Security Directory

S

SMART Design | Gregic Advisory

digital-adviser.eu

49

SMART Design | Gregic Advisory operates as a specialized provider of advanced SMART web solutions based in Zagreb, Croatia. The company offers a range of services including customized web shops, web pages, and web applications designed with a focus on performance, security, and user experience. Their market position is that of a leader in SMART web solutions, targeting businesses and professionals seeking innovative digital presence. The website reflects a professional and modern approach with strong branding and client references including government entities. Technically, the site is built on WordPress using Elementor and OceanWP theme, integrating modern analytics and marketing tools such as Google Analytics, Hotjar, and HubSpot. The site is GDPR compliant with a detailed cookie consent mechanism and privacy policy. Security posture is good with HTTPS enforced and secure forms, though explicit security headers and incident response policies are not evident. The domain WHOIS data is missing, which raises some concerns about domain registration legitimacy, but the website content and business information support a credible operation. Overall, the site demonstrates a mature digital infrastructure with room for security enhancements and domain registration verification.

W

World Health Organization (WHO)

openwho.org

67

OpenWHO.org is a reputable online learning platform operated by the World Health Organization, focusing on public health emergency preparedness and response. It serves a global audience of health professionals and the public, providing authoritative training resources. The platform is well-branded, professionally designed, and leverages modern web technologies including React and Kaltura for media delivery. The domain registration is consistent with WHO ownership and the platform's founding date. Technically, the website demonstrates good digital maturity with responsive design, accessibility considerations, and integration of media analytics. However, there is room for improvement in security posture, notably the absence of DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is limited by the lack of explicit privacy and cookie policies in the analyzed content. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in security headers and privacy disclosures would strengthen trust. The platform does not engage in advertising or affiliate marketing, focusing solely on educational content. The website is safe for general audiences with no adult or questionable content. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, publishing clear privacy and cookie policies, and enhancing incident response contact visibility to improve compliance and security transparency.

V

Verband der Veranstaltungsorganisatoren e.V.

vdvo.de

59

The website vdvo.de represents the Verband der Veranstaltungsorganisatoren e.V., a German industry association focused on innovation within the MICE (Meetings, Incentives, Conferences, and Exhibitions) sector. The organization provides startup support, education, political advocacy, and sustainability initiatives tailored to the event industry. The site positions itself as a niche player supporting MICE innovation with a clear target audience of industry professionals and startups. The business model revolves around membership, education, and sector advocacy, with a small organizational size and a strong German regional focus. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and reCAPTCHA for security and analytics. The site demonstrates good mobile optimization, a professional design, and clear navigation, although accessibility features are basic. Performance is moderate, typical for a CMS-based site. Structured data in JSON-LD format enhances SEO and provides clear organization and local business information. From a security perspective, the site enforces HTTPS with HSTS enabled, uses Google reCAPTCHA to protect forms, and includes security headers. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and comprehensive privacy and cookie consent implementations, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data is minimal but consistent enough with the website's claims, supporting legitimacy. Overall, vdvo.de is a professionally presented, secure, and credible website for a specialized industry association. Strategic recommendations include adding explicit privacy and cookie consent policies, implementing a security.txt file, enhancing accessibility, and maintaining regular security audits to uphold compliance and trust.

F

Ferro Recycling

ferrorecycling.ch

25

Ferro Recycling is a Swiss non-profit association dedicated to promoting the recycling of steel packaging. The website serves as an informational platform targeting a general audience interested in environmental sustainability and recycling practices. It positions itself as a niche player within the Swiss recycling sector, focusing on awareness and stakeholder engagement rather than commercial activities. The site is multilingual, primarily in German, with French and Italian versions, reflecting its Swiss market focus. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Real Cookie Banner Pro for privacy compliance. The inclusion of WPML enables multilingual content delivery, enhancing accessibility for diverse Swiss audiences. The site integrates YouTube video content with appropriate consent mechanisms, demonstrating attention to privacy regulations.

The website nudgify.com is currently inaccessible, serving a 403 Forbidden error page protected by Cloudflare. Due to this access restriction, no substantive content, business information, or user-facing features are available for analysis. The domain is registered with Cloudflare since 2018, indicating a legitimate registration age and consistent hosting provider. However, the lack of accessible content prevents evaluation of the company's services, privacy compliance, or security policies. The presence of Cloudflare Insights indicates some level of analytics tracking, but no privacy or cookie policies are published. Overall, the site appears to be protected by a Web Application Firewall or access control, limiting visibility into its operations.

G

GECKO.DK ApS

geckobooking.dk

65

GECKO.DK ApS operates a professional and flexible online booking and administration system primarily targeting Danish businesses across various sectors. The company offers modular SaaS solutions that integrate booking, payment, marketing, and document management functionalities. With over 1000 customers and more than 20 million bookings processed, GECKO holds a solid market position in Denmark. The website reflects a mature digital presence with comprehensive content, customer testimonials, and clear contact information, supporting its credibility. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, Bootstrap for responsive design, and analytics tools such as Google Analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security best practices are observed with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with detailed privacy and cookie policies, indicating GDPR adherence. However, the absence of WHOIS data limits domain trust analysis. Overall, the website presents a low-risk profile with professional security and privacy practices. Strategically, GECKO should consider enhancing transparency by resolving WHOIS data visibility and implementing additional security headers. Continued focus on security, privacy, and customer support will sustain trust and competitive advantage in the SaaS booking market.

E

European Society for Vascular Surgery

esvs.org

10

The European Society for Vascular Surgery (ESVS) operates a professional website focused on vascular surgery education and professional development. The site targets vascular surgeons and healthcare professionals across Europe, providing resources, events, and membership services. The domain is well-established, created in 1997, and hosted by OVH sas, indicating a stable and legitimate presence in the healthcare sector. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies including Google Tag Manager and reCAPTCHA for security and analytics. The site demonstrates good SEO practices and moderate performance with mobile optimization. However, there is room for improvement in accessibility and security headers. Security posture is adequate with HTTPS enabled and domain status protections, but the absence of DNSSEC and some security headers suggests potential enhancements. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the website is professional and trustworthy with a solid business model as a non-profit medical society. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, and enhancing security headers to improve trust and compliance.

S

Sisačko-moslavačka županija

smz.hr

59

Sisačko-moslavačka županija operates an official regional government website providing comprehensive information about county administration, public projects, news, tenders, and contact details. The site targets residents, businesses, and public officials within the Sisak-Moslavina County in Croatia. The website is built on Joomla CMS with Helix Ultimate framework and uses modern web technologies including Bootstrap and jQuery. It features good mobile optimization and accessibility tools, including an accessibility menu and cookie consent mechanisms compliant with GDPR. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and well-aligned with its government function.

L

Ličko-senjska županija

licko-senjska.hr

52

Ličko-senjska županija is the official regional government entity for the Ličko-senjska County in Croatia. The website serves as the primary digital platform for disseminating public administration information, news, official documents, tenders, and transparency reports. It targets residents, businesses, and stakeholders within the county, providing comprehensive access to government services and updates. The site reflects a medium-sized government organization with a focus on regional development, public services, and community engagement. Technically, the website employs a modern tech stack including jQuery, Modernizr, Owl Carousel, and Google Fonts, built on a CMS platform by VIT. It is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security is robust with HTTPS enforced and a Content-Security-Policy header, although some additional security headers could enhance protection. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. The security posture is strong, with no detected vulnerabilities or exposed sensitive data. The site lacks a security.txt file and explicit incident response contacts, which are recommended for improved security transparency. The domain registration is consistent with the official government entity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, serving its public sector role effectively.

K

Krapinsko-zagorska županija

kzz.hr

58

Krapinsko-zagorska županija operates as the official regional government authority for the Krapinsko-zagorska County in Croatia. The website serves as a comprehensive portal providing residents, businesses, and visitors with access to administrative information, news, public tenders, official documents, and cultural and tourism promotion. The site targets a broad audience including local citizens and stakeholders interested in regional governance and services. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, Font Awesome, and various plugins enhancing user experience and functionality. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA for form protection, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source of regional government information.

Z

Zadarska županija

zadarska-zupanija.hr

47

Zadarska županija is the official regional government website for the Zadar County in Croatia, providing public administration and citizen services. The website serves as an information portal targeting residents and visitors of the region. It is built on Joomla CMS with the Helix Ultimate framework, utilizing modern web technologies such as Bootstrap, jQuery, and Font Awesome, ensuring a responsive and accessible user experience. The site demonstrates good technical maturity with HTTPS enforced and security headers implemented, reflecting a solid security posture. However, it lacks critical compliance documents such as a privacy policy and terms of service, which are essential for GDPR compliance and user trust. No contact emails or phone numbers were explicitly found, which may hinder user communication. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and compliance transparency.

A

ALSENTA s.r.o.

seeky.cz

36

Seeky.cz is a Czech-based B2B service operated by ALSENTA s.r.o. that specializes in identifying and converting website visitors into potential customers. The company targets businesses seeking to enhance their lead generation and sales conversion through visitor monitoring, targeted offers, and direct customer engagement. The website demonstrates a professional presence with a clear value proposition, client testimonials, and a multi-country reach across 40 countries with over 2000 users. Technically, the site employs modern web technologies including Bootstrap, jQuery, and multiple analytics tools such as Google Analytics and Matomo, alongside live chat support for customer engagement. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, indicating room for compliance improvement. WHOIS data is unavailable, which slightly impacts trust but does not detract from the overall professional presentation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and regulatory adherence.

A

American Chamber of Commerce in Croatia

amcham.hr

69

The American Chamber of Commerce in Croatia is a well-established non-profit organization founded in 1999, serving as the leading international business advocacy group in Croatia. The website reflects its role as a membership organization providing advocacy, networking events, business delegations, and public policy representation. The content is professionally presented in Croatian and English, targeting business professionals and international companies. The organization maintains a strong market position as a trusted voice for international businesses in Croatia.

P

PROFIREAL GROUP

profirealgroup.com

41

PROFIREAL GROUP is an international financial services provider with over 25 years of experience, operating primarily in Europe and Asia. The company offers consumer and business lending, investment development, and fintech-related financial solutions. Their market presence spans six countries with a large client base and extensive loan disbursement history. Technically, the website is built on WordPress with standard SEO and font technologies, delivering a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the professional content and social media presence support business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security transparency.

The website www.umbjournal.org serves as the official online presence for the academic journal 'Ultrasound in Medicine and Biology', published by Elsevier. It targets medical researchers, healthcare professionals, and academics interested in ultrasound technology and its applications in medicine and biology. The site provides access to scientific articles and related resources, supporting Elsevier's subscription-based academic publishing model. The branding and content quality are consistent with a professional academic publisher, reflecting a strong market position in healthcare publishing. Technically, the website employs modern web technologies including SPA frameworks, New Relic monitoring, and OneTrust for cookie consent management. The site is well-optimized for mobile devices and demonstrates good SEO practices. Hosting details are not explicitly available, but the infrastructure supports moderate performance and accessibility. From a security perspective, the site enforces HTTPS and integrates monitoring tools to track performance and errors. However, explicit security headers are not evident, and there is no public security policy or vulnerability disclosure program. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy linked to Elsevier's main site. No contact information or incident response details are directly available on the homepage. Overall, the website presents a low-risk profile with high legitimacy and professional standards. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving transparency around vulnerability disclosures to further strengthen trust and compliance.

A

Anthropic

anthropic.com

62

Anthropic is a public benefit corporation specializing in AI safety research and the development of reliable, interpretable, and steerable AI systems. The company positions itself as a leader in AI safety, offering both research insights and commercial AI products such as Claude. The website reflects a professional and modern digital presence, targeting AI researchers, developers, and enterprises interested in safe AI technologies. Technically, the site leverages modern web technologies including Webflow CMS, advanced analytics platforms, and interactive Lottie animations, indicating a mature and well-maintained infrastructure. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though some improvements in security headers and cookie consent mechanisms are recommended. Overall, the site demonstrates high professionalism and trustworthiness, though the absence of WHOIS data introduces a minor uncertainty in domain legitimacy. Strategic recommendations include enhancing privacy compliance, publishing terms of service, and providing clearer contact channels for incident response.

M

Medworld AG

scs-congress.ch

61

The Swiss College of Surgeons Annual Meeting 2026 website is a professionally designed platform promoting a major surgical congress in Luzern, Switzerland. It targets medical professionals and surgeons, providing comprehensive event information, registration, and program details. The site is multilingual and well-structured, reflecting a mature digital presence for a specialized healthcare event. The business behind the site, Medworld AG, is a recognized professional congress organizer, enhancing the site's credibility. Technically, the website employs modern web technologies including Bootstrap 5, Font Awesome 6, and October CMS, ensuring responsive design and good user experience across devices. SEO is supported by structured data and proper meta tags. Analytics are implemented via Google Tag Manager with IP anonymization, indicating moderate user tracking. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is detected, which is a gap for GDPR compliance. Contact information is clearly provided, supporting business credibility. Overall, the site is trustworthy, professional, and suitable for its audience, with recommendations to enhance privacy compliance and security headers to further strengthen its posture.

A

AFS Intercultural Programs

globalup.com

60

The Global Up website represents the AFS Intercultural Programs' Global Competence Certificate (GCC) initiative, a well-established non-profit educational program focused on developing global skills through blended learning. The site is professionally designed, content-rich, and targets students, educators, and professionals worldwide. It leverages modern web technologies including WordPress, Gravity Forms, and Google reCAPTCHA to provide a secure and user-friendly experience. The presence of multiple contact channels, social media integration, and downloadable resources enhances engagement and trust. However, the absence of WHOIS registration data for the domain www.globalup.com raises transparency concerns, although the website content and branding strongly align with the reputable AFS organization. Security posture is solid with HTTPS and CAPTCHA protections, but could be improved by implementing explicit security headers and formal incident response policies. Overall, the website is a credible and valuable resource for global competence education with moderate risk due to domain registration opacity.

P

platforma.one - Changing the way e-commerce is made

platforma.one

9

platforma.one is an e-commerce platform focused on enabling small businesses such as cafes, florists, and ceramic studios to easily set up online stores with a pay-when-you-sell model. The platform offers key services including digital gift cards, selling physical and digital products, paid bookings, and scheduling delivery slots. The website is professionally designed with good content quality and targets a niche market of small business owners seeking accessible e-commerce solutions. Technically, the site uses modern JavaScript modules, Google Fonts, and Google Tag Manager for analytics, hosted on Google Cloud DNS infrastructure. The site is mobile optimized and SEO friendly but lacks some accessibility features and security headers. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is supported by domain age and consistent content, though contact information is not provided on the homepage. Overall, the site is functional and professional but would benefit from improved privacy and security practices.

A

Atlaseek

atlaseek.com

9

Atlaseek hub is a specialized online marketplace platform designed to connect travel destinations with travel creators and influencers to facilitate marketing collaborations. The platform targets travel brands and tourism marketing teams seeking to leverage influencer marketing to reach Gen Z and millennial travelers. It offers verified metrics, campaign management, and a travel calendar to streamline collaboration scheduling. Technically, the website uses modern JavaScript modules, Vue.js framework, Google Fonts, Stripe for pricing, and Google Tag Manager for analytics. The site is mobile optimized and presents a professional design with good user experience. Security posture is moderate with HTTPS likely enabled but lacks visible security headers and explicit privacy or cookie policies. No WHOIS data is available for the subdomain hub.atlaseek.com, which is typical for subdomains, but limits domain registration trust signals. Overall, the site is safe, professional, and credible within its niche but would benefit from improved privacy compliance and security best practices.

C

Creative Heads

creativeheads.pl

9

Creative Heads is a small, Poland-based creative agency specializing in graphic design, web development, marketing, and multimedia services primarily serving the Trójmiasto region. The website presents a professional and visually appealing digital presence with a clear focus on creative solutions and client engagement. The technical infrastructure is built on WordPress with modern JavaScript libraries and tracking tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and DNSSEC, which could be improved. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security measures.

W

Whistlelink

whistlelink.com

10

Whistlelink is a technology company specializing in providing a secure, anonymous, and compliant whistleblower system designed to help organizations meet EU whistleblower protection laws and other regulatory requirements. The company offers a SaaS platform that includes anonymous reporting channels and intuitive case management tools, targeting medium-sized to large organizations across multiple industries. The website is professionally designed, multilingual, and includes comprehensive privacy and cookie policies, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Calendly for marketing and scheduling. Security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response policies are not evident. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site content and trust indicators such as G2 badges and social media presence. Overall, Whistlelink presents as a credible and professional compliance technology provider with room for improvement in transparency around security policies and domain registration details.

W

Webtemp

webtemp.no

60

Webtemp is a Norwegian-based software company specializing in providing a comprehensive web-based business system for staffing and recruitment firms. As part of Visma Talent Solutions, Webtemp offers a full suite of services including personnel recruitment, time tracking, invoicing, and digital resource allocation through modern web and mobile interfaces. The company positions itself as a market leader with over 25 years of experience, emphasizing secure and GDPR-compliant communication between clients and employees. The website reflects a professional and consistent brand image aligned with its parent company Visma.

V

Visma

visma.com

10

Visma is a leading enterprise software provider specializing in cloud-based business software solutions that simplify the work lives of entrepreneurs, businesses, and societies. The company operates primarily in the technology sector with a strong presence in Europe and recent expansion into Latin America through acquisitions such as Conta Azul. Visma offers a broad portfolio of services including cloud software, accounting, ERP, and public sector solutions, targeting small to large enterprises and partners. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding. Technically, the site leverages modern web technologies such as Webflow CMS, Google Tag Manager, and reCAPTCHA, ensuring good performance, mobile optimization, and security best practices. Security posture is strong with HTTPS enforcement, security headers, and published security policies, although the absence of a security.txt file and incomplete WHOIS data slightly reduce transparency. Privacy compliance is robust with comprehensive policies and consent mechanisms aligned with GDPR. Overall, Visma demonstrates a high level of business credibility and digital maturity, though domain registration transparency should be improved to enhance trust further.

T

TESTIMA, spol. s r.o.

testima.cz

44

Testima, spol. s r.o. is a Czech company specializing in nondestructive testing equipment and services, including sales, training, calibration, and servicing. With over 30 years of experience and ISO 9001 certification, it holds a stable market position serving industrial clients. The website is professionally designed, mobile-optimized, and provides clear contact and GDPR compliance information. Technically, it uses modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA to secure user interactions. Security posture is good with HTTPS and CSRF protections, though some security headers and policies could be improved. Overall, the site is trustworthy, compliant, and well-maintained.

V

VIRTUAL PLACE

virtualplace.cz

9

Virtual Place is a Czech-based technology company specializing in interactive virtual tour creation tools. Their platform enables users to build multimedia-rich virtual projects for business presentations, real estate, hospitality, and retail sectors. The website is professionally designed, mobile-optimized, and offers a user-friendly editing environment. However, the absence of privacy and cookie policies and missing WHOIS data slightly reduce trust and compliance confidence. Technically, the site uses common web technologies such as jQuery, Google Fonts, and Google Maps API, but lacks visible security headers and analytics integrations. Overall, the security posture is moderate with room for improvement in compliance and technical safeguards.

CDVUK.SK is a Slovak internet magazine established in 2016, providing a variety of articles covering education, home improvement, health, lifestyle, and other general interest topics. The website is built on WordPress CMS, hosted on Hostinger servers, and uses standard web technologies including jQuery and Google Fonts. The site demonstrates good SEO practices with structured data and meta tags, and content is regularly updated with author attribution. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is functional, safe, and serves a general Slovak-speaking audience with moderate professionalism and trustworthiness.

NECHTENASBYT.CZ is a Slovak online magazine providing content focused on home renovation, finance, energy, business, and lifestyle topics. The website is built on WordPress and features a variety of blog posts authored primarily by 'Magazín Admin' and other contributors. The site targets Slovak-speaking homeowners, investors, and professionals interested in practical advice and industry insights. Technically, the site uses standard WordPress technologies including jQuery and FontAwesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small media sites. Overall, the site is functional, content-rich, and moderately trustworthy but would benefit from enhanced privacy compliance and security best practices.

Sekce Výživy a nutriční péče, z. s. is a Czech registered non-profit association dedicated to nutrition and nutritional care in healthcare, social care, and community settings. The organization provides educational seminars, workshops, and collaborates with other professional bodies to improve nutritional standards. The website is built on WordPress with common plugins and presents professional content targeting healthcare professionals and students. Technically, the site uses modern web technologies and is mobile optimized, but lacks some security headers and privacy compliance features. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and partnerships indicate legitimacy. Security posture is moderate with HTTPS enabled and CAPTCHA on forms, but improvements are recommended in security headers and privacy policies. Overall, the site is functional and professional but should address compliance and transparency gaps to enhance trust.

Ř

Řízení letového provozu České republiky, s. p.

rlp.cz

61

Řízení letového provozu České republiky, s. p. is a state enterprise responsible for providing air traffic management services in the Czech Republic. The organization offers a broad range of services including aeronautical information management, drone safety information, free route airspace management, ATM training through CANI, flight inspection services, and pilot training via the Czech Aviation Training Centre (CATC). The website serves as a comprehensive portal for information, news, career opportunities, and service offerings targeted at aviation professionals, airspace users, and the general public interested in Czech aviation. The company holds recognized certifications such as EFQM and maintains partnerships with key European and international aviation organizations.

B

bb9

bb9.cz

40

bb9.cz is a small Czech web development business specializing in custom websites, e-shops, and municipal website solutions. The company emphasizes personal approach, professional service, and modern design, leveraging over 15 years of experience. The website is built on Joomla CMS with Gridbox builder and integrates Google reCAPTCHA for form security. The technical infrastructure is modern and mobile-optimized, though some improvements in accessibility and security headers are recommended. Security posture is solid with HTTPS and spam protection but lacks published privacy and cookie policies, which impacts compliance. Overall, the site presents a professional and trustworthy image suitable for its target audience of businesses and municipalities in the Czech Republic.

J

jiri zavadil

zavadil.pro

63

The website zavadil.pro represents a personal professional portfolio for Jiri Zavadil, specializing in ecommerce, branding, and UI/UX services. The site positions itself as a service provider targeting businesses and professionals seeking digital design and ecommerce solutions. The business model is service-oriented with a focus on delivering creative and technical solutions in the technology sector. The website features a clean, modern design with a portfolio of projects linking to partner or client sites, indicating active business engagements. Technically, the site uses modern web technologies including Vue.js framework, Google Fonts, and modular JavaScript. The site is mobile optimized and presents a good user experience with clear navigation and professional branding consistency. Google Tag Manager is implemented for analytics, indicating some level of digital maturity. However, there is room for improvement in SEO and accessibility features. From a security perspective, the site uses HTTPS as indicated by metadata URLs, but lacks visible security headers and published security policies. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. Contact information is limited to a single email address with no phone or physical address provided. WHOIS data is privacy protected, which is common for personal sites but reduces transparency. No WAF or blocking mechanisms were detected, and no vulnerabilities were identified from the content. Overall, the website is a professional personal portfolio with moderate digital maturity and security posture. Strategic improvements in privacy compliance, security headers, and expanded contact information would enhance trust and compliance. The domain registration appears legitimate but privacy protected, which is justified given the personal nature of the site.

Fine Europe operates a website built on WordPress using the Divi theme, targeting a European audience. The site content is minimal and lacks detailed business descriptions, contact information, or policies, which limits its transparency and user trust. Technically, the site uses modern web technologies including Google Fonts and reCAPTCHA, but lacks visible security headers and comprehensive privacy compliance features. The absence of WHOIS registrant data due to privacy protection further reduces the ability to verify the domain's legitimacy. Overall, the website presents a low maturity level in business communication and security posture, requiring significant improvements to enhance trust and compliance.

The European Specialist Nurses Organisation (ESNO) operates as a non-profit entity focused on advancing the role and sustainability of specialist nurses across Europe. Their website serves as a central hub for information on their congresses and events, targeting healthcare professionals, policymakers, and partners. The organization positions itself as a key influencer in European healthcare policy through knowledge exchange and advocacy. Technically, the website employs a modern but straightforward tech stack including Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. Security-wise, the site uses HTTPS and avoids collecting sensitive data via forms, but lacks advanced security headers and a cookie consent mechanism, which are areas for improvement. Overall, the site is professional, trustworthy, and well-aligned with its mission, though it could enhance privacy compliance and security posture.

R

RESPECT, a.s.

jsmerespect.cz

66

RESPECT, a.s. is a Czech Republic-based insurance brokerage company with a family-oriented business culture. The website focuses on career opportunities within the company, targeting job seekers interested in working in a supportive, regional environment. The company operates multiple regional offices and emphasizes personal growth and work-life balance. The website is professionally designed with clear navigation and strong branding consistency, reflecting a medium-sized enterprise with a solid market position in the insurance sector. Technically, the site uses modern JavaScript frameworks, font services, and Google Analytics with user consent, indicating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust analysis, but the website's professional presentation and contact transparency support its legitimacy. Overall, the site is safe, GDPR compliant, and trustworthy for its intended audience.

D

DELOR INTERNATIONAL, spol. s r.o.

delor.cz

43

DELOR INTERNATIONAL, spol. s r.o. operates a prestigious custom tailoring fashion salon based in the Czech Republic, specializing in luxury bespoke suits, shirts, and footwear for men and women. The company emphasizes tradition, high-quality French fabrics, and personalized customer service, positioning itself as a premium brand in the retail fashion sector. The website reflects a professional and well-structured digital presence built on WordPress with modern technologies and integrated marketing tools. Security measures include HTTPS and CAPTCHA protections, though some security headers and explicit privacy policies are missing. The absence of WHOIS registration data is a notable gap in domain legitimacy verification but does not detract from the professional appearance and business credibility of the site. Overall, the company demonstrates a solid market position with clear contact channels and a user-friendly interface.

U

UNICOM servis, spol. s r.o.

unicom-servis.cz

44

UNICOM servis, spol. s r.o. is a Czech manufacturing company specializing in stainless steel technologies for the food, pharmaceutical, and chemical industries. The website presents a professional image with clear contact information and a focus on industrial clients. The company appears to have a stable market position within its niche, offering specialized equipment and services. Technically, the website uses modern tracking and analytics tools such as Google Analytics and Google Ads, and it is served over HTTPS with a cookie consent mechanism in place. However, it lacks explicit privacy and terms of service policies, which are important for compliance and trust. Security posture is adequate with HTTPS but could be improved with additional security headers and incident response information. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

V

Víno & Styl

vinoastyl.cz

48

Víno & Styl is a Czech online magazine dedicated to wine, gastronomy, and travel lifestyle content. The website offers a variety of articles, event coverage, and thematic sections targeting wine enthusiasts and culinary aficionados primarily in the Czech Republic. The business operates as a niche media outlet with a small-scale digital presence and a consistent brand identity. Technically, the site is built on WordPress CMS with popular plugins for SEO and language translation, ensuring good mobile responsiveness and moderate performance. Security posture is adequate with HTTPS enabled and secure login forms, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the active social media presence and quality content suggest a legitimate operation. Overall, the site is professional and trustworthy but would benefit from enhanced privacy policies and security hardening.

H

HledamVino.cz

hledamvino.cz

42

HledamVino.cz is a Czech language media website dedicated to news, tips, and information about the world of wine, targeting wine enthusiasts and professionals primarily in the Czech Republic and Slovakia. The site offers a variety of content including news articles, blogs, event calendars, and an encyclopedia related to wine. It maintains an active presence on social media platforms such as Facebook, Instagram, and Twitter, enhancing its reach and engagement. Technically, the website is built on WordPress with common plugins for SEO and cookie compliance, delivering a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers and incident response information are lacking. The absence of WHOIS data and use of a generic email address slightly reduce business credibility, but the overall content quality and trust indicators support a legitimate and professional operation. Strategic recommendations include improving security headers, verifying domain registration details, and adding comprehensive terms of service and incident response policies.

S

Samstöðin

samstodin.is

54

Samstöðin is a small Icelandic media platform established in 2020, focusing on radical social discourse and providing alternative news, opinion articles, and video content. The website targets Icelandic-speaking audiences interested in political and social issues not covered by mainstream media. The business model includes content publication and subscription services. Technically, the site is built on WordPress with common plugins and uses HTTPS with a valid SSL certificate, hosted by an Icelandic hosting provider. The site is mobile optimized and has good SEO practices but lacks some advanced accessibility features. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. No contact emails or phone numbers are provided, which may affect user trust. Overall, the site is legitimate and consistent with its domain registration data, but improvements in security and privacy compliance are recommended.

I

IngenCO2.dk

minskaco2.se

53

IngenCO2.dk operates the CO2 Neutral Website certification service, enabling website owners to offset their digital carbon footprint by supporting globally recognized sustainability projects certified by Gold Standard. The company positions itself as a trusted provider with over 32,000 websites certified, offering branding benefits and verified CO2 neutrality through annual audits by BDO. The website is professionally designed, multilingual, and leverages modern web technologies including Next.js and Sanity.io CMS, ensuring a fast and responsive user experience. Security measures include HTTPS and Google reCAPTCHA v3, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain www.minskaco2.se raises concerns about domain registration legitimacy, warranting further investigation. Overall, the business demonstrates strong sustainability credentials and market presence, but domain registration transparency should be improved.

The website 'India MS Map' is a non-profit initiative by the Multiple Sclerosis Society of India aimed at crowd-sourcing data about people living with Multiple Sclerosis in India. It serves as an awareness and data collection platform targeting patients, healthcare professionals, and researchers. The site is built on WordPress and uses common web technologies such as jQuery, Smart Slider 3, and AmCharts for interactive mapping. Hosting appears to be via Bluehost, inferred from the domain structure. The website is accessible without any WAF or security challenge blocking access. However, there is a lack of transparency in domain registration data due to privacy protection or malformed WHOIS responses, which impacts trustworthiness. No privacy or cookie policies are present, and no contact information is explicitly provided, which are gaps in compliance and user trust. Security headers and advanced security configurations are absent, indicating room for improvement in security posture.

W

Windway OÜ

kodulehetegemine.net

10

Windway OÜ operates the website kodulehetegemine.net, providing website creation, e-commerce development, SEO, and digital marketing services primarily targeting Estonian businesses and individuals. The company has been established since 2013 and maintains a professional online presence with over 100 satisfied clients, as evidenced by testimonials and client logos. The website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, indicating a moderate level of digital maturity and technical infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the website uses HTTPS and has domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended to enhance security posture. No privacy or cookie policies are present, representing a compliance gap with GDPR and related regulations. Google Analytics is used for user tracking, but no explicit cookie consent mechanism is implemented. Overall, the website is functional, professional, and trustworthy, but improvements in security hardening and privacy compliance are advised to reduce risk and enhance user trust. The domain registration data aligns well with the business claims, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

MTÜ Eesti Bioanalüütikute Ühing is a well-established non-profit organization founded in 1992, serving bioanalysts and healthcare laboratory professionals in Estonia. The organization provides professional training, certification, and promotes international cooperation, holding memberships in recognized international bodies such as IFBLS and EPBS. The website reflects a professional and focused presence with relevant content and event announcements, targeting healthcare professionals and students in the bioanalysis field. Technically, the website is built using a Sitebuilder CMS with JavaScript and jQuery, hosted by Radicenter OÜ. It uses Google Fonts for typography and has moderate performance and good mobile optimization. However, it lacks advanced technical frameworks and accessibility features, and SEO optimization is basic. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and published security policies. There is no privacy or cookie policy, nor incident response or vulnerability disclosure information, which are compliance gaps. The domain is secured with HTTPS (assumed from base href), but no explicit SSL configuration details were found. The WHOIS data shows a consistent and long-standing domain registration with a reputable registrar, supporting legitimacy. Overall, the website is professional and trustworthy for its niche audience but would benefit from improved privacy compliance, security best practices, and enhanced technical features to strengthen its security posture and user trust.

Eesti Operatsiooniõdede Ühing is a voluntary and independent national association dedicated to the development of perioperative nursing in Estonia. The organization focuses on professional development through training days, conferences, and representing perioperative nurses. The website reflects a small-sized non-profit entity with a clear mission and target audience within the healthcare sector in Estonia. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, providing a modern and mobile-optimized experience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

M

MeDiLa spol. s r.o.

mojemedila.cz

60

MeDiLa spol. s r.o. operates a Czech network of clinical laboratories offering comprehensive laboratory diagnostic services primarily targeting individuals seeking premium health testing solutions. The company provides a variety of health screening packages, vitamin and hormone testing, and corporate health benefits, positioning itself as a reputable regional healthcare provider in the Czech Republic. The website is professionally designed with clear navigation, detailed product information, and multiple customer engagement points including social media and newsletter subscription. Technically, the site leverages modern web technologies such as Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a responsive and secure user experience. Security measures include HTTPS enforcement, anti-CSRF tokens, and CAPTCHA integration, although some security headers are not explicitly detected. Privacy and cookie policies are present and indicate GDPR compliance. However, WHOIS data is unavailable, which slightly impacts trustworthiness but does not detract from the professional presentation and business legitimacy. Overall, the website demonstrates a solid digital maturity with room for improvement in security transparency and incident response documentation.

R

Ritter Elektrotechnik GmbH

ritter-elektrotechnik.com

66

Ritter Elektrotechnik GmbH is a specialized German company focused on providing renewable energy solutions including photovoltaic systems, energy storage, and electric vehicle charging stations. The company targets both private and commercial customers, emphasizing sustainable energy and cost savings. Their market position is supported by over 1400 completed projects and a significant installed capacity, reflecting a solid regional presence. The website content is professionally presented, with clear service descriptions and multiple contact channels, supporting a trustworthy business image. Technically, the site is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, PostHog analytics, and Weglot for multilingual support. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is good with HTTPS enforced and use of Cloudflare Turnstile captcha, but lacks explicit security headers and formal security policies. WHOIS data is missing, which raises concerns about domain legitimacy and registration status, warranting further investigation. Overall, the website is professional and functional but could improve privacy compliance and security transparency.

S

Sun4energy Heinz Streit GmbH

sun4energy.ch

47

Sun4energy Heinz Streit GmbH is a small Swiss company specializing in sustainable energy solutions, primarily focusing on photovoltaic systems, carport solar systems, and wind power installations. The company operates regionally in the Seeland area, offering comprehensive consulting, planning, and turnkey installation services for solar energy projects. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress with a custom theme, uses modern web technologies, and integrates Google Analytics for visitor tracking with appropriate cookie consent mechanisms. Security posture is solid with HTTPS enforced, though some security headers and formal policies are absent. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

J

Junod Wasser + Wärme AG

junodag.ch

48

Junod Wasser + Wärme AG is a Swiss-based company specializing in energy-related services including solar panel installations, heating systems, sanitary installations, and building modernization. Established in 1990, the company serves the Wil region with a focus on sustainable and efficient energy solutions. Their website reflects a professional and consistent brand image, highlighting partnerships with reputable energy and solar companies, which strengthens their market position as a regional specialist. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and mobile responsiveness. The site uses HTTPS with an excellent SSL configuration, but lacks some security headers and cookie consent mechanisms, which are areas for improvement. No tracking or advertising scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, the absence of published security policies, incident response information, and vulnerability disclosure mechanisms suggests room for maturity in security governance. The WHOIS data is consistent with the business claims, showing a legitimate and established domain. Overall, the website is trustworthy, professional, and well-maintained, but could enhance compliance and security posture by implementing cookie consent, security headers, and publishing relevant policies.

Ö

ÖKO-HAUS GmbH

oeko-haus.com

50

ÖKO-HAUS GmbH is a small German company specializing in photovoltaic systems, battery storage solutions, and system services primarily serving the Unterallgäu region. The company positions itself as a regional expert in renewable energy solutions, targeting both residential and commercial customers interested in sustainable energy technologies. Their website is professionally designed using WordPress with the Divi theme, incorporating SEO best practices and cookie consent mechanisms to comply with privacy regulations. However, the absence of a visible privacy policy and terms of service pages indicates room for improvement in compliance transparency. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and incident response information, which could be enhanced to strengthen its security posture. The WHOIS data is missing or indicates the domain may not be registered, which is inconsistent with the active website presence and lowers trustworthiness from a domain registration standpoint. Overall, the website is functional, informative, and well-structured but would benefit from improved compliance documentation and security hardening.