Security Directory

B

BTC Software Systems Sp. z o.o.

btc-ag.pl

65

BTC Software Systems Sp. z o.o. is a Polish IT company specializing in software solutions and consulting services primarily for the energy sector and digital transformation projects. The company offers a range of products including automated VAT declaration tools for SAP, data measurement platforms, virtual power plant solutions, and IT training. Their market position is that of a specialized medium-sized player with international subsidiaries and partnerships. Technically, the website employs modern JavaScript libraries such as jQuery, Owl Carousel, and AOS, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile optimized with good navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the website is trustworthy and professional, with clear contact information and social media presence. WHOIS data is unavailable, likely due to privacy protection, which slightly limits domain trust assessment. Strategic recommendations include enhancing security headers, publishing security policies, and improving SEO metadata.

B

BTC Business Technology Consulting AG

btc-ag.com

75

BTC Business Technology Consulting AG is a well-established IT service provider headquartered in Oldenburg, Germany, with a significant international presence including subsidiaries in Poland, Switzerland, and Turkey. The company specializes in IT consulting and digital transformation services targeting various sectors such as energy, public sector, and general business industries. Their offerings include sustainability services, human capital management, financial solutions, GIS services, and AI integration, positioning them as a comprehensive IT partner for enterprises and government entities. The website reflects a professional and consistent brand image, supporting their market position as a large, reputable technology company. Technically, the website employs modern JavaScript libraries such as jQuery, Owl Carousel, and AOS for animations, alongside Font Awesome for icons and Piwik PRO for analytics. The site is well-optimized for mobile devices, has good SEO practices, and includes comprehensive metadata and Open Graph tags. Performance is moderate, with no major technical debt or outdated technologies detected. The absence of a detected CMS suggests a custom or proprietary platform. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes important security headers, indicating a solid security posture. However, there is no publicly visible security policy or incident response contact, which are areas for improvement. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency but does not directly impact the operational security or professionalism of the site. Overall, BTC AG presents a trustworthy and professional digital presence with strong business credibility and technical implementation. The main risk lies in the lack of WHOIS transparency and absence of explicit security incident response information. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure program, and verifying domain registration details to enhance trust and compliance.

M

mCloud doo

sdgs4all.rs

49

The website 'Održivi razvoj za sve' is a Serbian platform dedicated to facilitating public dialogue and information sharing on the Sustainable Development Goals (Agenda 2030) within Serbia. It operates as a non-profit initiative, supported by multiple partner organizations, and targets policymakers, NGOs, and the general public interested in sustainable development. The platform offers resources such as news, newsletters, e-learning modules, and document repositories to support its mission. Technically, the site is built on WordPress 6.8.2, utilizing modern web technologies including jQuery, OwlCarousel, FontAwesome, and Slider Revolution. It employs Matomo analytics for user tracking, indicating a privacy-conscious approach. The website is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and some recommended security headers. There is no publicly available security policy or incident response information, and no vulnerability disclosure mechanism is present. Cookie consent is implemented, but no explicit privacy policy page was found, which is a compliance gap. Overall, the website presents a professional and trustworthy front for its niche non-profit mission. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and security policies, and improving accessibility features to strengthen compliance and user trust.

В

Влада Републике Српске

srpska2030.rs

48

The website srpska2030.rs serves as the official government platform for the Sustainable Development Strategy of Republika Srpska for 2024-2030. It provides comprehensive information on sustainable development goals, normative frameworks, strategic platforms, and public consultation mechanisms. Supported by the UNDP and the Slovak Ministry of Finance, it targets citizens, government officials, and stakeholders interested in sustainable development. The platform is built on WordPress with modern frontend technologies like Bootstrap and AOS, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS and secure forms, but lacks advanced security headers and privacy compliance elements such as privacy and cookie policies. The domain registration is consistent with the business purpose and recent project timeline, enhancing trustworthiness.

D

Dinalsa d.o.o. Sarajevo

dinalsa.ba

50

Dinalsa d.o.o. Sarajevo is a medium-sized construction and infrastructure service provider operating primarily in Bosnia and Herzegovina with over 20 years of experience. The company specializes in turnkey construction solutions including electrical, water, and thermal installations, as well as civil engineering works such as demolition, concrete processing, and equipment rental. Their market position is supported by a portfolio of reputable partners and a professional online presence. Technically, the website employs modern front-end technologies and is mobile optimized, though it lacks some advanced accessibility features and security headers. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal policies. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for compliance and security enhancements.

T

Truyo

truyo.ai

66

Truyo is a mature technology company founded in 2011, specializing in AI governance and compliance solutions. Their platform offers comprehensive tools to identify, assess, and mitigate AI risks, ensuring organizations adopt AI responsibly and in compliance with evolving regulations. The company targets enterprises and organizations seeking to manage AI usage, risk, and regulatory compliance effectively. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates advanced features such as AI model validation, data de-identification, and framework assessments. The site is well-optimized for SEO, mobile-friendly, and uses reputable third-party services like Google Tag Manager and HubSpot for analytics and marketing. Security-wise, the site enforces HTTPS, uses security headers, and shows no signs of vulnerabilities, although DNSSEC is not enabled. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, Truyo presents a professional, trustworthy, and technically sound digital presence aligned with its business focus on AI governance.

S

Stadtentwaesserungsbetriebe Koeln, AoeR

parkweiher.koeln

65

The website 'parkweiher.koeln' is an official public service platform managed by the Stadtentwässerungsbetriebe Köln, AöR, focusing on the 15 urban park ponds in Cologne. It provides comprehensive information about the ponds, their ecological importance, recreational activities, and related multimedia content. The site targets local residents and visitors interested in nature and urban green spaces. Technically, the site employs modern web technologies including Matomo for privacy-conscious analytics and Usercentrics for GDPR-compliant cookie management. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent blocking third-party content until approval, though some security headers could be improved. WHOIS data aligns well with the website's public service nature, showing consistent registration details and no suspicious patterns. Overall, the site demonstrates a mature digital presence for a government entity with strong privacy and compliance adherence.

N

netgo group

netgo.de

58

netgo group is a well-established German IT service provider specializing in comprehensive IT and software solutions that enable digital transformation for businesses across various industries. The company offers a broad portfolio including cloud infrastructure, IT security, software development, workplace solutions, and managed IT services. Recognized by multiple industry awards and certifications, netgo positions itself as a trusted partner for enterprises seeking to modernize and secure their IT environments. Technically, the website is built on the HubSpot CMS platform, leveraging modern analytics and marketing tools such as Google Tag Manager, Cookiebot, and Matomo, ensuring good digital maturity and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the domain registration data aligns well with the website's claims, indicating legitimacy and consistency. The site is professionally designed, mobile-optimized, and user-friendly, supporting a high level of trust and business credibility.

T

Truyo

truyo.com

67

Truyo is a technology company specializing in AI governance and privacy compliance solutions. Their platform offers comprehensive services including AI inventory, risk management, consent and preference management, data privacy automation, and vendor risk assessments. Recognized by industry leaders such as IAPP and Forrester, Truyo targets enterprise clients seeking to manage AI risks and comply with evolving data privacy regulations globally. The website demonstrates a mature digital presence with modern technologies, responsive design, and strong SEO practices. Security posture is solid with HTTPS and basic security headers, though additional enhancements are recommended. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform. Overall, Truyo presents as a credible and professional business with a clear focus on AI governance and privacy compliance.

L

LiveScore Group

livescoregroup.com

61

LiveScore Group operates a globally recognized ecosystem converging sports media and sports betting through its brands LiveScore, LiveScore Bet, and Virgin Bet. The company leverages proprietary technology to deliver a seamless experience for sports fans and bettors worldwide. The website reflects a mature digital presence with professional design, mobile optimization, and modern web technologies including WordPress CMS, Swiper.js, and Google Analytics integration. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and explicit security policies are recommended. Privacy compliance is partially addressed via OneTrust cookie consent, but lacks visible privacy and terms of service documentation. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

I

Inizio

inizio.com

70

Inizio is a well-established healthcare and life science consulting firm founded in 2000, providing comprehensive commercialization and clinical development services globally. The company positions itself as a market-leading partner with a broad suite of capabilities including advisory, medical communications, marketing, and biotech solutions. Their client base includes 100% of the top 20 pharma companies, indicating strong market presence and trust. The website reflects a mature digital infrastructure built on WordPress, enhanced with modern JavaScript libraries and analytics tools such as HubSpot, Google Tag Manager, and Hotjar. Security posture is robust with HTTPS enforced, reCAPTCHA protection on forms, and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website demonstrates high professionalism, excellent content quality, and strong business credibility.

C

ComperiaLead

comperialead.pl

60

ComperiaLead.pl operates as a leading affiliate marketing program in Poland, offering innovative tools and a mobile application to enable users to earn money online. The platform targets Polish internet users interested in affiliate marketing and online business opportunities. The website presents a professional and consistent brand image with a focus on finance-related affiliate services. Technically, the site employs a modern tech stack including Bootstrap, Google Analytics, Facebook Pixel, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible HTTP security headers and explicit security policies. The absence of WHOIS data due to privacy protection slightly reduces trust but is common in this business sector. Overall, the site is safe, compliant with GDPR, and well-positioned in its market niche.

E

eRecruitment Solutions sp. z o.o.

erecruiter.pl

68

eRecruitment Solutions sp. z o.o. operates the eRecruiter platform, a leading Applicant Tracking System (ATS) widely used in Poland by over 2,000 companies. The platform supports recruitment automation, candidate communication, and HR-business collaboration, offering modules such as onboarding, employee referrals, and career page creation. The company has a strong market position with a 15-year history and a professional digital presence in both Polish and English languages. Technically, the website is built on WordPress and integrates modern analytics and marketing tools including Google Analytics, Microsoft Clarity, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and a security.txt file is absent. The domain WHOIS data is transparent and consistent with the company's claims, supporting legitimacy. Overall, the website is professional, secure, and compliant with GDPR, targeting HR professionals and businesses seeking recruitment solutions.

A

ACSI Eventing Team

acsi-eventingteam.com

61

ACSI Eventing Team is a niche sports sponsorship entity focused on promoting and supporting eventing athletes in the Netherlands. The website presents a professional and well-structured digital presence, highlighting key team members and their achievements. The technical infrastructure is based on WordPress with modern plugins and tracking tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers and policies could be improved. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website content and social media presence support its legitimacy. Overall, the site serves its target audience effectively with a clear business focus on equestrian sports sponsorship.

O

Outside Escape

outsideescape.nl

47

Outside Escape is a small hospitality business specializing in city escape games across more than 35 cities in the Netherlands and Belgium. Their business model focuses on e-commerce sales of interactive city exploration experiences accessible via smartphones without app downloads. The website is built on a modern WordPress and WooCommerce infrastructure, integrating multiple marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent. The site demonstrates good design quality, clear navigation, and consistent branding, supported by strong trust indicators like a high Trustpilot rating and DNSSEC-enabled domain. Security posture is solid with HTTPS and DNSSEC, though improvements are recommended in implementing security headers and fixing broken media resources. Privacy compliance is basic, with cookie consent mechanisms present but no explicit privacy or terms of service pages detected in the provided content. Overall, the website is professional and trustworthy, serving a general audience with safe content focused on family-friendly city escape games.

A

Accelint

accelint.com

65

Accelint is a technology company specializing in AI-enabled software, engineering, and sensor solutions primarily serving the United States Department of Defense and allied government agencies. Founded in 2022, the company positions itself as a key player in accelerating intelligence through advanced mission, tactical, logistics, AI/ML, sensor, and cyber software solutions. Their market focus is on federal aerospace, defense, and critical infrastructure sectors, leveraging cloud and edge computing technologies. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to a government and defense audience. Technically, the site is built on WordPress with modern plugins and frameworks such as Yoast SEO, Google Tag Manager, and Complianz GDPR cookie consent. Hosting appears to be via Azure Government DNS, aligning with the company's government-focused clientele. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Analytics and tracking are implemented responsibly with user consent mechanisms. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit published security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the company's founding date and business claims, enhancing trustworthiness. Overall, Accelint's website demonstrates a strong business and technical foundation with room for improvement in security transparency and incident response readiness. The site is safe, professional, and compliant with privacy regulations, making it a credible digital asset for the company.

OnlineDPIA.nl is a Netherlands-based small technology company founded in 2022, offering an online tool to help organizations comply with GDPR by performing Data Protection Impact Assessments (DPIAs). The website provides a subscription-based SaaS model with a free DPIA scan and paid plans, targeting businesses needing to assess privacy risks. The site is professionally designed, mobile-optimized, and uses modern web technologies including Alpine.js and Statamic CMS. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though privacy policy and terms of service pages are missing. Contact is available via a web form only, with no direct emails or phone numbers published. The domain registration data is consistent with the business profile, indicating legitimacy. Overall, the site is trustworthy and well-positioned in its niche.

M

maLegalTECH

malegaltech.fr

43

maLegalTECH is a French online legal services provider specializing in company creation and related administrative formalities. The company offers a streamlined, cost-effective digital platform targeting entrepreneurs and small business owners in France. Their services include document generation, digital signatures, legal announcements, and priority filing with registries. The website is built on WordPress and integrates modern web technologies such as jQuery, Slick Carousel, and AOS for animations, alongside Google Analytics and Crisp Chat for analytics and customer support. Hosting is provided by OVH, a reputable provider, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced and secure payment processing via Stripe, although some security headers could be improved. Privacy compliance is well addressed with GDPR cookie consent mechanisms and clear privacy and terms pages. Overall, the website is professional, user-friendly, and trustworthy, with clear contact information and transparent pricing.

G

GLAMUS GmbH

glamus.de

66

GLAMUS GmbH is a medium-sized German technology company specializing in digital concepts and modern web technologies, including content management systems and communication applications. The company targets businesses and organizations seeking to modernize and future-proof their web presence. Their website reflects a professional and consistent brand image with clear service offerings and client references from reputable organizations. Technically, the site uses a modern JavaScript stack with jQuery and related libraries, providing good mobile optimization and accessibility features. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though improvements are recommended in security headers and incident response transparency. Privacy compliance is supported by a comprehensive GDPR-compliant privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy and well-maintained, with a legitimacy score of 85 based on domain and content analysis.

G

Global Advertising Lawyers Alliance

galalaw.com

65

Global Advertising Lawyers Alliance (GALA) is a professional network of lawyers specializing in advertising, marketing, and promotion law worldwide. The organization provides legal expertise and resources to individuals and corporations navigating complex advertising regulations. The website reflects a mature and globally oriented legal alliance with a focus on delivering legal solutions and information to its target audience of legal professionals, advertisers, and marketers. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and FontAwesome, hosted likely via GoDaddy infrastructure. The site is mobile-optimized and well-structured, though it lacks some advanced accessibility features and explicit cookie consent mechanisms. Security posture is moderate with HTTPS usage inferred but missing explicit security headers and DNSSEC. No direct contact emails or phone numbers are published, relying on contact forms and social media channels for communication. Overall, the domain registration data aligns well with the website's professional nature, indicating legitimacy and consistency.

B

Brand Finance

brandfinance.com

75

Brand Finance is a well-established UK-based consultancy specializing in brand valuation and strategy, with over 25 years of experience and ISO certifications (ISO 10668 and ISO 20671) that underscore its technical credibility. The company serves a broad audience including businesses, financial institutions, NGOs, and academics, offering services such as brand research, valuation, strategy, training, and sustainability consulting. The website reflects a professional and consistent brand image with comprehensive content and clear navigation.

P

PoiData

poidata.xyz

58

PoiData is a Canadian-based technology company specializing in providing comprehensive global Point of Interest (POI) data. Their service includes continuously updated, high-density datasets with geocoded addresses, categories, and contact information, offered under flexible perpetual licenses and subscription models. The company positions itself as a leader in fresh and customizable POI data, targeting businesses and organizations requiring accurate geospatial data worldwide. Technically, the website employs modern front-end technologies such as Bootstrap and jQuery, hosted via Cloudflare, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, though improvements in security and privacy transparency are recommended.

N

Nexxiot

nexxiot.com

53

Nexxiot is a Swiss-based TradeTech company specializing in IoT solutions aimed at enhancing operational efficiency in the supply chain, particularly focusing on railcars, shipping containers, and cargo monitoring in real-time. The company positions itself as a pioneer in asset intelligence for rail and intermodal logistics, targeting supply chain operators and logistics companies. Their business model is B2B, providing technology-driven monitoring services to improve supply chain visibility and efficiency. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO for optimization, Cookiebot for GDPR-compliant cookie consent management, and analytics tools such as Google Analytics, Hotjar, and Matomo. The hosting infrastructure leverages Microsoft Azure DNS services, indicating a reliable hosting environment. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms to comply with privacy regulations. However, explicit security headers are not detected, and no published security or incident response policies are found on the site. The use of multiple third-party scripts necessitates regular security audits to mitigate potential vulnerabilities. The WHOIS data is consistent with the business claims, showing a legitimate domain registration without privacy protection, which adds to the trustworthiness. Overall, Nexxiot's website reflects a professional and trustworthy online presence with good privacy compliance and a solid technical foundation. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance their security posture and user trust.

V

Videolabs

videolabs.io

45

Videolabs is a specialized technology company based in France, known as the expert team behind VLC. They provide professional multimedia solutions, custom development, and consulting services primarily targeting businesses and developers requiring advanced multimedia capabilities. Their market position is that of a niche expert with over 10 years of experience and a solid client base exceeding 50 customers. The website reflects a professional and consistent brand image with clear service offerings and client case studies. Technically, the website is built using the Hugo static site generator, leveraging modern JavaScript libraries such as Glide.js and AOS for UI effects, and uses Plausible Analytics for privacy-focused user tracking. The site is mobile optimized and performs moderately well, with good SEO practices and basic accessibility features. Hosting and domain registration are managed through Gandi SAS, a reputable registrar. From a security perspective, the website enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and published security policies such as privacy, cookie, or incident response policies. No forms or data collection mechanisms were detected, reducing some risk. The absence of vulnerability disclosure and security.txt files indicates room for improvement in transparency and security maturity. Overall, the website is trustworthy and professional with a strong business credibility score. The main risks relate to compliance gaps in privacy and cookie policies and missing security best practices. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing incident response contacts to enhance security posture and regulatory compliance.

S

SCAN-MATCH

captag.events

63

Captag, operated by SCAN-MATCH, is a French event technology company founded in 2012, providing a comprehensive platform for managing physical, hybrid, and digital events. Their services include event registration, RFID parcours, interactive questionnaires, live voting, web applications, VIP management, gamification, and more. The company targets B2B, B2C, VIP, associative, and retail sectors, boasting a strong client portfolio including Orange, Air France, Roland Garros, and Google. Technically, the website employs modern frameworks such as Bootstrap, jQuery, and Leaflet, hosted on Google Cloud Platform, with good mobile optimization and SEO practices. Security posture is strong, supported by ISO 27001 and ISO 20121 certifications, HTTPS enforcement, and a robust cookie consent mechanism. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is well addressed with clear policies and a dedicated DPO contact. Overall, Captag presents a professional, trustworthy, and mature digital presence aligned with its business claims.

M

Max Zeller Söhne AG

zellerag.ch

60

Max Zeller Söhne AG is a Swiss-based company specializing in the development and manufacturing of clinically proven herbal medicines. The company positions itself as a leading player in the Swiss herbal medicine market, targeting consumers interested in natural health and well-being solutions. Their website provides detailed product information, educational content on phytotherapy, and multiple language support, reflecting a mature digital presence. The business model focuses on product development, manufacturing, and retail distribution through online channels and physical outlets. The company maintains a consistent brand image and offers clear contact information and social media engagement.

M

Minnesota Pilots Association

mnpilots.org

64

The Minnesota Pilots Association is a well-established non-profit organization dedicated to promoting and protecting aviation interests in Minnesota. Their website serves as a hub for advocacy, education, scholarships, and community engagement for the state's aviation community. The organization targets a diverse audience including pilots, aviation professionals, students, and enthusiasts. The site reflects a consistent brand and professional content aligned with their mission. Technically, the website is built on WordPress using Oxygen Builder and integrates modern plugins for forms, payments, and anti-spam protection. The infrastructure is supported by Cloudflare as registrar and DNS provider, with HTTPS enabled and Stripe for payment processing. Security posture is adequate but could be improved by enabling DNSSEC and implementing security headers. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site is trustworthy and functional with room for compliance and security enhancements.

I

InkSoft

inksoft.com

64

InkSoft operates as a specialized e-commerce platform focused on businesses selling custom branded merchandise, including decorated apparel and promotional products. The company positions itself as a comprehensive solution provider, offering tools from order management to delivery, targeting apparel decorators, promotional product distributors, and print businesses. The website reflects a mature digital presence with extensive resources, customer testimonials, and integration partnerships, indicating a solid market position within its niche. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for UI and analytics. The site is mobile-optimized, SEO-friendly, and integrates marketing and tracking tools such as HubSpot and Google Tag Manager. Performance is moderate with good accessibility and user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response pages. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises some concerns about domain transparency and trust, although the website content and business information appear professional and consistent. Overall, InkSoft presents a trustworthy and professional online presence with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing incident response policies, and clarifying domain registration details to improve trustworthiness.

A

AIJ Magazine

aijmagazine.co.uk

60

AIJ Magazine is a specialized media publication serving the Guild of Architectural Ironmongers and related professionals in the UK construction and manufacturing sectors. The website provides industry news, features, opinions, and digital editions, positioning itself as a niche authoritative source within its market. The business operates under the parent company Atom and has been active since 2020, with consistent branding and good content quality tailored to its professional audience. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WP Rocket, and various JavaScript libraries for enhanced user experience and performance. Hosting is provided by 123-Reg Limited, a reputable registrar and hosting provider. The site demonstrates good mobile optimization, SEO practices, and fast loading times, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses some security plugins but lacks explicit security headers and published security policies. No cookie consent mechanism is present, which may impact privacy compliance. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency and readiness. Overall, the website is professional, trustworthy, and well-maintained, with moderate security posture and privacy compliance. Strategic enhancements in security headers, privacy mechanisms, and incident response documentation would strengthen its risk profile and compliance standing.

V

Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB)

alb-berguen.ch

52

The website represents the Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB), a small non-profit association founded in 2015 in Switzerland. It advocates for the interests of second-home owners and long-term tenants in the Bergün-Filisur region, fostering collaboration between local residents and external property owners. The site provides organizational information, event announcements, and contact details, targeting property owners and local stakeholders. Technically, the site is built on Drupal 10 with modern web technologies and includes Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, offering a good user experience. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is legitimate, trustworthy, and safe for general audiences.

E

eGiftify Inc.

egiftify.com

56

eGiftify Inc. operates a sophisticated white-label, omnichannel gifting and loyalty platform targeting hospitality, retail, and restaurant sectors. The company offers integrated digital gifting, loyalty, and engagement solutions designed to deepen customer relationships and boost brand awareness. Their platform supports multiple sales channels and integrates with popular POS and e-commerce systems, positioning them as a competitive player in the digital gifting market. Technically, the website is built on HubSpot CMS and leverages modern web technologies including Google Analytics 4, Hotjar, and Contentsquare for analytics and user behavior tracking. The site is mobile optimized with good SEO and accessibility basics, although some accessibility features could be enhanced. The technical infrastructure appears robust with fast loading times and a professional design. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a concern for domain legitimacy, but the professional web presence and partner endorsements mitigate some risk. Overall, eGiftify presents a credible and professional digital gifting solution with a solid technical foundation. To improve trust and security posture, the company should consider publishing detailed security policies, incident response contacts, and vulnerability disclosure information, as well as verifying domain registration transparency.

B

Blažek

blazek.sk

53

Blažek is a well-established Czech and Slovak menswear brand specializing in formal and casual men's clothing and accessories. The company operates a professional e-commerce platform complemented by physical stores and bespoke tailoring services. Their market position is strong within the regional retail sector, targeting fashion-conscious men seeking quality apparel and accessories. The website reflects a mature digital presence with modern technologies such as Google Analytics, Facebook Pixel, and various UI libraries enhancing user experience and marketing capabilities. Security posture is solid with HTTPS enforced and secure login forms, though some security headers and explicit incident response policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Blažek

blazek.cz

53

Blažek is a well-established Czech brand specializing in men's fashion, offering a wide range of formal and casual clothing and accessories. The company operates an e-commerce platform complemented by physical stores and bespoke tailoring services, positioning itself as a significant player in the Czech retail fashion market. The website reflects a professional and consistent brand image, targeting male customers seeking quality and style. Technically, the site employs modern web technologies and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence with room for enhanced security transparency.

W

Webland AG

webland.ch

67

Webland AG is a Swiss-based hosting provider established in 1998, offering a comprehensive range of web hosting, email hosting, domain registration, and cloud office services primarily targeting private individuals and businesses in Switzerland. The company emphasizes Swiss quality, security, and data sovereignty by operating all servers within Switzerland and being a BAKOM registered Internet Service Provider. Their market position is that of a trusted, established mid-sized hosting provider with a strong local presence and a broad service portfolio including Windows and Linux hosting platforms. Technically, the website leverages modern web technologies such as Bootstrap, jQuery, FontAwesome, and DotNetNuke CMS. It integrates advanced analytics and marketing tools including Google Analytics, Google Tag Manager, Google Ads, and Intercom for customer engagement. The site is mobile-optimized with good SEO and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the website uses HTTPS with excellent SSL configuration and offers security features like Web Application Firewall and SSL certificates including free Let's Encrypt options. However, there is room for improvement in implementing HTTP security headers and publishing explicit security policies or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, Webland AG presents a low-risk profile with strong business credibility, good privacy compliance, and a professional online presence. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve transparency and security posture further.

S

Savage

verysavage.com

58

Savage is a small, professional branding and digital design collective founded in 2019, offering services including branding, illustration, UI design, and video production. The company targets ambitious companies globally and maintains a strong portfolio with external links to Behance and social media profiles. Technically, the website uses modern front-end technologies such as Bootstrap 5, jQuery, Firebase, and Google Analytics, delivering a responsive and visually engaging user experience. Security posture is moderate with HTTPS implied but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.

P

Photon Energy Group

photonwater.com

48

Photon Water, a part of Photon Energy Group, offers specialized water treatment and environmental remediation solutions focusing on the removal of PFAS and other contaminants from water and soil. The company targets businesses and organizations requiring advanced water management technologies. The website presents a professional image with clear branding and relevant content, positioning itself as a niche player in the energy and environmental sectors. Technically, the website employs a modern JavaScript technology stack including Bootstrap, jQuery, and Google reCAPTCHA for bot protection. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices evident in meta tags and structured content. However, some accessibility features appear basic, and no CMS or hosting provider information is discernible. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks visible security headers and published privacy or security policies. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No contact information or incident response details are provided, limiting trust and compliance indicators. Overall, the website is functional and professional but would benefit from enhanced transparency, published policies, and improved security practices to strengthen trustworthiness and compliance posture.

P

Photon Energy Group

photonenergy.com

54

Photon Energy Group is a well-established renewable energy company specializing in solar power plant development, battery energy storage systems, energy trading, and flexibility solutions. With over 16 years of industry experience and operations in more than 15 countries, the company maintains a significant portfolio of photovoltaic assets and offers comprehensive services from project development to operations and maintenance. The website reflects a professional and modern digital presence with strong branding and clear communication of services and case studies. Technically, the site employs a modern technology stack including Google Tag Manager, reCAPTCHA, and various JavaScript libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and spam protection on forms, though it lacks some advanced security headers and explicit incident response or vulnerability disclosure pages. The absence of WHOIS data limits domain trust verification, but the overall business credibility remains high due to transparent business information, investor relations, and social media presence. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving domain registration transparency.

P

PSD Aero

psdaero.com

72

PSD Aero is a well-established French company specializing in the distribution and processing of metallurgical products for the aerospace, nuclear, and mechanical industries. With a strong international presence and partnerships with major aerospace players such as Safran and Airbus, PSD Aero positions itself as a first-tier supplier offering high-quality alloys and customized services. The company emphasizes quality, environmental sustainability, and supply chain acceleration to meet the demanding needs of its customers. Technically, the website employs modern web technologies including Bootstrap, Swiper.js, and Microsoft Clarity for analytics, ensuring a responsive and user-friendly experience. Security measures such as HTTPS, security headers, and secure forms are implemented, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and reliable digital presence for PSD Aero.

Iberica - Indústria de Componentes Metálicos S.A. is a medium-sized manufacturing company based in Portugal, specializing in steel and aluminum components for electric vehicles, automotive, and motorcycle industries, as well as producing bicycles for bike sharing services. Founded in 1964, Iberica has established itself as an internationally recognized supplier with a strong focus on quality and innovation. The website reflects a professional business presence with clear descriptions of its business areas, technology capabilities, and commitment to quality manufacturing. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and Elementor, with integrations for Google Analytics and cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks advanced security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were found. Privacy compliance is basic, with a privacy policy and cookie consent but no explicit GDPR data retention details or data protection officer contact. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, incident response transparency, and enhanced privacy compliance would further strengthen its posture.

E

ENVIPARTNER, s.r.o.

gisella.app

49

Gisella.app is a Czech-developed mobile mapping application designed for efficient field data collection, targeting municipalities, environmental researchers, sociological researchers, and educators. The app supports multiple GIS data formats and integrates with popular platforms such as Google Drive and WEGAS, positioning itself as a niche but valuable tool in the GIS and education sectors. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google reCAPTCHA, Hotjar, and Google Analytics, ensuring a functional and moderately performant platform. Security posture is solid with HTTPS enforced and anti-bot measures on the contact form, though it lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies, which should be addressed to improve trust and regulatory adherence. Overall, the domain registration aligns well with the business claims, enhancing legitimacy. Strategic improvements in privacy documentation, security headers, and incident response transparency would elevate the site's security and compliance maturity.

O

Obec Želešice

zelesice.eu

46

The website www.zelesice.eu serves as the official online presence of the municipal government of Želešice, a small village in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, public notices, news, events, and contact details. The site includes features such as a virtual tour, waste collection schedules, and a calendar of community events, reflecting a focus on community engagement and transparency. The presence of official contact information and social media links enhances accessibility and trust. Technically, the website is built on a modern stack including Bootstrap 5, jQuery, and various JavaScript libraries for UI enhancements like carousels and calendars. The site is mobile-optimized and demonstrates good accessibility and SEO practices. However, there is no visible implementation of advanced security headers, and no security.txt or incident response information is provided, indicating room for improvement in security posture. Security-wise, the site uses HTTPS, which is mandatory for trust and data protection. The lack of WHOIS data is due to EURid's privacy policies for .eu domains, which is common and justified for this type of entity. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies exist but lack active consent mechanisms. Overall, the site maintains a good balance of usability and security for a local government portal. The overall risk assessment is low, with recommendations to enhance security headers, implement cookie consent mechanisms, and provide clear incident response contacts to further strengthen trust and compliance. The domain registration appears legitimate and consistent with the website's purpose, supporting the site's credibility.

F

FitRuha.hu

fitruha.hu

48

FitRuha.hu is a specialized e-commerce retailer focused on fitness apparel, offering a curated selection of well-known brands such as NEBBIA, MOTIVATED, ADIDAS, and others. The website targets fitness enthusiasts primarily in Hungary and nearby regions, providing fast delivery and customer-friendly policies including free returns. The business operates since 2015, positioning itself as a niche player in the fitness clothing market with a consistent brand presence and clear contact channels. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, and other marketing and analytics tools. It uses a proprietary or custom CMS platform (Shopion.cz) and demonstrates good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and includes CSRF tokens in forms, alongside a comprehensive cookie consent mechanism compliant with GDPR. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, suggesting potential areas for enhancement. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong privacy compliance and business credibility. Strategic recommendations include improving security headers, enhancing accessibility, and considering a formal vulnerability disclosure policy to further strengthen security posture.

S

STUDIOELF

studioelf.at

44

STUDIOELF is a small creative agency based in Tirol, Austria, specializing in graphic design, web design, and branding services. The company targets businesses seeking to enhance their visual communication and brand identity, offering handcrafted and original design solutions. Their market position is regional with a strong local client portfolio and a professional online presence. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery, Bootstrap, and GSAP, providing a good user experience with multimedia content and responsive design. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and incident response information. The absence of WHOIS data is a notable gap, slightly impacting trust but not undermining the overall legitimacy given the professional site content. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website demonstrates a mature digital presence with room for security enhancements.

Z

ZÁŽITKUJEME s.r.o.

zazitkujeme.cz

48

Zážitkujeme s.r.o. is a Czech-based small enterprise specializing in leisure activities including courses, camps, expeditions, and rental of inflatable attractions primarily serving families, schools, and corporate clients in the Vyškov region. The company offers a diverse portfolio of outdoor and adventure experiences designed to provide memorable and safe activities. The website is built on WordPress with modern front-end technologies, providing a good user experience and mobile responsiveness. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements are recommended in security headers and formal privacy documentation. The absence of WHOIS data reduces domain trustworthiness, but the business content and contact information appear professional and consistent with a legitimate small business.

Z

ZÁŽITKUJEME s.r.o.

hradyvyskov.cz

49

Hrady Vyškov operates as a small local business specializing in the rental of inflatable castles and event organization services primarily targeting families and event planners in the Vyškov and Kelč regions of the Czech Republic. Their offerings include inflatable attractions, teambuilding agency services, catering, and children's camps. The website is built on WordPress with a modern technology stack including Bootstrap and various JavaScript libraries, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and formal security policies. The absence of WHOIS data limits domain trust verification, but the website content and contact information appear legitimate and consistent with a small business profile. Overall, the site is professional, user-friendly, and compliant with basic privacy regulations.

T

TEKNIKA-CZ, S.R.O.

teknika-cz.cz

58

TEKNIKA-CZ, S.R.O. is a Czech-based company specializing in the sale and servicing of industrial machinery for glass, stone, and wood machining, primarily representing Italian manufacturers such as INTERMAC and DIAMUT. The company targets industrial manufacturers and businesses requiring advanced machining technologies. Their market position is strengthened by exclusive distributorship rights in the Czech and Slovak Republics, offering a range of machines and water treatment technologies. The website reflects a professional B2B business model with clear product offerings and contact information. Technically, the website is built on WordPress with modern plugins and frameworks including Yoast SEO, Bootstrap, and Google Analytics integration. The site is mobile-optimized and uses lazy loading for images, contributing to moderate performance and good user experience. SEO practices are well implemented, and the site uses HTTPS with a good SSL configuration, though security headers are lacking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The absence of WHOIS data for the domain is a notable concern, limiting the ability to fully verify domain legitimacy and registration details. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced security practices and transparency regarding domain registration and incident response. Strategic improvements in these areas would strengthen the company's digital trust and security posture.

V

V klidu jedu

vklidujedu.cz

42

V klidu jedu is a small Czech Republic based business specializing in motorhome rental services primarily serving the Moravia region including Slavkov, Vyškov, and Brno. The company offers a modern, spacious motorhome with additional services such as parking space and secure bicycle storage. Their business model focuses on affordable, eco-friendly travel experiences with fair customer dealings and insurance coverage. The website reflects a localized niche market positioning with clear service descriptions and contact information. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for booking and contact forms. SEO is enhanced by Yoast SEO plugin and the site uses Google Tag Manager for analytics and tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security best practices such as HTTPS and honeypot anti-spam are implemented, but security headers are missing. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data limits domain trust assessment and no explicit security or incident response policies are published. Privacy and cookie policies exist but are basic, indicating room for improvement in GDPR compliance transparency. Overall, the website is professional and trustworthy for its business scope but would benefit from enhanced security headers, detailed privacy compliance documentation, and domain registration transparency to improve trust and security posture.

H

Hradby restaurant s.r.o.

hradby.cz

54

Restaurace Hradby is a small hospitality business based in the Czech Republic, specializing in Italian pizza baked in a wood-fired rotary oven, daily menus, weekend specialties, burgers, local beer, and accommodation services. The company operates a professional website with clear branding and an online ordering partner site. The website is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or security policies. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and business information appear consistent and professional. Overall, the site is functional and trustworthy for general users but would benefit from enhanced transparency and security documentation.

D

Doc Alliance

docalliance.org

48

Doc Alliance is a collaborative network of seven key European documentary film festivals focused on advancing and promoting the documentary genre. The organization supports diversity in documentary filmmaking and operates an international online distribution platform, Dafilms.com, specializing in European cinema. The website reflects a professional and consistent brand presence with clear information about festivals, awards, and news updates. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various UI enhancement libraries, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and published security policies suggests room for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. The WHOIS data is unavailable, which limits domain trust verification, but the website content and contact information indicate a legitimate cultural organization. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate scores on security and privacy compliance.