Security Directory

T

Talentegy, Inc.

talentegy.com

68

Talentegy, Inc. operates a specialized Talent Experience Management platform designed to optimize recruiting and talent management processes by providing actionable insights across the employee lifecycle. The company targets HR professionals and organizations seeking to enhance candidate and employee experiences through data-driven analytics and engagement metrics. Recognized with industry awards, Talentegy positions itself as an innovative leader in recruitment marketing technology. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries and marketing automation tools such as Google Analytics and LinkedIn Insight. The site demonstrates good mobile optimization, clear navigation, and professional design, supporting a positive user experience. Privacy and cookie policies are present and indicate GDPR compliance, enhancing trust and regulatory adherence. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible security headers and published security policies or incident response contacts. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and external references suggest a legitimate business entity. Overall, the security posture is moderate with room for improvement in transparency and technical safeguards. Strategically, Talentegy should prioritize publishing comprehensive security policies, implementing standard security headers, and resolving domain registration visibility issues to strengthen trustworthiness. Enhancing incident response readiness and vulnerability disclosure practices will further improve the security culture and compliance posture, supporting sustainable growth and customer confidence.

A

Abilities Centre

abilitiescentre.org

64

Abilities Centre is a well-established Canadian non-profit organization founded in 2004, dedicated to fostering accessibility, inclusion, and community engagement for people of all ages and abilities. The organization offers a broad range of programs and services including sports, therapeutic recreation, skills development, and training, supported by research and advocacy efforts. Their market position is strong within the Canadian non-profit sector focused on disability inclusion, supported by partnerships with government entities and foundations. Technically, the website is built on a Kentico CMS platform using modern JavaScript libraries and frameworks such as jQuery, Foundation, and Slick Carousel, providing a responsive and accessible user experience. Security posture is good with HTTPS enabled and CSRF protections in place, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is partial with a clear privacy policy but lacking cookie consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and content quality, making it a credible digital presence for the organization.

A

A.K.A. New Media Inc.

akanewmedia.com

63

A.K.A. New Media Inc. is a well-established Canadian digital agency specializing in award-winning website design and digital solutions primarily for non-profit organizations and charitable entities. Founded in 1997, the company offers a comprehensive suite of services including UX design, digital strategy, branding, CMS development, mobile applications, online fundraising platforms, and software development. Their market position is strong within the non-profit sector, supported by multiple industry awards and a portfolio of high-profile clients. The company also operates a related fundraising platform, akaraisin.com, enhancing their service offerings. Technically, the website employs a modern technology stack including jQuery, Foundation framework, Kentico CMS, and integrates multiple third-party marketing and analytics tools such as HubSpot, Google Analytics, and Microsoft Clarity. The site is hosted behind Cloudflare DNS and CDN services, ensuring reliable performance and security. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and employs Google reCAPTCHA v2 on forms to mitigate spam. However, it lacks explicit security headers and DNSSEC is not enabled, which are areas for improvement. Privacy compliance is limited as no privacy or cookie policies were found, which could pose regulatory risks especially under GDPR. Contact information is clearly provided, including phone numbers, physical address, and contact forms. Overall, the website demonstrates a high level of professionalism and business credibility with a strong digital presence. Strategic recommendations include enhancing privacy compliance by publishing clear privacy and cookie policies, enabling DNSSEC, and implementing security headers to strengthen the security posture and regulatory adherence.

T

The Kidney Foundation of Canada

kidney.ca

72

The Kidney Foundation of Canada is a well-established national non-profit organization dedicated to kidney health education, patient support, research funding, and advocacy. Founded in 2000, it holds a strong market position as a trusted authority in kidney disease awareness and support across Canada. The website reflects this with comprehensive, professionally presented content targeting patients, caregivers, healthcare professionals, and donors. The organization operates a multi-faceted business model focused on fundraising, community engagement, and research sponsorship. Technically, the website is built on a mature ASP.NET WebForms CMS platform (Kentico) and leverages modern JavaScript libraries such as jQuery, Foundation, and Slick Carousel to provide a responsive and accessible user experience. Hosting and DNS services are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized and includes accessibility features, with good SEO practices evident. From a security perspective, the site enforces HTTPS and uses domain registration protections to prevent unauthorized changes. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. Privacy compliance is addressed with published privacy and cookie policies and a consent mechanism, though GDPR compliance is not explicitly confirmed. Contact information is transparent and complete, enhancing trust. Overall, the website scores highly for content quality, business credibility, and technical implementation, with moderate scores in security posture and privacy compliance. There are no indications of blocking or WAF interference, and the content is safe for general audiences. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and enhancing GDPR compliance measures.

M

Maje

maje.ua

50

Maje.ua is the official Ukrainian online store for the French premium fashion brand Maje, offering a wide range of clothing, bags, shoes, and accessories. The website targets Ukrainian consumers seeking high-quality, stylish fashion products with convenient delivery across Ukraine. The business model is focused on e-commerce retail with a strong brand presence and social media engagement. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and secure forms, though there is room for improvement in security headers and explicit security policies. Privacy compliance is partially met with a privacy policy present but lacking a cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

Ε

Εμπορικό Επιμελητήριο Λασιθίου

agroexpoierapetra.gr

42

AgroExpo Ierapetra is a regional agricultural exhibition organized by the Lasithi Chamber of Commerce, focusing on promoting local agricultural products, innovative production methods, and connecting agriculture with tourism in Crete and Greece. The website serves as an informational and promotional platform for the event scheduled for May-June 2025. Technically, the site is built on WordPress using common plugins and frameworks such as Bootstrap and KingComposer, with moderate performance and good mobile optimization. Security measures include HTTPS, Google reCAPTCHA, and Wordfence indications, but lack formal security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

C

Chef Academy Of Greece

chefacademy.gr

48

Chef Academy Of Greece is a small non-profit organization founded in 2014, dedicated to promoting authentic Greek gastronomy and culinary arts. The website serves as a platform for membership management, event announcements, and collaboration with various Greek municipalities and gastronomy-related organizations. Technically, the site is built on Joomla CMS using the Helix Ultimate framework and incorporates modern UI libraries such as Bootstrap and jQuery. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is limited as no privacy or terms of service pages are found, though a cookie consent banner is present. Overall, the site is legitimate and consistent with the organization's mission but would benefit from enhanced security and privacy measures.

E

E-BASE.GR

e-base.gr

55

E-BASE.GR is a specialized Greek technology service provider focused on Joomla website development, hosting, domain registration, and technical support. With over two decades of experience, the company holds a strong position in the Greek market, emphasizing Joomla-friendly hosting and comprehensive customer support. The website reflects a professional and consistent brand image, targeting businesses and individuals seeking reliable web solutions in Greece. Technically, the site leverages Joomla CMS with modern JavaScript libraries and frameworks, ensuring responsive design and good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the domain registration and WHOIS data confirm the legitimacy and long-standing presence of the business.

O

Open The Books

openthebooks.com

65

Open The Books is a well-established non-profit organization focused on government transparency and accountability by providing access to extensive public expenditure data. The website is professionally designed with excellent content quality, targeting taxpayers, journalists, and researchers interested in government spending. Technically, the site uses modern JavaScript frameworks and libraries such as AngularJS and jQuery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and use of request verification tokens, though the absence of explicit security headers and cookie consent mechanisms are areas for improvement. The lack of WHOIS registration data introduces some uncertainty about domain legitimacy, but the strong media presence and transparent business model support trustworthiness. Overall, the site is a valuable resource with moderate risk and room for enhanced security and privacy compliance.

D

Državni svet Republike Slovenije

ds-rs.si

54

The website ds-rs.si is the official online presence of the National Council of the Republic of Slovenia, a governmental institution responsible for legislative consultation and representation of various social interests. The site provides comprehensive information about the council's members, activities, news, events, and contact details, targeting Slovenian citizens and government stakeholders. It maintains a consistent and professional brand image aligned with its official status. Technically, the website is built on Drupal 9 CMS, leveraging modern frontend libraries such as jQuery, Bootstrap, and Font Awesome. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The infrastructure reflects a mature digital presence suitable for a government entity. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide visible incident response or security policy information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The domain registration is consistent with a Slovenian government ministry, reinforcing legitimacy and trust. Overall, the website is a trustworthy and authoritative source of governmental information with room for improvement in security best practices and privacy compliance to enhance user trust and regulatory adherence.

P

Profil

profil-group.com

62

Profil is a well-established HR consultancy firm founded in 1989, specializing in executive search, selection, and management consulting across South-East Europe. The company operates through a network of regional partner offices, providing tailored HR solutions and leadership advisory services. Their business model focuses on delivering quality, trust, and tradition to companies and candidates alike. Technically, the website uses a custom CMS with legacy JavaScript libraries and standard web technologies, offering moderate performance and good mobile optimization. Security posture is average with HTTPS assumed but lacking visible security headers and privacy policies, indicating room for improvement in compliance and protection. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the business content and certifications support credibility. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy measures.

P

Planinska zveza Slovenije

worldcupslo.com

42

The website worldcupslo.com serves as the official platform for the World Cup in sport climbing held in Koper, Slovenia, organized by Planinska zveza Slovenije. It provides comprehensive event information including schedules, results, news, sponsor details, and multimedia content targeting sport climbing enthusiasts and the general public interested in this sport. The site is well-branded and supported by recognized sponsors and partners, establishing a strong market position within the sport event domain in Slovenia. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and interactivity. The site is mobile-optimized and offers good navigation and content relevance. However, performance is moderate and accessibility features are basic, indicating room for technical improvements. From a security perspective, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. There are no published privacy or cookie policies, which is a compliance gap. No incident response or vulnerability disclosure mechanisms are evident. The domain registration is transparent and consistent with the website's purpose, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and privacy compliance to reduce risk and improve user trust.

N

Nova Vizija d.d.

vizija.si

47

Nova Vizija d.d. is a well-established Slovenian company specializing in business, healthcare, and higher education information systems with over 30 years of experience. Their key offerings include ProPIS for business information systems, ProMedica for healthcare, ZPNet for employment services, and Novis for higher education institutions. The company targets institutional clients in Slovenia and possibly the broader region, positioning itself as a trusted provider with a strong project portfolio and client base. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential plugins for SEO, forms, and cookie compliance. Security posture is solid with HTTPS and reCAPTCHA, though there is room for improvement in security headers and published policies. Overall, the website is professional, user-friendly, and compliant with GDPR cookie consent requirements, reflecting a mature digital presence.

P

Profil d.o.o.

profil.si

58

Profil d.o.o. is a well-established Slovenian consulting company specializing in executive search, selection, and HR advisory services across Slovenia and Southeast Europe. With over 30 years of experience, the company positions itself as a trusted partner for businesses seeking leadership and professional talent. Their services include career counseling, outplacement, and tailored HR consulting, targeting both companies and candidates. The website reflects a professional and consistent brand image, emphasizing quality, trust, and tradition. Technically, the site uses a mix of legacy and modern web technologies, including jQuery 1.7.1 and Bootstrap, hosted on a custom CMS platform. While the site is mobile-optimized and well-structured, some outdated libraries pose potential security risks. Security posture is moderate, with cookie consent implemented but lacking visible security headers and explicit privacy policies. The domain is long-standing and registered to a company linked to the website's design and operation, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from technical and compliance improvements.

N

NETZ-Zentrum für innovative Technologie Osterholz GmbH

netz-ohz.de

42

NETZ-Zentrum für innovative Technologie Osterholz GmbH is a regional technology and startup support center located in Osterholz-Scharmbeck, Germany. It provides modern office and hall spaces, comprehensive startup consulting including funding and financing support, and facilitates knowledge and technology transfer. The organization is well integrated with local government, banking partners, and innovation networks such as the Wasserstoffnetzwerk Nordostniedersachsen, positioning it as a key regional innovation hub. Technically, the website is built on TYPO3 CMS with standard JavaScript libraries, offering a professional and accessible user experience with moderate performance. Security posture is adequate but could be improved by implementing security headers and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

U

Universität Konstanz

uni-konstanz.de

60

Universität Konstanz is a prestigious German university recognized as one of the eleven Exzellenzuniversitäten, emphasizing top-tier research, innovative teaching, and international collaboration. The website reflects a well-established academic institution offering diverse degree programs and research initiatives, targeting students, researchers, and academic partners. Technically, the site is built on TYPO3 CMS with a modern JavaScript stack and integrates Piwik/Matomo for analytics, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure login mechanisms, though improvements are recommended in security headers and cookie consent. Overall, the site is professional, accessible, and trustworthy, with comprehensive privacy and legal information.

P

Projekt 29 GmbH & Co. KG

projekt29.de

62

Projekt 29 GmbH & Co. KG is a well-established German full-service provider specializing in data protection, information security, and compliance consulting and solutions. Founded in 1996 and headquartered in Regensburg, the company serves over 4500 customers across various industries, offering services such as external data protection officers, IT compliance, ISO 27001 and TISAX certification support, and e-learning platforms. Their market position is strengthened by memberships in key industry associations and certifications, positioning them as a trusted partner for businesses seeking regulatory compliance and security assurance. Technically, the website is built on a modern WordPress CMS with professional design, responsive layout, and integration of relevant plugins and tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, Projekt 29 demonstrates a strong commitment to privacy compliance and business credibility, making it a reliable service provider in its domain.

B

BNN College

borl.in

48

BNN College operates as a niche news and updates website primarily focused on social benefits, government policies, and financial relief programs across multiple countries. The website is built on WordPress and employs modern web technologies including Yoast SEO, jQuery, and Cloudflare DNS services. The content is regularly updated and professionally presented, targeting a general audience interested in financial and governmental news. The business model relies on content publishing and advertising revenue, with Google Adsense integrated for monetization. Technically, the website demonstrates a moderate level of digital maturity with good mobile optimization and SEO practices. The use of HTTPS and reputable hosting and DNS providers contributes to a solid technical foundation. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. Privacy compliance is weak due to missing privacy and cookie policies, which poses a risk for regulatory adherence. From a security perspective, the site benefits from HTTPS and domain registration protections but lacks explicit security policies and incident response information. No critical vulnerabilities or suspicious patterns were detected, and the domain age supports legitimacy. Overall, the website presents a moderate security posture with recommendations to enhance privacy compliance and security best practices. Strategically, BNN College should prioritize implementing comprehensive privacy and cookie policies, enable DNSSEC, and adopt security headers to improve trust and compliance. Enhancing transparency around security and incident response will further strengthen its credibility and user confidence.

AMS Automarkt am Schieferstein GmbH is a small, regionally focused automotive business established in 1990, specializing in the sale and marketing of vehicles including Mitsubishi Jahreswagen, leasing returns, fleet vehicles, and service cars. The company targets both end consumers and business clients within the transportation sector, offering financing and leasing options. The website reflects a professional and consistent brand presence with clear contact information and a comprehensive privacy policy, supporting GDPR compliance. Technically, the site uses a modern tech stack including Bootstrap and Matomo analytics, with moderate performance and good mobile optimization. Security posture is adequate with privacy-conscious analytics and cookie consent, though lacking explicit security headers and incident response details. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

S

Stadt Hanau

hanau-corona.de

61

The website 'Corona in Hanau' is an official municipal information portal operated by Stadt Hanau, Germany, providing comprehensive and up-to-date information related to the Coronavirus pandemic. It serves residents and stakeholders by offering resources such as testing locations, vaccination sites, hygiene rules, legal information, and support services. The site is positioned as a trusted government source with consistent branding and clear navigation. Technically, the website is built on the IMPERIA CMS platform and utilizes a modern technology stack including jQuery, Bootstrap, Matomo Analytics, and Google Maps API. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. The cookie consent mechanism is robust, ensuring GDPR compliance with user opt-in for analytics tracking. From a security perspective, the site employs HTTPS and anonymizes user IPs in analytics. However, explicit security headers and incident response information are not evident, suggesting room for improvement in security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the site maintains a good balance between usability, privacy, and security. The risk assessment is low given the official nature of the site and its compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and resilience.

H

HFP Bandstahl

hfp-bandstahl.com

50

HFP Bandstahl is an established German manufacturing company specializing in cold rolled steel and coil coating with over 100 years of experience. As part of the HUEHOCO GROUP, it offers a comprehensive range of industrial steel products and coating services including technical, decorative, and rubber coatings. The company targets industrial and manufacturing clients globally, positioning itself as a specialist in coil coating and steel processing. The website reflects a mature digital presence with detailed business, career, and contact information, supporting its B2B business model. Technically, the website is built on WordPress using modern plugins and themes, optimized for SEO and mobile responsiveness. Hosting is provided by IONOS SE, a reputable provider. The site implements privacy and cookie compliance mechanisms, including a consent banner and detailed privacy policy. Security posture is good with HTTPS enabled and no exposed sensitive data, though DNSSEC is not enabled and some security headers like CSP are missing. Overall, the security posture is solid but could be improved by adding explicit security policies and vulnerability disclosure mechanisms. The domain registration data is consistent and supports the legitimacy of the business. No WAF or blocking mechanisms were detected, allowing full content access. Strategically, the company should focus on enhancing security headers, enabling DNSSEC, and publishing incident response information to strengthen trust and compliance. The website quality and business credibility are high, supporting a strong market position in the manufacturing sector.

T

The Associated Chambers of Commerce & Industry of India

assocham.com

45

The Associated Chambers of Commerce & Industry of India (ASSOCHAM) operates as India's oldest apex chamber, providing a broad range of services including industry advocacy, knowledge dissemination, and sector-specific initiatives. The organization targets Indian businesses, government bodies, and international trade partners, leveraging a large membership base to influence policy and promote sustainable growth. The website reflects a professional and consistent brand image with comprehensive sector and regional coverage, positioning ASSOCHAM as a key player in India's business ecosystem. Technically, the website employs a mature technology stack including jQuery, Bootstrap, and Google Analytics, hosted with DNS services via Cloudflare. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. However, there is room for improvement in security headers and privacy compliance mechanisms. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks visible security headers and DNSSEC. Forms for user registration and login are present but do not show advanced security features. No critical vulnerabilities or malicious content were detected, but privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

H

HUEHOCO

huehoco-group.com

46

HUEHOCO Group is a large manufacturing company specializing in the finishing and processing of metal products, including cold-rolled steel, coil coating, and precision stamped and bent parts. The group operates internationally with multiple subsidiaries and offers a comprehensive value chain to its industrial clients. The website is professionally designed, mobile-optimized, and provides detailed business and product information in German with English alternatives. Technically, the site runs on WordPress with modern plugins and demonstrates good SEO and privacy compliance, including GDPR-aligned cookie consent mechanisms. Security posture is solid with HTTPS and no evident vulnerabilities, though some security headers and policies could be improved. Overall, the domain registration is transparent and consistent with the business claims, though the domain is relatively new, possibly indicating a recent rebranding or new domain acquisition.

H

HUEHOCO GmbH

huehoco-gmbh.com

50

HUEHOCO GmbH is an established German manufacturing company specializing in coil coating and advanced metal surface treatments with over 100 years of industry experience. The company operates globally with multiple production sites and offers a broad portfolio including adhesion promoters, technical and decorative coatings, rubber coatings, stamping parts, and rubber extrusion. Their business model focuses on B2B industrial clients requiring high-quality metal finishing solutions. The website reflects a mature digital presence with multi-language support, professional design, and comprehensive product and corporate information. Technically, the site is built on WordPress with modern plugins and SEO optimizations, hosted by IONOS SE. Security posture is good with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and CSP headers are recommended. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates high business credibility and trustworthiness.

H

HUEHOCO GmbH

huehoco.com

50

HUEHOCO GmbH is an established German manufacturing company specializing in coil coating and metal surface finishing with over 100 years of experience. The company operates globally with multiple production sites and offers a comprehensive range of technical and decorative coatings, adhesion promoters, rubber coatings, and stamping parts. Their business model focuses on B2B industrial clients requiring advanced metal coating solutions. The website reflects a mature digital presence with multilingual support, professional design, and clear navigation tailored to industrial customers. Technically, the site is built on WordPress with modern plugins and analytics tools, hosted by IONOS SE, ensuring reliable performance and good mobile optimization. Security posture is solid with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are absent. Overall, the domain registration and website content align well, supporting the company's legitimacy and market position.

I

Impel Global

impel.global

71

Impel Global is a fintech company leveraging blockchain technology, specifically the XDC Network, to transform financial messaging and payment settlements. It offers ISO 20022-compliant messaging APIs, instant settlement options using crypto-backed collateral, and integration with the R3 Corda ecosystem for hybrid private/public data handling. Positioned as a modern alternative to legacy systems like SWIFT, Impel Global targets financial institutions and multinational corporations seeking faster, cost-effective, and transparent payment solutions. The website demonstrates a mature technical infrastructure built on WordPress with modern plugins and SEO optimizations. Security posture is solid with HTTPS and security best practices, though DNSSEC is not enabled and explicit security policies are absent. Overall, the platform shows strong business credibility and technical maturity, with ongoing strategic partnerships and adoption efforts.

Z

ZIENER

ziener.com

58

ZIENER is a well-established German company specializing in the manufacturing and retail of gloves, skiwear, bikewear, and related accessories. Founded in 1946 and based in the Bavarian Alps, the company targets winter and summer sports enthusiasts globally. The website reflects a mature digital presence with multilingual support and a focus on quality and functional sportswear. The brand maintains active social media channels and uses modern web technologies to deliver a responsive and user-friendly experience. Technically, the site employs Cookiebot for GDPR-compliant cookie management and Google Analytics for visitor insights, with IP anonymization enabled to enhance privacy. Security practices include HTTPS enforcement and domain status protections, though DNSSEC is not enabled and security headers are not explicitly detected. No direct contact emails or phone numbers are exposed, but a contact form is available. The absence of explicit privacy and terms of service pages in the analyzed content suggests room for improvement in transparency and compliance documentation. Overall, the website is professional, trustworthy, and secure, supporting the company's market position as a reputable sportswear brand.

A

ACP Group

acp-global.net

45

ACP Group is an established international specialist in manufacturing stamped and roll-cut metal bands, operating as part of the HUEHOCO Group with over 20 years of industry experience. The company serves industrial clients primarily in automotive, sports equipment, and electrical sectors, offering a comprehensive value chain from raw material selection to finished products. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS with modern SEO and privacy compliance tools. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and enhanced security headers are recommended. Overall, ACP Group demonstrates strong business credibility, compliance with GDPR, and transparent contact information, positioning it as a trustworthy and competent industrial manufacturer.

S

SunCoke Energy, Inc.

suncoke.com

73

SunCoke Energy, Inc. is a leading independent producer of high-quality coke primarily serving the steel production industry in the Americas. With over 60 years of experience, the company holds the highest annual coke production capacity in the United States, positioning itself as a market leader. The website targets investors, industry professionals, and potential employees, providing comprehensive corporate governance, investor relations, and sustainability information. The business model focuses on coke production, logistics, and long-term contracts, emphasizing innovation and environmental standards. Technically, the website is built on the Sitecore CMS platform and leverages modern JavaScript libraries such as jQuery, Slick Slider, and Magnific Popup. It integrates Google Tag Manager for analytics and uses Investis Digital's cookie management tools. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate with potential for improvement. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, reflecting a mature digital presence. Strategic recommendations include enhancing security headers, publishing a security policy and incident response information, and considering a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

O

OpenCampus

opencampus.net

65

OpenCampus is a small, specialized software company founded in 2013 that provides an open adoption software framework tailored for education and enterprise management. Their platform integrates multiple management systems such as campus, graduate school, learning, medical school, recruitment, and research management. The company targets universities, schools, enterprises, and researchers, positioning itself as a niche provider with a strong client base including reputable German universities and medical institutions. Technically, the website is built on Drupal 8 with modern libraries and frameworks, offering good mobile optimization and accessibility. Analytics are implemented via Piwik and Google Analytics, with some privacy considerations such as Do Not Track enabled. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit incident response information. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly lowers trust. Overall, the website is professional, content-rich, and trustworthy, but could improve privacy compliance and security transparency.

I

INTERPLAN Congress, Meeting & Event Management AG

interplan.de

53

INTERPLAN Congress, Meeting & Event Management AG is a professional event management company operating primarily in Germany with offices in Munich, Hamburg, Berlin, and Leipzig. The company specializes in congress organisation, exhibition and sponsoring management, hotel services, DMC and event management, delegate management, and association management. Their target audience includes organizations and associations seeking expert event planning and execution services across Europe. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service descriptions. Technically, the site uses modern JavaScript libraries and cookie consent management tools, ensuring GDPR compliance and user privacy. Security posture is good with HTTPS enabled and anonymized analytics, though some security headers are not explicitly detected in the HTML content. Overall, the site is trustworthy, professional, and well-maintained, with no signs of blocking or WAF interference.

P

promaintain GmbH & Co. KG

promaintain.de

65

promaintain GmbH & Co. KG is a reputable European full-service provider specializing in turnaround and project management, as well as innovative industrial scaffolding solutions for the process industry. The company leverages digital innovations such as BIM-based planning and digital twins to enhance project efficiency, safety, and cost transparency. Positioned as a trusted partner with a strong client base in the process industry, promaintain operates under the umbrella of the PERI Group, enhancing its market credibility. Technically, the website employs modern front-end technologies including jQuery, Bootstrap, and Swiper.js, complemented by a robust cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized with good SEO practices and basic accessibility features. However, explicit security headers are not evident, suggesting room for improvement in security hardening. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks published incident response or vulnerability disclosure policies. Cookie management is comprehensive, covering necessary and optional cookies with user consent. Contact information is clearly presented, including email, phone, and a contact form with anti-spam measures. Overall, the website reflects a professional and trustworthy business presence with moderate technical sophistication and good privacy compliance. Strategic enhancements in security headers and incident response transparency would further strengthen the security posture and trustworthiness.

S

Soley

soley.io

71

Soley is a German-based technology company specializing in transforming complex product data into actionable business value through their Product Mining platform. They serve manufacturing enterprises aiming to optimize product portfolios, improve profitability, and enhance resilience. The company is recognized as an innovative SAP partner, having won the SAP Innovation Award 2024. Technically, the website is built on HubSpot CMS with modern libraries and includes cookie consent and analytics integrations, reflecting a mature digital presence. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. WHOIS data is incomplete, which slightly reduces trust but does not outweigh the professional presentation and business credibility. Overall, Soley presents a strong, trustworthy B2B SaaS offering with a focus on manufacturing sector digital transformation.

W

Well BP

wellbp.com

68

Well BP is a newly founded digital consulting agency specializing in custom software development, digital product creation, and digital marketing services. The company positions itself as a trusted partner offering flexible engagement models and comprehensive digital solutions across various industries. Their website is professionally designed using WordPress and integrates modern technologies such as Google Maps API and advanced WordPress plugins. The technical infrastructure is solid with Cloudflare DNS and HTTPS enabled, though there is room for improvement in security headers and privacy compliance. The security posture is moderate with no critical vulnerabilities detected but lacks published security policies and cookie consent mechanisms. Overall, the website is safe, professional, and trustworthy, targeting businesses seeking digital transformation services.

The website represents the Savez opština i gradova Republike Srpske, a governmental and non-profit organization supporting municipalities and cities in Republika Srpska, Bosnia and Herzegovina. It provides information on organizational structure, program areas, projects, news, and events, targeting local governments and citizens. The site demonstrates a stable market position as a local government representative with strong international partnerships. Technically, the website uses a modern frontend stack including Bootstrap 4, jQuery, Owl Carousel, and integrates third-party services such as Google Analytics and Mailchimp. It enforces HTTPS and uses client-side redirection to ensure secure connections. However, no CMS or hosting provider is explicitly identified, and some security best practices like DNSSEC and security headers are missing. From a security perspective, the site has a moderate posture with HTTPS enforced and domain transfer protection enabled. However, it lacks DNSSEC, explicit security headers, privacy and cookie policies, and incident response contacts. No vulnerabilities or malware indicators were found in the content. The site is safe for general audiences with no adult or questionable content. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, improved security headers, and formalized policies to strengthen trust and regulatory adherence.

B

Blaetterbuch - professionell online blättern

blaetterbuch.de

46

Blaetterbuch is a specialized technology provider offering professional online flipbook solutions that digitize print media such as flyers, catalogs, and brochures with realistic page-turning effects. Their service targets businesses seeking to extend the reach of their print publications into digital formats accessible across all major browsers and mobile devices. The company positions itself as a niche provider with a comprehensive service including hosting, customization, and integration of multimedia elements like videos and links. Technically, the website employs a modern web stack including Bootstrap, jQuery, and popular UI libraries such as Owl Carousel and Revolution Slider. The site is mobile-optimized and features a custom CMS backend indicated by dynamic content calls. While performance is moderate, the site is well-structured with good SEO and accessibility basics. From a security perspective, the site uses HTTPS (assumed from URL), implements cookie consent mechanisms, and provides a comprehensive privacy policy compliant with GDPR. However, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of blocking or malicious content. Strategic recommendations include enhancing security headers, publishing a security policy, and improving technical performance for a stronger security and user experience profile.

K

Kozmo Shop

kozmoshop.ba

39

Kozmo Shop is a regional e-commerce retailer specializing in cosmetics, makeup, hair care, maternity, fitness, and wellness products primarily serving Bosnia and Herzegovina. The website is professionally designed using the OpenCart platform with the Journal2 theme, featuring a broad product catalog and multiple brand partnerships. The technical infrastructure includes modern JavaScript libraries and integrations with marketing and analytics tools such as Google Analytics, Facebook Pixel, and AdRoll, indicating a mature digital marketing approach. Security posture is solid with HTTPS enforced and cookie consent implemented; however, the absence of security headers and limited contact information represent areas for improvement. No privacy policy or terms of service pages were detected, which may impact compliance and user trust. Overall, the site is accessible without WAF or blocking mechanisms and presents safe content suitable for general audiences.

H

Hansestadt Lübeck

luebeck.de

59

The website luebeck.de serves as the official city portal for the Hansestadt Lübeck, Germany. It provides comprehensive information and services for residents, tourists, and businesses, including citizen services, city hall information, cultural events, and urban development. The site is well-structured with extensive navigation and uses a variety of modern web technologies and libraries, including jQuery, Font Awesome, and the LYNET Content Manager CMS. The technical infrastructure indicates a moderate level of digital maturity with good mobile optimization and accessibility features. From a security perspective, the site uses HTTPS and implements a cookie consent banner, demonstrating basic privacy compliance. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the CMS and DNS providers used, supporting the legitimacy of the domain as an official municipal website. Overall, the website is professional, trustworthy, and safe for general audiences, with a good balance of content quality and technical implementation. Strategic enhancements in security transparency and privacy documentation would further strengthen its posture.

K

KEVAG Telekom GmbH

ktk.de

57

KEVAG Telekom GmbH is a regional telecommunications provider based in Koblenz, Germany, offering internet, telephone, TV, and mobile services primarily to private and business customers in the region. The company positions itself as a trusted local partner with over 30,000 private customers and thousands of business clients. Their business model focuses on providing comprehensive telecommunications solutions with a strong emphasis on regional connectivity and customer service. Technically, the website is built on TYPO3 CMS with modern front-end technologies including jQuery and Bootstrap, ensuring good mobile optimization, accessibility, and SEO. The site includes a cookie consent mechanism and uses secure HTTPS connections. The presence of ISO 27001 certification indicates a mature security management framework. From a security perspective, the website demonstrates good practices such as HTTPS enforcement, secure forms with CSRF protection, and no visible vulnerabilities or exposed sensitive data. However, there is room for improvement by adding explicit Content-Security-Policy headers and a security.txt file for vulnerability disclosure. Incident response contact details are not publicly provided. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The risk level is low, but strategic enhancements in security transparency and incident response readiness are recommended to further strengthen the security posture.

B

Bikeshop Burgh-Haamstede

bikeshopburghhaamstede.nl

39

Bikeshop Burgh-Haamstede is a local bicycle retailer and service provider based in the Netherlands, specializing in sales, repair, and rental of various types of bicycles including electric and mountain bikes. The company positions itself as a trusted local business with strong customer service and competitive pricing, supported by partnerships such as with Fietsverhuur Zeeland. The website reflects a professional and user-friendly design with clear navigation and relevant content for its target audience of local residents and tourists. Technically, the website uses a combination of Bootstrap 4, jQuery, and other JavaScript libraries to deliver a responsive and visually appealing experience. However, some technologies like jQuery 1.12.0 are outdated and may pose security risks. The site lacks explicit privacy and cookie policies, and no advanced security headers were detected, indicating room for improvement in security posture and compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data, but the absence of security headers and use of outdated libraries reduce its security maturity. No incident response or vulnerability disclosure information is provided. Overall, the risk is moderate with recommendations to update libraries, implement security headers, and add privacy and cookie policies. The website is safe for general audiences, contains no adult or questionable content, and is fully accessible without WAF or blocking mechanisms. Contact information is clearly presented, enhancing business credibility. Strategic improvements in security and compliance would strengthen trust and reduce potential risks.

J

Jan Rothuizen

janrothuizen.nl

55

Jan Rothuizen is a visual artist with an established online presence showcasing his artwork, including drawings, books, and interactive projects. The website serves both as a portfolio and an e-commerce platform, targeting art enthusiasts and collectors. The site is built on WordPress with WooCommerce, leveraging modern web technologies and plugins to provide a functional and visually appealing user experience. Social media integration and active marketing tools like Mailchimp and Facebook Pixel support audience engagement and outreach. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit privacy policies are recommended. The domain is longstanding and consistent with the artist's career, enhancing trustworthiness.

D

DDK

ddk.nl

57

DDK is a creative marketing agency based in the Netherlands, specializing in communication strategy, design, and campaign development primarily for government and non-profit clients. The company has an established market presence since 2006, demonstrated by a professional website featuring case studies and client logos. The technical infrastructure is modern, leveraging WordPress with SEO and social media integrations, and hosted by a reputable provider with DNSSEC and HTTPS enabled. Security posture is solid with no visible vulnerabilities, though explicit security headers and privacy policies are absent. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

M

Modern Campus USA Inc.

moderncampus.com

70

Modern Campus USA Inc. is a leading provider of higher education management software designed to help colleges and universities attract, engage, and retain learners through personalized digital experiences. The company offers a comprehensive suite of products including web content management, curriculum and catalog management, student engagement platforms, and professional services. With over 1,700 clients and multiple industry awards, Modern Campus holds a strong market position in the education technology sector. The website infrastructure leverages modern technologies such as Bootstrap, jQuery, HubSpot marketing and analytics tools, and proprietary CMS solutions. The site is well-optimized for mobile devices, features clear navigation, and integrates extensive marketing and tracking tools to support digital engagement and lead generation. Hosting and domain registration are managed through reputable providers, with domain security measures like domain locking in place. Security posture is solid with HTTPS enforced, no exposed sensitive data, and secure form handling via HubSpot. However, DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Contact information is clearly presented, supporting business credibility and user trust. Overall, the website and business demonstrate a mature digital presence with strong security and privacy practices, though improvements in security policy transparency and DNS security could further enhance trust and resilience.

N

NetRefer

netrefer.com

63

NetRefer is a well-established technology company specializing in affiliate marketing software solutions tailored for the online casino and sports betting sectors. Founded in 2002, the company positions itself as a leading provider in the iGaming industry, offering a range of services including AI-powered affiliate platforms, operator-focused APIs, and data ingestion solutions. The website reflects a professional and consistent brand image with a clear focus on its target audience of iGaming operators and affiliates. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies such as Google Analytics 4, Google Tag Manager, FontAwesome, GSAP, and various JavaScript libraries for enhanced user experience and performance. Hosting is managed via Akamai, indicating a robust infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. From a security perspective, the site employs HTTPS with an excellent SSL configuration and includes a cookie consent mechanism compliant with GDPR principles. However, it lacks DNSSEC, security headers, and publicly available security policies or incident response contacts, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, NetRefer presents a credible and professional online presence with a solid business model and technical foundation. To enhance trust and compliance, it is recommended to publish comprehensive privacy and security policies, implement DNSSEC, and add security headers. These steps will strengthen the security posture and privacy compliance, aligning with industry best practices.

J

JSC VIA SMS group

viasmsgroup.com

70

VIA SMS Group is a Latvia-based financial services company founded in 2013, offering a range of accessible financial solutions including loans, payments, savings, and investments across several European countries. The company operates multiple subsidiary brands tailored to regional markets, positioning itself as a reliable and established player in the regional finance sector. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting consumers and investors interested in financial products. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager for analytics, hosted behind Cloudflare DNS services. Security posture is generally good with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and some security headers are missing. Privacy and cookie policies are comprehensive and GDPR compliant, but no explicit security policy or incident response information is provided. Overall, the website is trustworthy, well-maintained, and suitable for its business purpose.

F

Forward Slope

forwardslope.com

42

Forward Slope operates a professional website built on Drupal 8, featuring a consistent and modern design with integration of popular front-end libraries and Google Analytics for user tracking. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. The website lacks explicit business descriptions, contact information, and privacy or terms of service policies, which limits transparency and trust. Technically, the site is moderately optimized for mobile and performance but could benefit from enhanced security headers and privacy compliance measures. Overall, the security posture is average with room for improvement in policy disclosures and incident response readiness.

G

Groupe Ficade

ficade.fr

56

Groupe Ficade is a French media and communication group operating across multiple countries, offering services including B2B media, audiovisual content, rating agency activities, events, training, and consulting. The company targets professional communities and businesses, positioning itself as a key player in media and communication with an international footprint. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on Joomla CMS with the Helix Ultimate framework, leveraging modern libraries such as Bootstrap 5 and jQuery. The site is mobile-optimized and uses standard web technologies for sliders and popups. Performance is moderate, with room for improvement in accessibility and SEO. Security-wise, the site enforces HTTPS and uses secure forms with CSRF tokens but lacks explicit security headers and incident response information. The WHOIS data is missing, which slightly reduces domain trustworthiness, but the professional web presence and compliance with privacy regulations mitigate this concern. Overall, the site is secure, compliant, and professionally maintained, suitable for its business audience.

G

Groupe Ficade

groupeficade.fr

59

Groupe Ficade is a French-based international media and communication group operating in over 50 countries, specializing in B2B media, audiovisual content, events, consulting, and training services. The company targets professional communities and businesses, providing platforms for information and communication to support business growth and networking. The website reflects a mature digital presence with a professional design and clear navigation, supporting the company's market position as a diversified media and consulting group. Technically, the website is built on Joomla CMS with modern frameworks such as Helix Ultimate and Bootstrap 5, incorporating popular JavaScript libraries for enhanced user experience. Hosting is provided by OVH, a reputable provider, and the site uses HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization, though accessibility features could be improved. From a security perspective, the site employs HTTPS and CSRF tokens in forms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Analytics usage is moderate, primarily via Google Analytics and Google Tag Manager. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen trust and compliance.

C

CleverDesign - CorchiaWolinerRhoda

cleverdesign.com

45

CleverDesign - CorchiaWolinerRhoda is a well-established boutique web and graphic design firm based in New York City, founded in 1980. The company specializes in mobile-friendly website development, logo creation, pitchbook templates, email campaigns, and marketing materials primarily serving clients in private equity, investment banking, hedge funds, and energy sectors. Their market position is strong within their niche, supported by a long domain age and a professional portfolio showcasing reputable clients. Technically, the website uses a modern tech stack including Bootstrap and jQuery, hosted on Winhost, with a custom CMS to empower clients to manage content without coding knowledge. The site is mobile-optimized and well-structured, though performance is moderate and accessibility is basic. Security posture is moderate; while the domain has transfer protection, DNSSEC is not enabled and no security headers were detected. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility.