s.r.o.

chemagazin.cz

49

CHEMAGAZÍN s.r.o. is a Czech-based media company operating an online magazine focused on chemistry, scientific research, industry, laboratories, and technology. The website serves professionals, researchers, and academics in the chemical sciences sector, offering news, articles, and an extensive archive of magazine issues dating back several years. The company has a well-established market presence since 2000, supported by industry partnerships and advertising. Technically, the website uses a modern tech stack including Laravel backend with Livewire, jQuery, Foundation, and various JavaScript libraries. It is hosted on Czech infrastructure with a reputable registrar and name servers. Security posture is solid with HTTPS and cookie consent implemented, though some security headers and policies are missing. Privacy compliance is partial due to the absence of a dedicated privacy policy page. Overall, the site is professional, trustworthy, and content-rich, with good user experience and mobile optimization.

D

Diakonie ČCE

krabiceodbot.cz

53

Krabice od Bot is a prominent Czech non-profit initiative organized by Diakonie ČCE, focused on collecting and distributing Christmas gifts to children in need. The project enjoys strong market positioning as the largest charity gift collection in the Czech Republic, supported by reputable endorsements including the patronage of the president's wife. The website provides comprehensive information for donors, volunteers, and beneficiaries, facilitating engagement through clear navigation and calls to action. Technically, the site is built on Drupal 11 with integrations of modern JavaScript libraries and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are absent, representing areas for improvement. Overall, the site is trustworthy and professionally maintained, though the absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy.

M

MR Studio Information Technologies

proon.tech

10

Proon.tech is a Slovak-based technology company offering an integrated SaaS platform for project management, CRM, and business activity management. The platform consolidates multiple business tools into a single solution aimed at improving efficiency and reducing operational costs for small to medium-sized enterprises. The company is positioned as a niche regional provider with a focus on Slovak and EU markets, supported by a development partner MR Studio Information Technologies. The website presents a professional and consistent brand image with clear business messaging and client references. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and various UI enhancement libraries. It uses Google Analytics and Facebook SDK for tracking and marketing purposes, with a compliant cookie consent mechanism in place. Hosting is provided via Websupport.sk, a known Slovak hosting provider. The site is mobile optimized and SEO friendly, though some accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent for privacy compliance. However, it lacks DNSSEC and explicit security headers, and no dedicated security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is transparent and consistent with the business claims, enhancing trustworthiness. Overall, Proon.tech demonstrates a solid business and technical foundation with good privacy compliance and moderate security posture. Strategic improvements in security headers, DNSSEC, and explicit security policies would enhance its security maturity and trust further.

Č

Český Institut Metabolického syndromu

cims-ops.cz

45

Český Institut Metabolického syndromu is a Czech healthcare-focused non-profit organization dedicated to educating patients and professionals about metabolic syndrome. The website serves as a platform for disseminating information, organizing seminars, and providing resources such as articles and publications. It maintains partnerships with reputable pharmaceutical companies, enhancing its credibility in the healthcare sector. Technically, the website is built on WordPress with modern libraries and plugins, offering a good user experience and mobile optimization. However, the absence of privacy and cookie policies indicates compliance gaps, and the lack of WHOIS data reduces domain trustworthiness. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

I

Ing. Zuzana Balková EKO-IN®

eko-in.sk

47

EKO IN, operated by Ing. Zuzana Balková, is a Slovak-based environmental consultancy and training provider specializing in legislative compliance, audits, and support related to environmental and waste management laws. The website presents a professional and focused business offering services primarily to Slovak businesses and individuals seeking expertise in environmental legislation. The site is well-structured with clear navigation and modern frontend technologies, providing a good user experience and mobile optimization. However, it lacks critical privacy and cookie policies, security headers, and analytics transparency, which impacts its overall security and compliance posture. No blocking or WAF mechanisms were detected, indicating full accessibility. Contact information is clearly provided, but no phone numbers or social media links are present.

A

Ace IT s.r.o.

aceit.cz

53

Ace IT s.r.o. is a Czech-based technology company specializing in the creation of custom web projects, including websites, e-shops, and online applications, with a strong focus on quality and client-centric services since 2008. The company positions itself as a boutique agency delivering tailored solutions with an emphasis on performance and user experience. Their service portfolio includes web development, online marketing, hosting, and IT outsourcing, targeting businesses seeking professional digital presence and marketing support. Technically, the website demonstrates a mature digital infrastructure using modern frameworks such as Nette and Node.js, along with front-end technologies like Bootstrap and Google Fonts. The site is well-optimized for performance and mobile responsiveness, employs HTTPS with strong SSL configuration, and integrates advanced cookie consent management and CAPTCHA for form security, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS, uses Cloudflare Turnstile CAPTCHA to mitigate spam, and provides a detailed cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS transparency and lack of explicit security policies or incident response contacts represent areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital front with solid privacy compliance and security practices. The main risk lies in the missing WHOIS data, which slightly impacts domain trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility features to further strengthen the security posture and compliance.

The website tavokraujas.lt represents the Vilniaus Universiteto Ligoninės Santaros Klinikų Kraujo centras, a major Lithuanian healthcare institution specializing in blood donation and transfusion services. The site provides comprehensive information about blood donation, donor registration, donor eligibility, and blood donation events. It serves as an important resource for potential donors and healthcare professionals in Lithuania. The business is well-positioned as a trusted healthcare provider with ISO 9001:2015 certification and affiliation with a leading university hospital. Technically, the website uses a variety of established JavaScript libraries and CSS frameworks such as jQuery, Bootstrap, and Owl Carousel to deliver a responsive and user-friendly experience. The site is mobile optimized and features multiple interactive forms for donor registration and event organization. However, there is no evidence of a CMS, and hosting details are not disclosed. From a security perspective, the website uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

I

INFO WEB s.r.o.

ladnafotografie.cz

49

LADNÁ FOTOGRAFIE is a small local photography studio based in Ladná near Břeclav, Czech Republic, specializing in portrait, still life, product, and other photographic services. The website serves as a professional portfolio showcasing various photographic works and targets local customers seeking photography services. The business is operated by INFO WEB s.r.o., founded in 2019, and maintains an active social media presence on Facebook and Instagram. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various plugins to deliver a visually appealing and responsive user experience. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is provided on the pages analyzed. Security posture is moderate with HTTPS assumed but no security headers detected, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

C

Centar za poduzetništvo d.o.o.

czp.hr

43

Centar za poduzetništvo d.o.o. is a regional entrepreneurial support center serving the Dubrovnik-Neretva County in Croatia. The organization focuses on providing a range of services including education, business consulting, credit programs, and assistance with EU funding projects. Their website reflects a government-affiliated entity aimed at fostering entrepreneurship and small business growth in the region. The target audience primarily consists of local entrepreneurs and small business owners seeking support and resources. Technically, the website employs a modern technology stack featuring jQuery, Bootstrap, FontAwesome, and various plugins for enhanced user experience and accessibility. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates Google Analytics and UserWay accessibility tools, indicating a mature digital infrastructure. The website content is well-structured, professionally designed, and includes clear navigation and relevant business information. From a security perspective, the site enforces HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit security policies and incident response contact details. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with GDPR-aligned privacy and cookie policies and a consent mechanism in place. The website demonstrates a good security posture but could improve by adding formal security documentation and security headers. Overall, the website is trustworthy, professional, and serves its business purpose effectively. The domain registration data aligns with the website's claims, reinforcing legitimacy. Strategic recommendations include enhancing security transparency, publishing incident response information, and maintaining regular security audits to sustain trust and compliance.

M

Međimurska energetska agencija d.o.o. MENEA

menea.hr

46

Međimurska energetska agencija d.o.o. MENEA is a Croatian regional energy agency established in 2008, focusing on energy consulting, project management, energy planning, and systematic energy management. The agency serves municipalities, businesses, and stakeholders in the energy sector, leveraging EU funding and regional initiatives to promote sustainable energy solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience and accessibility. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and aligned with the business's mission and market position.

F

F TRUCKS a.s.

fordtrucks.cz

44

F TRUCKS a.s. operates the official Czech website for Ford Trucks, providing comprehensive information and services related to new and used commercial trucks, servicing, financing, and after-sales support. The company targets commercial truck buyers and fleet operators within the Czech Republic, positioning itself as a key regional distributor and service provider for Ford Trucks. The website is professionally designed, localized in Czech, and integrates multiple social media channels to engage its audience. Technically, the website employs a modern technology stack including jQuery, Foundation framework, and various JavaScript libraries for UI and analytics. It uses multiple analytics and tracking services such as Piwik PRO, Microsoft Clarity, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing infrastructure. The site is hosted likely by REG-TELE3, consistent with the domain's Czech registration and nameservers. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and security headers. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, showing consistency and legitimacy. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security policy transparency and security header implementation would enhance its security posture and compliance maturity.

B

Parik24 — офіційні ставки на бокс онлайн з вигідними коефіцієнтами

bepolite.eu

53

The website 'Parik24' is an online platform specializing in boxing betting, targeting boxing fans primarily in Ukraine and internationally. It offers a variety of betting markets including live betting and detailed odds, positioning itself as a niche sports betting media site. The site is built on WordPress with common front-end libraries such as jQuery and Bootstrap, indicating a moderate level of technical maturity. The design is professional and content is relevant and well-structured, though accessibility features are basic. Security posture is limited with no visible security headers or privacy policies, and no contact information is provided, which may impact user trust and compliance with regulations. Overall, the site is functional and content-rich but requires improvements in security and privacy compliance to enhance credibility and user trust.

G

GDPR CENTRUM

gdprcentrum.cz

58

GDPR CENTRUM is a Czech-based small business collective of IT and legal professionals specializing in GDPR certification, implementation, consultancy, and software development. The company targets small businesses, sole proprietors, and online merchants, offering affordable and free GDPR compliance tools including a documentation generator. The website is professionally designed with clear navigation and comprehensive content in Czech, reflecting a strong focus on GDPR education and practical compliance support. Technically, the site uses a modern but somewhat dated tech stack including Bootstrap and jQuery 1.12.4, with good mobile optimization but lacking some modern security headers and explicit privacy/cookie policies. Security posture is moderate with HTTPS usage but missing advanced security configurations and incident response details. WHOIS data is unavailable, which reduces domain trustworthiness, but the detailed content and contact information support legitimacy. Overall, the site provides valuable GDPR compliance resources with room for improvement in privacy transparency and security best practices.

S

Streetwork Liechtenstein

streetwork.li

61

Streetwork Liechtenstein operates as a non-profit social outreach organization focused on providing support and counseling services in public and semi-public spaces within Liechtenstein. The organization emphasizes confidentiality and flexible engagement schedules, targeting youth and community members. The website reflects a professional and consistent brand presence with clear contact points and organizational governance details. Technically, the site is built on Concrete5 CMS, leveraging modern frontend libraries such as jQuery and Foundation, and employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS enforced and email obfuscation implemented, though there is room for improvement in security headers and formal policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-positioned within its niche, with a moderate to good technical and security maturity.

D

Deutsche Stiftung Kranke Neugeborene

dskn.org

56

Deutsche Stiftung Kranke Neugeborene is a German non-profit foundation dedicated to supporting sick newborns and their families through funding, education, and specialized projects. The organization maintains a professional web presence with clear navigation, relevant content, and compliance with GDPR and cookie consent regulations. The website is built on Joomla CMS with modern frontend libraries and integrates Google Analytics for user tracking. Security posture is generally good with HTTPS enforced and cookie consent implemented, though improvements in security headers and incident response transparency are recommended. WHOIS data is incomplete, limiting domain trust verification, but the overall digital footprint and partner affiliations support legitimacy.

T

TESTIMA, spol. s r.o.

testima.cz

44

Testima, spol. s r.o. is a Czech company specializing in nondestructive testing equipment and services, including sales, training, calibration, and servicing. With over 30 years of experience and ISO 9001 certification, it holds a stable market position serving industrial clients. The website is professionally designed, mobile-optimized, and provides clear contact and GDPR compliance information. Technically, it uses modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA to secure user interactions. Security posture is good with HTTPS and CSRF protections, though some security headers and policies could be improved. Overall, the site is trustworthy, compliant, and well-maintained.