Security Directory

A

AS Eesti Raudtee

evr.ee

69

AS Eesti Raudtee is a state-owned enterprise responsible for the management, maintenance, and administration of Estonia's railway infrastructure. The company plays a critical role in ensuring smooth, efficient, and safe railway operations across the country. Their website reflects a professional and consistent brand image, targeting a broad audience including business clients, passengers, and potential employees. The site offers key services such as infrastructure information, project updates, job vacancies, and customer portals. Technically, the website is built on Joomla CMS with modern frontend technologies and integrates Google Analytics and Adform for analytics and advertising, all managed with a robust cookie consent mechanism. Security-wise, the site enforces HTTPS, uses bot protection cookies, and shows no signs of exposed sensitive data or vulnerabilities. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the website is well-structured, performant, and trustworthy, supporting the company's position as a key national transportation infrastructure operator.

M

Meeskonnakoolitus ja Arendus OÜ

meeskonnakoolitus.ee

37

Meeskonnakoolitus ja Arendus OÜ is an Estonian company specializing in team training and organizational development services. Their offerings include multi-day team training, experiential learning, consulting, mentoring, and coaching aimed at improving cooperation, leadership, and communication within organizations. The company targets Estonian businesses seeking to enhance team dynamics and leadership skills. The website is built on Joomla CMS with Bootstrap and jQuery, featuring a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and CSRF tokens in forms, but the use of outdated JavaScript libraries and lack of security headers present moderate risks. Privacy and cookie policies are not found, indicating compliance gaps. Contact information and social media presence are clearly provided, supporting business credibility.

L

Lumi Capital

lumicapital.eu

43

Lumi Capital is a Baltic real estate company specializing in the development and management of residential rental apartment buildings across Tallinn, Riga, and Vilnius. Managing a portfolio of approximately 2000 apartments, the company partners with institutional investors such as insurance companies and pension funds. Their business model focuses on long-term rental housing with an emphasis on sustainability, innovation, and digital services, positioning themselves as a preferred brand for urban renters valuing flexibility and community. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, integrating Google Analytics for user tracking. The site is mobile-optimized and presents a professional design with clear navigation. While performance is moderate, the technical stack is modern and well-maintained. From a security perspective, the site enforces HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit security headers and published security policies or incident response contacts. Privacy compliance is partial, with a cookie consent banner present but no dedicated privacy or terms of service pages. The WHOIS data is unavailable due to EURid privacy restrictions, but the website content and business information appear legitimate and consistent. Overall, Lumi Capital's digital presence reflects a professional real estate business with good technical implementation and moderate security posture. Enhancements in privacy documentation, security headers, and incident response transparency would strengthen trust and compliance.

S

SPN - Pedagogické nakladatelství, a.s.

spn.cz

58

SPN - Pedagogické nakladatelství, a.s. is a Czech educational publishing company specializing in textbooks and digital learning materials for preschool, primary, and secondary education. The company maintains a professional and content-rich website built on Joomla CMS, featuring modern frontend technologies such as Bootstrap and jQuery. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Contact information and social media presence enhance its credibility. However, WHOIS data is unavailable, which slightly reduces transparency but is common for domains under the CZ NIC registry. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved.

N

Nakladatelství Fortuna

fortuna.cz

62

Nakladatelství Fortuna is a Czech educational publishing house specializing in textbooks and educational materials for primary and secondary schools. It operates under the parent company SPN – pedagogické nakladatelství since 2021. The website serves as an informational portal and gateway to their e-shop, offering a variety of educational resources. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap and Font Awesome, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and GDPR-compliant cookie consent, though lacks explicit security headers and incident response information. The absence of WHOIS data slightly reduces domain trust but the website content and contact details are consistent with a legitimate educational publisher. Overall, the site is professional, well-structured, and serves its target audience effectively.

D

DRP

bureaudrp.nl

45

DRP is a well-established creative design agency based in Assen, Netherlands, specializing in graphic design, website creation, branding, and digital communication solutions. With over 25 years of experience, the company serves a diverse clientele including government, businesses, and organizations. Their website reflects a professional and consistent brand image, offering clear navigation and comprehensive service descriptions. Technically, the site is built on Joomla CMS with modern web technologies such as Gridbox, FontAwesome, and Google Analytics integration, ensuring a good user experience and mobile responsiveness. Security posture is strong with HTTPS enforced, DNSSEC enabled, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with accessible privacy and cookie policies and GDPR adherence. Overall, DRP demonstrates a credible and trustworthy online presence with solid business and technical foundations.

L

LITNET

eduroam.lt

60

Eduroam.lt is a Lithuanian academic network service provider affiliated with the international eduroam project, delivering secure wireless internet access to educational and research institutions. The website serves as an information and support portal for institutions and users to connect to the eduroam WiFi service, providing instructions, service descriptions, and contact details. The platform targets academic institutions, students, and staff, facilitating seamless roaming internet access nationally and internationally. The business model focuses on service provision and technical support within the education sector, positioning itself as a key national player in academic network services.

L

Lietuvos regioninių atliekų tvarkymo centrų asociacija

ratca.lt

44

The Lietuvos regioninių atliekų tvarkymo centrų asociacija (LRATCA) is a Lithuanian non-profit association dedicated to the development, advocacy, and cooperation of regional waste management centers across Lithuania. The organization acts as a representative body for its members, engaging with governmental institutions and international forums to promote effective waste management systems. The website reflects a professional and consistent brand presence, providing relevant news, information about the association's goals, and links to member organizations. Technically, the site is built on Joomla CMS with modern frameworks and libraries, ensuring good mobile responsiveness and SEO optimization. Security posture is strong with HTTPS and appropriate security headers, complemented by GDPR-compliant privacy and cookie policies. However, the absence of direct contact information and security incident response details limits transparency. WHOIS data is unavailable due to query restrictions, but the domain appears legitimate and consistent with the organization's profile.

L

Lietuvos ekonomikos dėstytojų asociacija

leda.lt

47

Lietuvos ekonomikos dėstytojų asociacija (LEDA) is a Lithuanian non-profit academic association established in 2003, uniting economics lecturers to collaborate on professional development, knowledge sharing, and organizing academic events. The website is built on Joomla CMS and employs modern web technologies including jQuery, Smart Slider 3, and Google reCAPTCHA v3 to enhance user experience and security. The site is accessible, mobile-optimized, and provides structured navigation, although explicit privacy and terms of service pages are not found. Security measures include HTTPS and CAPTCHA protection on forms, but could benefit from additional security headers and published policies. WHOIS data is unavailable due to query limits, limiting domain legitimacy assessment. Overall, the website presents a professional and trustworthy front for the association, with room for improvement in privacy compliance and security transparency.

J

JSC "Tanagra"

tanagra.lt

41

JSC Tanagra is a Lithuanian company specializing in the supply and distribution of automotive spare parts and related services, including a network of workshops and technical assistance on the road. The company targets automotive service centers, spare parts stores, wholesale buyers, and end customers. Their business model combines wholesale and retail sales with an online order management system to streamline parts procurement. The website reflects a medium-sized enterprise with a consistent brand presence and established supplier partnerships. Technically, the site is built on Joomla CMS, uses common analytics and social media integrations, and enforces HTTPS for secure communications. However, it lacks some modern security headers and comprehensive privacy documentation. The security posture is moderate with room for improvement in policy transparency and technical safeguards. Overall, the website is professional and trustworthy, though WHOIS data unavailability limits full domain legitimacy verification.

N

Nova Fabrica Ltd

novafabrica.biz

55

Nova Fabrica Ltd is a specialized technology and manufacturing company focused on advanced vacuum, plasma, and surface engineering solutions. Their offerings include critical subsystems and components for OEM vacuum coating and plasma processing systems, targeting production yield optimization, energy efficiency, and quality assurance. The company positions itself as a niche provider with unique in-house developed products and complementary third-party components, serving a global industrial audience. Technically, the website is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is well-designed, mobile-optimized, and provides clear navigation and detailed product information. Security posture is solid with HTTPS and domain locking, but lacks DNSSEC and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service documents. Overall, the website reflects a credible and professional business presence with room for improvement in compliance and security transparency.

A

Armada Dynamics

armadadynamics.com

57

Armada Dynamics is a Norwegian-based software company specializing in rental management solutions integrated with Microsoft Dynamics 365 Business Central. Established in 2010, the company offers tailored software packages such as EQM 365 Rental to rental companies across various industries including construction, medical equipment, and events. Their market position is strong, supported by Microsoft Gold Partner certification and memberships in major rental associations. Technically, the website is built on Joomla CMS with modern UIkit framework and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS, CSRF protection, and obfuscated emails, though security headers and incident response information are lacking. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

D

DEPS

deps.ua

56

DEPS is a Ukrainian system integrator and distributor specializing in telecommunications equipment, security systems, measurement instruments, wireless devices, and IoT solutions. The company serves a broad target audience including telecommunications providers, security installers, and energy sector businesses. Their website demonstrates a solid market position with extensive product catalogs and partnerships with multiple well-known brands. Technically, the site is built on Joomla CMS and leverages modern JavaScript libraries and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and includes CSRF tokens, but lacks visible security policies, vulnerability disclosures, or incident response information, which are areas for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

Terra IT is a Lithuanian IT company specializing in business management software solutions tailored for various industries such as transport, logistics, manufacturing, and services. Their product portfolio includes ERP systems, project management, transport management, equipment maintenance, and personnel task management systems. The company targets businesses of all sizes within Lithuania, offering both onsite and remote services. The website is professionally designed, mobile responsive, and provides comprehensive information about their services and products. Technically, the website is built on Joomla CMS with Bootstrap 4 framework, integrating modern tools such as Google Analytics, Google Tag Manager, reCAPTCHA, Tawk.to live chat, and Hotjar for analytics and user interaction. The site uses HTTPS with good SSL configuration and employs security best practices like CSRF tokens and CAPTCHA on forms. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a solid baseline with no visible vulnerabilities or exposed sensitive data. Privacy compliance is addressed with a cookie consent banner and a privacy policy page in Lithuanian, indicating GDPR awareness. Contact information is clear and consistent with business operations, enhancing trustworthiness. WHOIS data is unavailable due to query limits, but the domain appears legitimate with privacy protection likely justified for this business type. Overall, Terra IT's website reflects a credible, professional IT service provider with a good security posture and compliance awareness. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance trust and resilience.

K

KAL ATM Software

kal.com

58

KAL ATM Software is a globally recognized provider specializing in multivendor ATM software and security solutions tailored for banks and financial institutions worldwide. The company positions itself as a world leader in ATM software, offering comprehensive solutions that enhance ATM security and operational efficiency. Their website reflects a professional and multilingual approach, targeting a diverse international banking audience. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and integrates standard analytics and marketing tools such as Google Analytics and LinkedIn Insight. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the website enforces HTTPS and includes CSRF protections but lacks some advanced security headers and a dedicated security policy or incident response page. The WHOIS data is not publicly available, which slightly impacts trust but is mitigated by the professional online presence. Overall, the website is well-structured, secure, and compliant with privacy regulations, making it a credible platform for its business domain.

M

Metalbazar.Com

metalbazar.com

32

Metalbazar.com operates as an online marketplace specializing in steel billets and various metal products including copper and aluminum. Founded in 2006, it targets mills, suppliers, traders, and agents within the manufacturing sector. The platform facilitates buy and sell offers for a wide range of steel and metal commodities, positioning itself as a niche trading service in the metal manufacturing industry. The website content is primarily in English with some multilingual elements, reflecting a diverse target audience. The business model centers on connecting buyers and sellers through an online portal, with no direct e-commerce transactions visible on the homepage.

V

Vilniaus universitetas

vu.lt

61

Vilniaus universitetas is a prestigious Lithuanian higher education and research institution offering world-class academic programs and scientific activities. The university targets students, researchers, and academic partners, maintaining a strong market position as a leading university in Lithuania. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site uses Joomla CMS with modern libraries such as jQuery and Bootstrap, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with detailed policies and opt-in consent. Overall, the site is professional, trustworthy, and well-maintained, supporting the university's reputation and outreach.

B

Breconcherry

breconcherry.com

58

Breconcherry is a specialized manufacturer of tank cleaning equipment with a history spanning over 45 years. The company offers a range of cleaning solutions including orbital, rotary, and static cleaners targeting industrial sectors such as food and pharmaceuticals. Their website reflects a professional and consistent brand presence, emphasizing sustainable cleaning practices and resource efficiency. The business appears to be a small-sized entity, possibly under the umbrella of the larger GEA Group, based on product references. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, delivering a moderate performance and good mobile optimization. The site employs Google Analytics for visitor tracking and uses CookieYes for cookie consent management, demonstrating compliance with privacy regulations. However, no explicit security or incident response policies are published, and DNSSEC is not enabled, representing minor security gaps. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the absence of advanced security headers and incident response contacts suggests room for improvement. The domain is long-established and registration data aligns with the business profile, supporting legitimacy. Overall, the website is functional, secure, and compliant with privacy norms, but could enhance transparency and security practices further.

B

Business Center

businesscenter-01.com

51

Business Center 01 is a well-established business center located in the Pays de Gex region near Geneva, offering a variety of services including office and meeting room rentals, domiciliation, accounting, translation, and telephone services. The company targets businesses and professionals seeking flexible office solutions close to international hubs. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to its audience. Technically, the site runs on Joomla CMS with modern libraries such as Bootstrap and jQuery, hosted by PlanetHoster. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is minimal with no visible cookie consent or explicit GDPR statements, though a privacy policy is likely present in the legal notice page. Overall, the website and domain registration indicate a credible and trustworthy business with room for enhanced security and privacy practices.

D

DIS Congress Service A/S

discongress.com

52

DIS Congress Service A/S is a professional congress organizer (PCO) based in Denmark, specializing in comprehensive conference management services. Established in 1952, the company offers a wide range of services including project management, hybrid conferences, online registration, social and cultural events, venue and hotel arrangements, abstract handling, exhibition and sponsorship, finance, and marketing. The company targets organizations planning conferences and large meetings, leveraging its extensive experience and strong local supplier relationships to deliver reliable event solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content.

C

Concept Data a/s

conceptdata.dk

50

Concept Data a/s is a Danish IT company specializing in the resale and consultancy of the Uniconta ERP system, alongside comprehensive IT infrastructure solutions. Established in 1998, the company positions itself as the most experienced Uniconta reseller in Denmark, offering expert consultancy, support, programming, and training services. Their business model focuses on B2B services targeting companies seeking robust ERP and IT infrastructure solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation, primarily in Danish. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and integrates various third-party tools such as Zendesk, Google Tag Manager, and Sleeknote for customer support and marketing. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and explicit security headers, which are recommended for improvement. Overall, the security posture is solid but could benefit from enhanced security policies and headers. Privacy compliance is demonstrated through a comprehensive GDPR policy, though cookie consent mechanisms are not clearly implemented. The domain's WHOIS data aligns well with the business claims, indicating legitimacy and trustworthiness. Strategic recommendations include enabling DNSSEC, implementing security headers, and adding explicit incident response and vulnerability disclosure policies to strengthen trust and compliance.

E

EG Danmark A/S

sd.dk

52

Silkeborg Data, operated by EG Danmark A/S, provides specialized payroll and personnel administration solutions tailored for Denmark's public sector, including municipalities and regions. Their offerings focus on streamlining administrative processes with integration capabilities for economic and ESDH systems, positioning them as a key player in the Danish government software market. The website reflects a professional and consistent brand presence with clear contact information and relevant business descriptions. Technically, the site is built on Joomla CMS with Yootheme and UIkit frameworks, incorporating Matomo analytics for user insights. The site is mobile-optimized and demonstrates good SEO and accessibility basics. Security posture is solid with HTTPS enforced and CSRF protections, though it lacks visible security headers and published security policies. Privacy compliance is partial, with a privacy policy linked but no cookie consent mechanism despite analytics usage. Overall, the domain registration aligns well with the business entity, supporting legitimacy and trustworthiness.

J

Jyske Rum ApS

jyskindretning.dk

67

Jyske Rum ApS operates the website jyskindretning.dk, providing specialized commercial interior design and acoustic solutions primarily targeting businesses in Denmark. Established in 2009, the company has a solid market presence with over 1000 projects and notable clients such as TV2 and Dansk Metal. The website reflects a professional business model focused on B2B services including office, clinic, lounge, and canteen interior design with an emphasis on acoustic optimization. Technically, the site is built on Joomla CMS with Yootheme templates, leveraging modern libraries like jQuery and UIkit, and integrates analytics tools such as Matomo and Google Analytics. The site is mobile-optimized and accessible with good SEO practices. Security posture is sound with HTTPS enforced, cookie consent mechanisms, and privacy policies aligned with GDPR requirements. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy online presence. Strategic recommendations include enabling DNSSEC and enhancing security headers to further strengthen security.

G

GGD Twente

ggdtwente.nl

60

GGD Twente is a regional public health organization in the Netherlands focused on promoting health and wellbeing in the Twente region. Their website provides comprehensive information on infectious diseases, vaccinations, children's health, sexual health, and contact resources. The organization maintains a strong market position as a trusted public health authority with a clear mission to keep the population as healthy as possible. The website targets residents and health professionals in the region, offering accessible and relevant health information and services. Technically, the site is built on Joomla CMS with modern frontend frameworks like Bootstrap and jQuery, enhanced by Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and well-structured, supporting a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies are absent. Privacy compliance is good with clear privacy and cookie policies, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's public health mission.

L

Latvijas Ritenbrauksanas federacija

lrf.lv

42

Latvijas Ritenbrauksanas federacija operates as the official Latvian Cycling Federation, managing cycling sports activities, licensing, and national teams within Latvia. The website serves as an information hub for athletes, clubs, and organizers, offering news, event calendars, licensing details, and training opportunities. The organization holds a clear national position as the governing body for cycling sports in Latvia and the Baltic region. Technically, the website is built on Joomla CMS with common front-end libraries such as jQuery, Font Awesome, and Owl Carousel. The site is moderately performant and mobile-optimized, with good navigation and content relevance. However, there is room for improvement in accessibility and SEO. From a security perspective, the site lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The WHOIS data is transparent and consistent with the organization's identity, enhancing legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is professionally maintained with good business credibility but should enhance its privacy compliance and security posture to meet modern standards and regulatory requirements.

E

Excellence-Innova S.L.

campusdelvino.com

61

Campus Internacional del Vino, operated by Excellence-Innova S.L., is a specialized educational platform offering university-level training focused on the wine industry, including enology, viticulture, wine business management, and enotourism. The website presents a professional and content-rich platform with a clear focus on e-learning and collaborative education. It targets professionals and students seeking specialized knowledge in the vitivinicultural sector. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and UIkit, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mautic. The site is mobile-optimized and provides a good user experience with clear navigation and professional branding. Security-wise, HTTPS is enforced, and forms include CSRF tokens; however, the absence of security headers and a missing WHOIS domain registration record are notable concerns. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the site is credible and functional but would benefit from improved domain registration transparency and enhanced security headers.

iPlead is a website positioned as a legal information portal targeting legal professionals and individuals seeking legal information, primarily in Ireland. The site is currently down for maintenance, limiting content availability and preventing a full assessment of its market position and business operations. The website uses Joomla CMS with UIkit and FontAwesome libraries, indicating a moderately modern technical infrastructure. However, the lack of active content and absence of privacy, cookie, or terms of service policies suggest limited digital maturity at this time. Security posture is basic with HTTPS enabled and CSRF tokens implemented in the login form, but no security headers were detected, and no vulnerability disclosures or incident response information is provided. Overall, the site exhibits low trustworthiness and poor user experience due to minimal content and lack of transparency.

C

Community Nursing Services

cns-cares.org

53

Community Nursing Services is a well-established non-profit healthcare provider specializing in home health care, hospice, and related medical services across Utah. With nearly 100 years of experience, the organization serves patients and families seeking compassionate, high-quality care in their homes. The website reflects a mature business with a clear market position and a comprehensive range of services including home medical equipment, infusion pharmacy, and immunizations. Their target audience primarily includes elderly and chronically ill patients and their caregivers within Utah. Technically, the website is built on Joomla CMS using the Astroid template framework and incorporates modern web technologies such as jQuery, Bootstrap, and Smart Slider 3. The site is mobile-optimized with good navigation and SEO practices, though accessibility could be improved. Security posture is strong with HTTPS, security headers, and CSRF protections, but lacks some privacy compliance features such as cookie consent mechanisms and terms of service documentation. Overall, the security posture is solid with no critical vulnerabilities detected. The site demonstrates compliance with HIPAA privacy requirements and includes a privacy policy. However, it would benefit from enhanced privacy compliance features and a formal vulnerability disclosure policy. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy organization. Strategically, CNS should focus on improving privacy compliance and transparency to strengthen user trust and regulatory adherence. Enhancing accessibility and publishing incident response contacts would further improve their security culture and user confidence.

T

Town of Laurel Park

laurelpark.org

27

The Town of Laurel Park website serves as the official online presence for the municipal government of Laurel Park, North Carolina. It provides residents and visitors with information about government departments, parks, community events, and public services. The site targets local community members and stakeholders, emphasizing transparency and community engagement. The business model is that of a local government entity focused on service delivery and community information dissemination. The website is positioned as a trusted source for local government information and community resources.

D

Dmax & Associates Ltd.

dmax.tv

37

Dmax & Associates Ltd. is a Malta-based company specializing in digital marketing services including social media management, email marketing intelligence, smartphone apps, knowledge sharing solutions, and data visualization services. The company targets businesses seeking focused and results-oriented marketing solutions, positioning itself as a regional player with a strong client testimonial base and a portfolio of digital products. The website is built on Joomla CMS with a moderate technical infrastructure leveraging common JavaScript libraries and third-party tools such as Google Analytics and MyLiveChat for user engagement and analytics. While the site demonstrates basic GDPR compliance through privacy and cookie policies and consent mechanisms, it lacks explicit security policies and incident response contacts. Security posture is moderate but impacted by the use of outdated JavaScript libraries and absence of security headers. Overall, the website is professional and functional but would benefit from technical and security improvements to enhance trust and compliance.

H

HM Viloo Ltd

kenyacompanies.com

37

KenyaCompanies.com operates as a leading online business directory focused on Kenyan businesses, providing a platform for verified business listings, enhancing brand visibility, and facilitating business connections. The website targets businesses and customers within Kenya, offering services such as business listings, company registration assistance, event listings, and promotional offers. The platform is positioned as a trusted and human-edited directory, managed by HM Viloo Ltd, with a medium-sized operational scale and consistent branding. Technically, the website is built on Joomla CMS and leverages a modern technology stack including React, jQuery, Google Analytics, and various UI libraries. The site demonstrates moderate performance and good mobile optimization, with a structured navigation and SEO-friendly meta tags. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks explicit security headers and published security policies. No incident response or vulnerability disclosure information is available, and cookie consent mechanisms are absent. Advertising is managed through Google Adsense, with tracking via Google Analytics and Tag Manager, indicating moderate user tracking. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, publishing privacy and security policies, and adding cookie consent mechanisms to enhance trust and compliance.

P

Prepaid Financial Services Limited

prepaidfinancialservices.com

60

Prepaid Financial Services Limited operates as a regulated financial entity in the UK, providing prepaid Mastercard solutions including virtual and physical cards, account management, and payment processing services. The company holds FCA authorization and is a principal member of Mastercard, positioning itself as a trusted provider in the prepaid payments market. Their offerings target businesses, government entities, local authorities, and individual cardholders, emphasizing flexibility, security, and compliance. The website reflects a mature digital presence built on Joomla CMS with modern frameworks and privacy compliance mechanisms such as Cookiebot and Google Consent Mode. Security posture is strong with advanced measures like SCA, 3DS, and integration with KYC partners, alongside certifications including ISO 27001 and PCI DSS. Overall, the site is professional, well-structured, and compliant with GDPR, though it lacks explicit incident response contact details and a public vulnerability disclosure policy.

S

SIA "Jaunmoku pils"

jaunmokupils.lv

64

Jaunmoku pils is a Latvian cultural and hospitality business centered around a historic hunting castle built in 1901. The company offers museum exhibitions, hotel accommodations, guided tours, and event hosting services targeting tourists, families, and cultural visitors. The website is professionally designed using Joomla CMS and integrates modern technologies such as Matomo analytics and social media platforms. It provides clear navigation, multilingual support, and GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and CSRF protections, though explicit security policies and headers could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive risk profile.

A

Akciju sabiedrība "CATA"

cata.lv

41

Akciju sabiedrība "CATA" is a Latvian regional transportation company specializing in regular bus services, bus rentals, heavy vehicle maintenance, and related services such as tachograph inspection and room rental. The company targets regional passengers and businesses requiring transportation and vehicle services, positioning itself as a key regional transport operator in Latvia. The website reflects a medium-sized enterprise with a professional online presence, providing clear service descriptions and contact information. Technically, the site is built on Joomla CMS with Gantry 5 framework, integrating modern web technologies and Google Maps for location services. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are found. Overall, the site is trustworthy and compliant with GDPR basics, but could improve security and transparency aspects.

P

Premator AB

premator.com

37

Premator AB is a Swedish company specializing in blasting and painting services primarily for the marine and industrial sectors. Established in 1976, the company has positioned itself as a key player in ship repair and new building markets, offering a wide range of services including tank coating, water blasting, branding, and stress-oriented protection. Their website reflects a professional and consistent brand image, targeting marine industry clients requiring high-quality blasting and coating solutions. Technically, the website is built on Joomla CMS with UIkit framework, integrating Google Analytics and Google Maps API for enhanced user experience and analytics. Privacy compliance is well managed through Iubenda, providing comprehensive privacy and cookie policies with a consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response policies could enhance their security maturity. Overall, the website is accessible, well-structured, and trustworthy, supporting Premator's business credibility and market presence.

E

Envoy Communication AB

envoy.se

33

Envoy Communication AB is a Swedish consultancy specializing in digitalization, marketing communication, and web development services. The company positions itself as a strategic partner offering consulting in strategy, content marketing, and cloud computing solutions. Their website reflects a small-sized business with a clear focus on providing tailored digital and communication solutions to other businesses. The site is built on Joomla CMS with UIkit framework, indicating a moderate level of technical maturity and a focus on responsive design and usability. The integration of Google Translate suggests an intent to reach a broader audience beyond Swedish speakers. Security-wise, the website uses HTTPS and obfuscates email addresses to reduce spam, but lacks visible security headers and formal security policies, which could be improved to enhance trust and compliance. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional, professional, and moderately secure but would benefit from enhanced privacy and security practices.

Metrima AB operates as a specialized supplier of Automatic Meter Reading (AMR) systems, focusing on smart metering solutions primarily for electricity, district heating, water, and cooling meters. Their flagship product, MActor, provides a flexible and cost-efficient communication platform supporting multiple meter manufacturers, positioning them as a reliable player in the energy metering sector in Sweden. The company emphasizes open, future-proof systems with backward compatibility, supported by ISO certifications (ISO-9001, ISO-14001, ISO-45001) that reinforce their commitment to quality and environmental standards. Technically, the website is built on Joomla CMS with Bootstrap framework, delivering a moderate performance and basic mobile optimization. The site is accessible and well-structured, though it lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS and includes CSRF tokens, but lacks explicit security headers and a visible privacy policy, which are areas for improvement. No tracking or analytics scripts were detected, indicating minimal user tracking and a privacy-conscious approach. Overall, the security posture is moderate with no critical vulnerabilities detected, but compliance gaps exist, particularly regarding privacy policy and cookie consent mechanisms. The absence of contact information on the homepage limits direct communication channels, which could impact user trust and support responsiveness. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategically, Metrima should prioritize publishing a comprehensive privacy policy, implementing cookie consent mechanisms, enhancing security headers, and providing clear contact information to improve compliance and user trust. These steps will strengthen their security posture and align with GDPR requirements, supporting sustainable business growth.

M

Metro Safety

metrosafety.co.uk

39

Metro Safety is a UK-based company specializing in fire, health, and safety compliance services targeted primarily at property professionals including managing agents, retailers, local authorities, and social housing providers. The company positions itself as a leading provider in the UK market with a comprehensive service offering that includes risk assessments, testing, maintenance, consultancy, and training. Their digital presence reflects a mature business with a professional website built on Joomla CMS and enhanced by modern UIkit frameworks. The site is mobile optimized and provides clear navigation and relevant content, supporting their market position and business model effectively. From a security perspective, the website employs HTTPS and includes CSRF tokens, but lacks some advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a cookie and privacy policy page, though no active consent mechanism is present. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in privacy and security transparency.

L

Latvijas tūrisma informācijas organizāciju asociācija LATTŪRINFO

latturinfo.lv

45

LATTŪRINFO is a Latvian tourism information organization association that focuses on promoting tourism information exchange, organizing tourism information markets, and supporting regional tourism development. The website is built on Joomla CMS with a moderate technical infrastructure including Bootstrap and common JavaScript libraries. It uses Google Analytics and Google Tag Manager for visitor tracking but lacks visible privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with no explicit security headers detected and no vulnerability disclosure mechanisms. The website content is relevant and professionally presented, targeting tourism professionals and stakeholders in Latvia. Overall, the site is functional and credible but would benefit from enhanced privacy and security practices.

O

Online-Shop Gegenbauer Essig

gegenbauer.at

7

Online-Shop Gegenbauer Essig is a small Austrian artisanal business specializing in vinegar and gourmet products with a rich history dating back to 1929. The company operates an e-commerce platform built on Joomla CMS with VirtueMart, offering a diverse product range including over 70 vinegar varieties, oils, fruit juices, and coffee. The website is well-structured, mobile-optimized, and uses modern web technologies such as Uikit and jQuery. Structured data is implemented for SEO benefits. Security posture is adequate with HTTPS enforced and CSRF protections in place, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is limited to a login and contact form, with no direct emails or phone numbers visible. Overall, the site is professional and trustworthy, though improvements in security transparency and privacy compliance are recommended.

LB-electronics GmbH is a market-leading distributor of high-quality and innovative broadcast technologies based in Austria. The company offers specialized system solutions including studio planning, lighting technology, mobile transmission, and video over IP, complemented by comprehensive service offerings. Their website targets broadcast technology professionals and media production companies, positioning them as a key player in the Austrian broadcast technology sector. Technically, the website is built on Joomla CMS with several modern libraries and plugins, but suffers from poor SSL/TLS configuration, lacking a valid certificate and modern protocols, which poses security risks. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, enhancing business credibility. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and maintain trust.

Z

Zertifizierungsstelle ERC

e-r-c.at

40

ERC is a European certification body specializing in the railway sector, offering comprehensive vehicle approval services primarily in the German-speaking region of Europe. Their key services include TSI conformity assessment as a Notified Body, ECM certification, and DeBo and AsBo evaluations. The website is professionally designed using Joomla CMS with a Bootstrap framework, providing clear navigation and relevant content in German with English alternatives. Technically, the site uses a valid SSL certificate but lacks modern TLS protocol support and advanced security headers, which slightly reduces its security posture. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and trustworthy but would benefit from security and privacy improvements.

B

BG/BRG/BORG Graz-Liebenau (HIB)

hib-liebenau.at

20

HIB Graz-Liebenau is a well-established federal secondary school in Graz, Austria, specializing in general education with emphases on languages, sports, and boarding facilities. The website provides comprehensive information about the school's programs, services, and extracurricular activities, targeting students, parents, and educators. Technically, the site is built on Joomla CMS with Bootstrap and UIkit frameworks, but suffers from critical security shortcomings including lack of HTTPS and missing privacy policies. The security posture is weak due to absence of valid SSL certificates and security headers, exposing the site to risks. Overall, while the content and business credibility are good, the technical and security aspects require urgent improvements to ensure trust and compliance.

N

NETxAutomation Software GmbH

netxautomation.com

37

NETxAutomation Software GmbH is a medium-sized company specializing in building management software and multi-protocol gateways for medium-sized and enterprise building automation projects. With over 20 years of experience and a presence in more than 100 countries, the company offers a comprehensive suite of products including the NETx BMS Platform and NETx Multi Protocol Server, alongside services such as project analysis, commissioning, and driver development. Their target audience includes system integrators, electrical engineers, and end customers seeking integrated building automation solutions. Technically, the website is built on Joomla CMS with jQuery and FontAwesome libraries, served by an Apache 2.4.62 server. However, the site lacks a valid SSL certificate and does not support HTTPS or modern TLS protocols, which significantly impacts its security posture. Performance metrics are not available, but the site shows basic mobile optimization and accessibility features. SEO is basic but includes meta tags and alternate language links. From a security perspective, the site implements some security headers such as Strict-Transport-Security and X-Content-Type-Options, and uses HttpOnly cookies. However, the absence of a valid SSL certificate, lack of TLS support, and missing advanced security headers reduce the overall security score. No explicit security or incident response policies are found, and no vulnerability disclosure or security.txt file is present. Overall, the website is professional and content-rich but suffers from critical security shortcomings due to missing HTTPS. Strategic improvements in SSL/TLS deployment and enhanced security policies are recommended to improve trust and compliance.

H

HS-ART Digital

hs-art.com

24

HS-ART Digital is a specialized technology company focused on providing high-end digital film restoration software solutions, including the DIAMANT-Film Restoration Suite and DustBuster+. Established in 2001, the company serves a niche market of film archives, post-production houses, studios, and laboratories worldwide. Their website reflects a professional presence with detailed product information and clear contact channels, supporting their market position as an established player in the film restoration industry. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, hosted likely on Google Cloud infrastructure. However, the absence of HTTPS and valid SSL certificates significantly undermines the security posture, exposing users to risks. Cookie consent mechanisms and privacy policies are in place, indicating basic GDPR compliance, but there is no evidence of advanced security policies or incident response readiness. Overall, the website is functional and informative but requires urgent security improvements to protect users and enhance trust.

V

VINICKY Armaturen Handels GmbH

vinicky.at

37

VINICKY Armaturen Handels GmbH is an established Austrian company specializing in industrial valves and pumps, serving sectors such as water treatment, petrochemical, building technology, and power plants. The company has a long history dating back to 1952 and recently expanded its portfolio by acquiring Sonnleitner Industriearmaturen GmbH, enhancing its market position and product offerings. The website reflects a professional B2B supplier model targeting industrial clients with a focus on reliability and comprehensive solutions. Technically, the website is built on Joomla CMS with common JavaScript libraries and plugins, but lacks modern performance optimizations and mobile responsiveness is basic. Security posture is weak due to the absence of HTTPS and modern TLS protocols, exposing users to risks. Privacy compliance is partially addressed with cookie consent mechanisms and basic privacy policy presence. Overall, the site is functional but requires significant improvements in security and technical modernization to meet current standards.

S

SOL4 IT-Consulting GmbH

sol4.at

30

SOL4 IT-Consulting GmbH is a specialized IT consulting firm based in Austria, focusing on CRM software solutions and digitalization services for small and medium-sized enterprises. The company offers CRM software consulting, project implementation, industry-specific solutions, and support services, positioning itself as a market leader in CRM solutions within its region. The website reflects a professional and consistent brand image with comprehensive content tailored to its target audience. Technically, the site is built on Joomla CMS with modern UIkit framework and common JavaScript libraries, providing a good user experience and mobile optimization. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the site's security posture and trustworthiness. The site implements GDPR-compliant privacy and cookie policies with active consent mechanisms and transparent contact information. Overall, while the business and content quality are strong, the lack of HTTPS is a major risk that should be addressed promptly.

E

EXERGY Studios, s.r.o.

exergystudios.com

35

EXERGY Studios, s.r.o. is a Slovak-based company specializing in building certification services such as BREEAM and LEED, building simulation, optimization, and integrated design. The company targets building owners, developers, and construction professionals seeking to enhance building performance and certification compliance. Their market position is that of a niche regional expert with a small business size and a focused service portfolio. Technically, the website is built on Joomla CMS using a Gavick template and includes legacy JavaScript libraries like jQuery 1.7 and MooTools. The site lacks HTTPS, which significantly impacts its security posture. Security headers are minimal, and no advanced security practices such as HSTS or OCSP stapling are implemented. Privacy compliance is poor, with no visible privacy or cookie policies or consent mechanisms. Business credibility is moderate due to the presence of trust indicators like membership in SKGBC and USGBC but is weakened by the lack of clear contact information and security best practices.

MBM Intellectual Property Law LLP is a Canadian intellectual property law firm providing services such as patents, trademarks, copyright protection, and litigation. The firm targets Canadian and international clients and operates multiple offices across Canada. The website content reflects a professional legal service provider with a moderate market position in the IP law sector. Technically, the website is built on outdated Joomla 1.7 CMS and PHP 5.5.9, lacks HTTPS encryption, and shows no evidence of modern security or privacy compliance practices. Security posture is weak due to missing SSL, outdated software, and lack of security headers. Privacy compliance is poor with no visible privacy or cookie policies. Overall, the website presents moderate business credibility but requires urgent technical and security improvements to protect client data and enhance trust.

T

TachoEASY GmbH

tachoeasy.com

39

TachoEASY GmbH is a medium-sized Austrian company specializing in telematics and tachograph data archiving software solutions for the transportation and logistics sector. With nearly two decades of market presence, it offers products such as tacholog² and BlueLOGICO® targeting fleet operators and transport companies. The website is built on Joomla CMS with modern UIkit framework and integrates various third-party services including Calendly and friendly-challenge captcha for user interaction. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, representing a critical security vulnerability. Security headers are partially implemented but key protections like HSTS and DNSSEC are missing. The company provides comprehensive privacy and cookie policies with a consent mechanism, reflecting good GDPR compliance. Contact information is clearly presented with multiple channels including phone, email, and contact forms. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.