Security Directory

A

AMU Nordjylland

amunordjylland.dk

58

AMU Nordjylland is a regional educational institution in Denmark specializing in vocational training and AMU courses. It serves a diverse audience including students, unemployed individuals, and businesses, offering a broad portfolio of courses in construction, electronics, social care, transport, and logistics. The institution maintains a professional online presence with clear navigation, multiple course offerings, and active social media engagement. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery and Bootstrap, integrates marketing and analytics tools like Google Tag Manager and Visual Website Optimizer, and supports mobile responsiveness and accessibility. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible security headers and explicit privacy and security policies. WHOIS data is unavailable, which slightly impacts trust but does not detract significantly from the overall legitimacy. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response information.

H

Hudson Nordic Denmark

hudson.dk

50

Hudson Nordic Denmark is a professional services company specializing in recruitment, leadership development, and coaching across Denmark and the Nordic region. The company positions itself as a leading Nordic partner with a proprietary approach to talent management, offering services such as Executive Search, Assessment Solutions, Executive Coaching, and Team Development. The website is well-branded and targets businesses and candidates seeking high-quality leadership and talent solutions. Technically, the site is built on WordPress using Elementor and Yoast SEO, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and visible privacy or cookie policies. WHOIS data for the subdomain is unavailable, which is typical for subdomains, but reduces domain trustworthiness slightly. Overall, the site reflects a professional and credible business presence with room for improvement in privacy compliance and security best practices.

STEMA srl is an established Italian consulting company specializing in management consultancy, personnel search and selection, corporate restructuring, human resources development, and training services. Operating since 2000, it serves businesses primarily in Como and the broader Italian market. The company holds official authorization from the Italian Ministry of Labor and is affiliated with reputable industry associations such as Confindustria and RSassores, reinforcing its credibility and market position. Technically, the website employs a moderately modern technology stack including jQuery, Bootstrap, Google Analytics, and Google Maps API. The site is mobile-optimized with good navigation and SEO practices, although some technical improvements such as updated libraries and enhanced security headers could be implemented. The use of ezPublish CMS is inferred from HTML comments and structure. From a security perspective, the site uses HTTPS but lacks DNSSEC and explicit security headers, which are recommended for improved protection. The extensive candidate CV submission form collects sensitive personal data with a mandatory privacy consent checkbox, indicating some GDPR compliance. However, no explicit security or incident response policies are published, which could be improved to enhance trust and readiness. Overall, the website is professional, trustworthy, and functional with a solid business foundation. Strategic enhancements in security posture and transparency around data protection policies would further strengthen its risk profile and compliance stance.

D

Danish Aerospace Company

danishaerospace.com

48

Danish Aerospace Company is a specialized technology developer focused on innovative aerospace technologies that support human presence in space and applications in extreme environments on Earth. Founded in 2013, the company maintains a professional web presence with investor relations, product information, and partnership details. Their market position is that of a niche aerospace technology innovator with a clear focus on space and transportation sectors. The website content is well-structured and professionally designed, targeting aerospace professionals, investors, and partners. Technically, the website is built on Joomla CMS with modern frontend libraries such as jQuery, Bootstrap, and Swiper. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Hosting and domain registration are stable and consistent with the business profile, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism with detailed categories. However, it lacks visible security headers and a published security policy or vulnerability disclosure. No explicit contact information or incident response channels are provided, which limits transparency. The domain registration is legitimate and consistent with the company’s history, enhancing trust. Overall, the website scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance. Strategic enhancements in security headers, privacy policy publication, and contact transparency would strengthen the site’s trustworthiness and compliance posture.

S

Spectro Inlets

spectroinlets.com

55

Spectro Inlets is a specialized technology company focused on providing advanced electrochemical mass spectrometry solutions primarily for battery research and electrochemistry applications. Their products, such as the EC-MS Premium and EC-MS Professional, enable real-time gas analysis with exceptional sensitivity and time resolution, targeting researchers and industrial users seeking precise measurement tools. The company positions itself as a niche leader with a strong emphasis on innovation and environmental impact optimization. Technically, the website is built on a modern WordPress platform using Elementor and Astra theme, integrating various industry-standard tools such as Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. The site demonstrates good SEO practices, mobile optimization, and a professional design, reflecting a mature digital presence. Hosting details are not explicit but the domain registrar is reputable, and the site uses HTTPS with a good SSL configuration. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks some advanced HTTP security headers and DNSSEC. No explicit security policies or incident response contacts are published, which could be improved. Privacy compliance is well addressed with a privacy policy and cookie consent mechanism, indicating GDPR awareness. No exposed sensitive data or vulnerabilities were detected in the analysis. Overall, the website and business exhibit a solid risk profile with good credibility and technical maturity. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing security and incident response policies, and providing direct contact information to improve trust and compliance further.

Handy Partners is a Danish small business specializing in advisory board consulting, financial services including accounting and payroll, and project implementation. The company has a long-established domain since 2004, indicating stability and experience in its niche. The website is built on WordPress using common technologies such as jQuery, Bootstrap, and FontAwesome, hosted by Simply.com A/S. The site content is basic but relevant to the business offerings, targeting other businesses seeking advisory and financial services. However, the website lacks comprehensive privacy, cookie, and security policies, which are critical for compliance and trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers, which are recommended to enhance protection. Overall, the website is functional but would benefit from improvements in privacy compliance, security best practices, and richer content to improve user trust and SEO.

M

Mercatus Reklamebureau A/S

mercatus.dk

47

Mercatus Reklamebureau A/S is a Danish communications and marketing agency with approximately 40 years of experience, specializing in online and offline marketing, communication, and brand identity services. The company targets businesses seeking professional marketing and communication solutions, offering a broad range of services including print, websites, email marketing, video production, PR, social media, strategy, and Google Ads. The website reflects a well-established local business with consistent branding and a professional online presence. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Facebook SDK, with good mobile optimization and moderate performance. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are found. Privacy compliance is basic but present, with a privacy policy and cookie banner. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is professional, trustworthy, and well-suited for its business purpose.

K.M.Trust & Partners is a specialized retained executive search and leadership consulting firm focused on C-level recruitment and management board placements. The company offers a range of services including executive search, leadership development, executive coaching, and human resources services, targeting corporate clients primarily in Romania. The website is professionally designed with clear navigation and relevant content, supporting a positive user experience. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and integrates marketing and analytics tools like MailChimp, Crazy Egg, LinkedIn Insight Tag, and Google Analytics. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS registration data is a notable concern, potentially indicating recent domain registration or privacy issues. Overall, the site demonstrates good business credibility and technical implementation but would benefit from enhanced security and privacy compliance measures.

A

Actee

relationtechnologies.com

69

Actee is a Denmark-based company specializing in game-based workplace learning and engagement tools. Founded in 2012, it offers over 150 simulation games and certifications designed to improve learning retention and leadership development. The company targets consultants, organizational development professionals, universities, and corporate learning teams globally. Their business model includes SaaS offerings, certification programs, and a global network of certified partners. The website reflects a professional and consistent brand with clear navigation and comprehensive content about their services and certifications. Technically, the site uses modern frameworks like Bootstrap and Umbraco CMS, integrates multiple marketing and analytics tools, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and secure forms, though some security headers are missing and no explicit security policy or incident response information is published. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is trustworthy, well-maintained, and positioned as a niche leader in educational game-based learning solutions.

S

Shipmondo

shipmondo.com

69

Shipmondo is a Denmark-based technology company specializing in providing an all-in-one shipping and logistics platform for businesses of all sizes, particularly targeting e-commerce and enterprise customers. The platform integrates multiple carriers, automates freight booking, order management, customs documentation, and offers personalized customer communication and return management. The company has a strong market presence in Northern Europe with over 50,000 companies using its services daily and is recognized as an award-winning solution in the shipping industry. Technically, Shipmondo's website is built on modern web technologies including Jekyll, Bootstrap, and uses various third-party services such as Intercom for customer engagement and Cookiebot for privacy compliance. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although DNSSEC is not enabled and no explicit security headers were detected in the HTML content. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, Shipmondo demonstrates a mature digital infrastructure and a professional online presence with good privacy and security practices.

ETEVERS E&L is a South Korean technology and logistics company specializing in integrated device and service management solutions, fulfillment services, and E-Commerce logistics. The company has a stable financial structure, a specialized workforce, and a broad portfolio of related subsidiaries and partner sites, indicating a well-established market presence. The website is professionally designed with good content quality and clear navigation, targeting IT service users and logistics clients. Technically, the site uses a mix of legacy and modern JavaScript libraries hosted on AWS infrastructure, with moderate performance and good mobile optimization. Security posture is moderate but could be improved by updating outdated libraries and implementing security headers. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy with a legitimacy score of 85 based on WHOIS and content consistency.

ETEVERSePA is a South Korean IT solutions company specializing in digital transformation services including infrastructure integration, cloud migration, and big data solutions. Founded in 2007, the company presents itself as a stable and experienced player in the technology sector with a medium-sized workforce and multiple partnerships. The website reflects a professional business model targeting IT industry clients seeking comprehensive IT infrastructure and cloud services. Technically, the site uses a mix of legacy and modern JavaScript libraries and frameworks, hosted on AWS infrastructure, with moderate performance and good mobile optimization. Security posture is moderate with some concerns due to outdated libraries and lack of visible security headers or cookie consent mechanisms. The domain registration is consistent with the business location and claims, enhancing trustworthiness. Overall, the website is functional and professional but would benefit from security and privacy improvements.

ETEVERSeBT is a South Korean IT solutions company founded in 2022, specializing in providing optimized business IT solutions through partnerships with leading software, hardware, and network manufacturers. The company positions itself as a customer-centric business IT solutions provider with a medium-sized operation and a growing partnership ecosystem. The website is professionally designed, primarily in Korean, and targets IT industry clients and partners. Technically, the website uses a legacy jQuery version alongside modern libraries like Swiper.js and fullpage.js, hosted on AWS infrastructure. While the site is mobile-optimized and SEO-friendly, it lacks some modern security best practices such as security headers and cookie consent mechanisms. The security posture is moderate but could be improved by updating outdated libraries and enhancing domain security features. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security and privacy compliance would enhance trust and reduce risk.

ETECH SYSTEM, operated by Young Woo Digital, is a Korean IT company specializing in digital transformation solutions and IT services. Established in 2010, the company has a medium-sized presence with overseas offices in China, Japan, India, and the USA. Their offerings include IT consulting, infrastructure system integration, cloud and big data services, and maintenance. The website reflects a professional and consistent brand image with clear navigation and relevant business content targeting corporate clients seeking IT innovation. Technically, the website uses a modern but somewhat dated technology stack including jQuery 1.7.1, Bootstrap, and fullpage.js, hosted on AWS infrastructure. The site is mobile-optimized and SEO-friendly but lacks advanced accessibility features and some modern security headers. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (assumed from domain and AWS hosting), but no explicit security headers were found in the HTML. The use of an outdated jQuery version poses a minor risk. There is no visible cookie consent mechanism or published security policy, which may impact privacy compliance. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the website is functional and professional with moderate security and privacy compliance. Strategic improvements in security headers, updated libraries, and privacy mechanisms would enhance trust and compliance.

ETEVERS is a South Korean IT innovation company specializing in providing optimized IT infrastructure and solutions to support sustainable growth and transformation. The company has a solid market presence with multiple partnerships with major technology providers such as Cisco, Oracle, AWS, and others. Their website reflects an active business with recent news updates and a clear focus on partnership and innovation. Technically, the site uses a modern JavaScript stack including jQuery, Bootstrap, Swiper, and fullPage.js, hosted on AWS infrastructure, indicating a moderate level of digital maturity. The website is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the domain is registered with a reputable Korean registrar and has a long registration period with transfer protection enabled, supporting legitimacy. However, the site lacks DNSSEC and visible security headers, and no cookie consent mechanism is implemented despite cookie usage, which are areas for improvement. No incident response or security policy information is published, limiting transparency in security posture. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is moderate with no critical vulnerabilities or blocking detected. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent for compliance, and publishing security policies to improve trust and compliance. The company demonstrates a professional online presence with consistent branding and active engagement with partners and customers.

C

Capgemini Nederland B.V.

nationaalgeoregister.nl

70

The Nationaal Georegister website serves as the national spatial data catalog for the Netherlands, providing an INSPIRE-compliant discovery service for geospatial datasets, services, and maps. Operated under the auspices of Capgemini Nederland B.V., the platform leverages the GeoNetwork opensource software to facilitate access and interoperability of spatial information among various organizations. The site targets governmental bodies, researchers, and professionals requiring authoritative spatial data within the Dutch context. Technically, the website employs AngularJS, Bootstrap, and OpenLayers, delivering a moderately performant and mobile-basic optimized experience. Security posture is solid with HTTPS and DNSSEC enabled, secure login forms, and no evident vulnerabilities, though security headers could be enhanced. Privacy and cookie policies are present and linked to official government domains, indicating GDPR compliance. Overall, the site demonstrates a trustworthy and professional digital presence aligned with its governmental mission.

N

Nemzetközi Gyermekmentő Szolgálat

biztonsagosinternet.hu

56

Biztonsagosinternet.hu is a Hungarian non-profit online platform operated by the Nemzetközi Gyermekmentő Szolgálat (International Child Rescue Service). It provides a secure and anonymous reporting hotline for illegal and harmful internet content, primarily focusing on protecting children and young people. The website also offers educational tips and advice on safe internet usage. The platform holds a trusted position in the Hungarian market, supported by partnerships with governmental and international organizations such as Saferinternet.hu, INHOPE, and national law enforcement agencies. Technically, the site is built on Drupal 10 with modern frontend libraries, ensuring good mobile responsiveness and accessibility. Security posture is solid with HTTPS and some security modules in place, though explicit security headers could be improved. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a mature digital presence aligned with its mission to safeguard children online.

Seneca is a Dutch technology company specializing in modular web applications for digital customer engagement, including websites, intranet, online forms, enterprise search, and knowledge management. The company is positioned as a trusted provider with ISO 27001 certification and compliance with DigiD security assessments, indicating a strong commitment to information security. Their partnership with Decos further strengthens their market position. The website is professionally designed, mobile-optimized, and provides clear contact and privacy information, reflecting a mature digital presence. Technically, the website uses modern frameworks such as Bootstrap and jQuery, with Matomo analytics for privacy-conscious user tracking. The CMS appears custom or proprietary (Smartsite). Performance and accessibility are good, though some security headers are not explicitly detected, representing an opportunity for enhancement. The site enforces HTTPS and implements cookie consent mechanisms, supporting GDPR compliance. Security posture is strong with certifications and no visible vulnerabilities or exposed sensitive data. However, the absence of an incident response page or vulnerability disclosure policy suggests room for improvement in transparency and readiness. Overall, the website and business demonstrate a high level of professionalism and trustworthiness, suitable for their target market. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure information, and adding Terms of Service to enhance legal clarity and user trust.

N

Nemzetközi Gyermekmentő Szolgálat Magyar Egyesület

gyermekmento.hu

49

Nemzetközi Gyermekmentő Szolgálat Magyar Egyesület is a well-established non-profit organization dedicated to supporting disadvantaged children in Hungary and internationally. Founded in 1988, the organization operates multiple programs aimed at improving the lives of physically and mentally disabled, orphaned, and socially disadvantaged children. Their activities include healthcare services, organizing charity events, and community outreach. The website reflects a professional and consistent brand with a focus on transparency and engagement through events and social media. Technically, the website employs modern JavaScript frameworks such as Aurelia and React, along with Bootstrap for responsive design. It uses Google Analytics and Google Tag Manager for tracking and performance monitoring. The site is hosted securely with HTTPS and includes CSRF tokens for form security. However, some security headers are not explicitly detected, and privacy compliance elements like privacy and cookie policies are missing. From a security perspective, the site demonstrates basic good practices but lacks comprehensive security policies and vulnerability disclosures. No WAF or blocking mechanisms are detected, and the domain's WHOIS data is consistent with the organization's history, supporting legitimacy. The absence of explicit contact emails and phone numbers in the analyzed content suggests these may be located on other pages. Overall, the website is credible and professionally maintained but would benefit from enhanced privacy compliance and security policy transparency to improve trust and regulatory adherence.

Gemeente Wijdemeren is the official municipal government website serving the Wijdemeren region in the Netherlands. It provides residents and visitors with essential public services information such as appointment scheduling, passport and ID services, driver's license processing, moving notifications, roadwork updates, and public announcements. The website targets local citizens and stakeholders, positioning itself as a trusted government authority with a clear focus on accessibility and user engagement. Technically, the site employs a modern tech stack including Bootstrap for responsive design, FontAwesome for icons, jQuery for scripting, Matomo for privacy-conscious analytics, and ReadSpeaker for accessibility enhancements. The site is mobile-optimized, well-structured, and SEO-friendly, though it appears to use a custom or proprietary CMS. Performance is moderate with good accessibility features. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance. However, it lacks visible security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the municipality's identity. Overall, the website demonstrates a solid balance of usability, privacy, and trustworthiness appropriate for a government entity. Strategic improvements in security headers, incident response transparency, and terms of service publication would further enhance its security posture and compliance standing.

A

Advens

advens.com

76

Advens is a well-established French cybersecurity company founded in 2000, with a strong presence across France and Europe, employing around 600 experts. The company offers a comprehensive suite of cybersecurity services including risk management, compliance, operational security, offensive security, and CISO office services. Their business model focuses on protecting organizations from cyber threats while emphasizing social impact and sustainability. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates HubSpot for marketing and analytics. The site is well-optimized for SEO, mobile-friendly, and provides a professional user experience. Security-wise, the site enforces HTTPS, uses secure forms with consent mechanisms, and holds ISO 27001 certification, though it could improve by enabling DNSSEC and publishing a vulnerability disclosure policy. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

I

Instituto de Crédito Oficial

ico.es

64

Instituto de Crédito Oficial (ICO) is a Spanish public financial institution dedicated to providing financing solutions to support investment projects and liquidity needs of self-employed individuals and SMEs. With a history spanning over 50 years, ICO plays a pivotal role in Spain's economic development by offering a comprehensive catalog of credit lines, direct financing, guarantees, and financial instruments managed on behalf of the State. The institution also engages with investors through green and social bond frameworks, emphasizing sustainability and responsible financing. Technically, the ICO website is built on the Liferay Portal CMS platform, leveraging modern web technologies including React, Google Tag Manager, Google Analytics, and Google reCAPTCHA for security and analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. The use of asynchronous script loading and content delivery optimizations contribute to moderate performance. From a security perspective, the website enforces HTTPS with strong SSL configurations and employs security best practices such as bot protection via reCAPTCHA and no visible exposure of sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The WHOIS data for the domain is not accessible due to registry restrictions by Red.es, but the website's government affiliation and content strongly support its legitimacy. Overall, ICO's digital presence is robust and trustworthy, reflecting its status as a key government financial institution. Strategic recommendations include publishing clear security and incident response policies, enhancing transparency around data protection officers, and implementing a security.txt file to facilitate vulnerability reporting.

S

Sveučilište u Splitu

unist.hr

64

Sveučilište u Splitu is a well-established public university in Croatia, founded in 1974, serving over 20,000 students across multiple faculties and departments. The website reflects a mature digital presence with comprehensive information about academic programs, research, community engagement, and international cooperation. The institution holds the HR Excellence in Research certification, indicating a commitment to research quality and human resources standards. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and secure user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust with clear policies and GDPR adherence. Overall, the site projects high professionalism and trustworthiness, supporting the university's reputation and operational needs.

A

Advens

advens.fr

75

Advens is a leading independent cybersecurity company based in France with a strong European presence. The company employs around 600 experts and offers a comprehensive range of cybersecurity services including risk management, compliance, operational security, offensive security, and security technology solutions. Their mission emphasizes protecting organizations from cyber threats while contributing positively to society and the environment. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting organizations in sectors such as healthcare, public services, and industry. Technically, the site is built on WordPress with modern frameworks and integrates HubSpot for marketing and analytics. Security posture is strong with HTTPS enforced and secure forms, though some security headers could be improved and a vulnerability disclosure mechanism is absent. WHOIS data is missing, which slightly reduces trust but the overall digital presence and certifications support legitimacy.

H

HACKRON

hackron.com

64

HACKRON is a specialized event organizer focused on cybersecurity congresses and Capture The Flag (CTF) competitions primarily in the Canary Islands, Spain. The website promotes upcoming events scheduled for 2025, targeting cybersecurity professionals and enthusiasts interested in ethical hacking. The business model revolves around event ticket sales and community engagement through calls for papers and talks. The company has a consistent brand presence and a domain registered since 2013, aligning with its operational history. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, and various animation and UI libraries. Hosting and DNS are managed via Cloudflare, providing performance and security benefits, although DNSSEC is not enabled. The site is mobile optimized with good design and navigation, but lacks advanced SEO and accessibility features. No CMS is detected, indicating a custom or static site build. From a security perspective, HTTPS is implied but no explicit security headers are detected in the HTML content. The site does not implement cookie consent mechanisms or detailed privacy policies, which are compliance gaps under GDPR. Contact information is provided via email and physical address, with incident response contact channels including Telegram and email. No vulnerability disclosure or security policy pages are found, limiting transparency. Overall, the website is functional and professional but could improve its security posture and privacy compliance. The domain registration is consistent and trustworthy, supporting business credibility. Strategic improvements in security headers, cookie consent, and privacy documentation would enhance trust and compliance.

V

Veiligheidsregio Brabant Zuidoost

vrbzo.nl

73

Veiligheidsregio Brabant Zuidoost operates as a regional governmental organization focused on public safety and emergency management within the Brabant-Zuidoost region of the Netherlands. The website serves as an informational and communication platform for residents, municipalities, and partners, emphasizing safety collaboration and risk profiling. The organization positions itself as a key regional safety authority, providing essential services related to emergency preparedness and public safety coordination. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Cookiebot for GDPR-compliant cookie management. The site integrates modern technologies including jQuery, Bootstrap, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site demonstrates good mobile responsiveness and basic accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent mechanisms are robust, and no exposed sensitive data or vulnerable libraries were detected. However, explicit security policies and incident response contacts are absent, representing areas for improvement. The domain registration details align well with the website's governmental nature, supporting high legitimacy and trust. Overall, the website presents a professional, trustworthy, and compliant digital presence for a regional government entity. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and maintaining regular audits of third-party scripts to sustain security and compliance posture.

T

The Hacking Day (THD'S)

thdsecurity.com

45

The Hacking Day (THD'S) is a cybersecurity education platform offering practical workshops and certifications focused on hacking, pentesting, and information security. The website positions itself as a regional leader in Central and South America, providing hands-on training led by experts. The business model revolves around educational services delivered through courses, workshops, and certifications, targeting individuals seeking to enhance their cybersecurity skills. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Owl Carousel, and Google reCAPTCHA, hosted via NameCheap. The site is mobile optimized with good design and navigation, though SEO and accessibility features are basic. No CMS is detected, indicating a custom or static site approach. Security posture is moderate: HTTPS is enforced and reCAPTCHA is used to protect forms, but the absence of DNSSEC and security headers represents gaps. No privacy or cookie policies are present, and no vulnerability disclosure or incident response information is published, which limits compliance and transparency. Overall, the website is professional and functional with moderate trustworthiness. Strategic improvements in privacy compliance, security headers, and transparency would enhance its security posture and user trust.

T

The Hacking Day (THD'S)

thehackingday.com

43

The Hacking Day (THD'S) operates as an educational platform offering practical cybersecurity workshops and certifications primarily focused on hacking, pentesting, and related security disciplines. The website presents a professional and content-rich interface targeting individuals seeking hands-on knowledge in cybersecurity, supported by regional institutional endorsements. Technically, the site uses a modern front-end stack including Bootstrap, jQuery, and Owl Carousel, with some security measures like Google reCAPTCHA implemented. However, there is no visible HTTPS enforcement or security headers in the provided data, which weakens the security posture. The absence of privacy and cookie policies, as well as lack of explicit contact information, further impacts compliance and trust. Critically, the WHOIS data for the domain is missing or unavailable, raising concerns about domain legitimacy and registration status. Overall, the site is functional and informative but requires improvements in security, compliance, and transparency to enhance trust and reduce risk.

C

CEPYME

cepyme500.com

71

CEPYME500 is a Spanish business initiative focused on identifying and promoting the top 500 companies leading in business growth within Spain. The website serves as a platform to showcase these companies, providing recognition and visibility to foster further growth and innovation. The initiative is supported by reputable partners including Banco Santander, ICO, and others, enhancing its credibility and market position. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Amazon CloudFront CDN, ensuring a responsive and moderately performant user experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security headers and explicit privacy policies are missing. The absence of WHOIS data for the domain raises some legitimacy concerns, but the professional presentation and partner associations mitigate this risk to some extent. Overall, the website is well-structured and serves its business purpose effectively, but improvements in privacy compliance and security transparency are recommended.

D

DPD

dpd.lv

71

DPD Latvija operates as a key parcel delivery and logistics provider in Latvia, serving both private individuals and business clients. The website reflects a mature digital presence with localized content, multiple language support, and integration with the broader DPD group ecosystem. The company offers a range of services including parcel shipping, pickup networks, contactless delivery, and e-commerce logistics solutions, positioning itself as a leading player in the Latvian transportation sector. Technically, the website is built on WordPress with Bootstrap and jQuery, leveraging custom plugins tailored for DPD's operational needs. The site demonstrates good mobile optimization, SEO practices, and user experience design. Analytics and marketing tools such as Google Tag Manager and TagCommander are implemented with consent mechanisms, indicating attention to privacy compliance. From a security perspective, the site enforces HTTPS and employs secure form handling with nonce tokens. While explicit security headers are not detected, no critical vulnerabilities or exposed sensitive data were found. Privacy policies and cookie consent banners are present and comprehensive, supporting GDPR compliance. However, incident response and vulnerability disclosure information are absent, representing an area for improvement. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. The missing WHOIS data for the exact subdomain is due to querying a subdomain rather than the main domain, which is well-known and reputable. Strategic recommendations include enhancing security headers, publishing incident response details, and improving accessibility features to further strengthen the security posture and compliance.

M

Meritking News - The Rhythm of World Sport

meritking.news

64

Meritking News is a newly launched online sports news platform focusing on global sports such as basketball, football, tennis, and more. The website offers multilingual content and live scores, targeting sports enthusiasts worldwide. The business model relies primarily on advertising revenue, as evidenced by Google Adsense integration. The site uses Drupal 11 CMS and modern web technologies, hosted with Cloudflare DNS and registered via NameCheap. The website design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the site lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosures. No explicit contact information or incident response channels are provided, limiting transparency. Overall, the domain registration is consistent with the business launch, showing no suspicious patterns. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

C

Craig Hughes

rungie.com

67

Rungie.com is a personal website for Craig Hughes, primarily serving as a placeholder and a platform to share content and enable appointment bookings via Calendly. The site is simple, with basic content and clear contact information including phone, email, and physical address. The business model is personal branding and scheduling meetings, targeting general visitors or contacts interested in connecting with Craig. The website uses modern static site technology (Hugo) and Bootstrap for responsive design, hosted with DNS services from Amazon Registrar, Inc. The technical infrastructure is moderate in performance and mobile optimization, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain status protections in place, but lacks advanced security headers and DNSSEC. No privacy or cookie policies are present, indicating limited compliance with GDPR or similar regulations. Analytics are implemented via Google Tag Manager, but privacy compliance is minimal. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and legitimate as a personal site, but improvements in privacy compliance, security headers, and formal policies would enhance its security and professionalism. The domain is long-standing and consistent with the personal nature of the site, with no suspicious indicators detected.

I

Interactvty

interactvty.com

66

Interactvty is a Spanish technology company specializing in second-generation over-the-top (OTT) media technology and TV-commerce solutions. Positioned as a pioneer in interactive media and monetization platforms, the company targets broadcasters, sports organizations, public administration, brands, education, influencers, media, and events sectors. Their business model revolves around providing OTT technology with integrated commerce capabilities, leveraging interactive content to enhance user engagement and revenue streams. The website reflects a professional digital presence with clear navigation and multilingual metadata, indicating a focus on Spanish-speaking markets with international outreach. Technically, the website is built on WordPress using Elementor and Yoast SEO, incorporating modern web technologies such as Bootstrap and jQuery. Security measures include HTTPS enforcement and Google reCAPTCHA integration to protect forms from abuse. Cookie consent mechanisms are implemented, supporting GDPR compliance. However, the absence of explicit security policies and incident response information suggests room for improvement in transparency and preparedness. From a security perspective, the site demonstrates good practices with SSL and form protection but lacks advanced HTTP security headers and public vulnerability disclosure information. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and EU funding acknowledgments. This discrepancy warrants monitoring and further verification to ensure trustworthiness. Overall, Interactvty presents as a credible small technology company with a specialized niche in OTT and interactive TV-commerce. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure policies, and clarifying domain registration details to strengthen trust and compliance posture.

G

GGD AppStore

ggdappstore.nl

61

The GGD AppStore is an official Dutch public health platform operated by GGD GHOR Nederland, providing a curated catalog of health-related mobile applications that have been tested and validated by the GGD organizations. The website targets Dutch-speaking users interested in health and wellness apps, offering categorized search and detailed app information. The platform is positioned as a trusted source for health apps in the Netherlands, supported by official branding and partnerships with health information providers. Technically, the site uses a custom backend with MagicScripts, Bootstrap for responsive design, and standard web technologies including jQuery and Font Awesome. Google Analytics and Google Tag Manager are employed for user tracking, though no explicit cookie consent mechanism is present. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks some security headers and explicit privacy compliance statements. Overall, the site is professional, user-friendly, and trustworthy, but could improve privacy compliance and security best practices.

F

First Draft

firstdraftnews.org

56

First Draft is a US-based non-profit organization dedicated to combating misinformation and disinformation through research, training, and educational resources. The website serves as a comprehensive hub offering reports, courses, and guides aimed at journalists, educators, and the public. The organization is positioned as a trusted authority in media literacy and information disorder, with a consistent brand presence and a focus on open access content under Creative Commons licensing. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various analytics and tracking tools. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and secure login forms, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a cookie policy and consent mechanism present but no clear privacy policy or GDPR compliance statements. Contact information is limited to a generic Gmail address and login form, which slightly reduces business credibility. Overall, the site is professional and trustworthy but could improve in privacy transparency and security hardening.

U

Universidad de Jaén

ujaen.es

66

The Universidad de Jaén website serves as the official digital presence of a large public university in Spain, offering comprehensive academic programs, research initiatives, and community engagement services. The site targets a broad audience including prospective and current students, academic staff, alumni, and institutional partners. It features multilingual support, rich content, and clear navigation, reflecting a mature digital presence. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies such as Bootstrap for responsive design, jQuery, and various accessibility tools including ReadSpeaker. The site enforces HTTPS and implements a Content Security Policy, alongside a robust cookie consent mechanism, indicating a good level of digital maturity and privacy compliance. From a security perspective, the site demonstrates solid practices with HTTPS, basic security headers, and no visible vulnerabilities or exposed sensitive data. However, there is room for improvement by adding additional security headers and HSTS. The WHOIS data is restricted due to registry policies, but no suspicious indicators were found, supporting the legitimacy of the domain. Overall, the website is professional, trustworthy, and well-maintained, with strong compliance to privacy regulations and a clear focus on user experience and accessibility. Strategic recommendations include enhancing security headers, expanding incident response visibility, and continuous monitoring of third-party scripts for vulnerabilities.

U

Universidad de Cádiz

uca.es

59

The Universidad de Cádiz is a well-established public university in Spain, offering a broad range of academic programs, research initiatives, and student services. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and staff. It maintains a strong market position in the education sector with recognized certifications such as ISO 14001 and EFQM 500, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress with modern frameworks like Bootstrap and jQuery, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in HTTP security headers and incident response transparency. Overall, the site demonstrates a high level of professionalism and compliance with privacy regulations, supporting its role as a reputable educational institution.

Trafic.ro is a Romanian web analytics platform operated by EXTREME SOLUTIONS SRL, providing real-time monitoring and statistics of online audiences in Romania. The platform targets website owners and digital marketers seeking detailed traffic insights and SEO benefits. It holds a strong market position as a leading private analytics site in Romania, supported by a domain age of over 15 years and authoritative claims backed by AHREFS data. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS, ensuring moderate performance and good mobile optimization. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which impacts its privacy compliance and security posture. The WHOIS data is transparent and consistent with the business claims, enhancing trustworthiness. Overall, the site is functional and professional but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

E

Ethical Hack

ehack.mx

44

Ethical Hack is a small Mexican technology consultancy specializing in cybersecurity and compliance services, alongside distribution of specialized security books from Editorial 0xWord. The company targets businesses and professionals seeking IT security solutions and educational resources in Spanish. Their market position is that of a niche provider with partnerships with recognized security vendors such as Sophos and Fortinet. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and Google reCAPTCHA implemented, though lacking some security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy with clear contact information and social media presence.

E

Einzelnet Systems S.R.L.

einzelnet.com

72

Einzelnet Systems S.R.L. is a well-established Spanish technology company specializing in multi-specialist IT services and digital transformation. Founded in 2003, it offers a broad portfolio including datacenter evolution, modern workplace solutions, cloud services, cybersecurity, data analytics, and digital business. The company emphasizes its human capital, certifications, and client-centric approach, positioning itself as a trusted partner in the technology sector. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimization, supported by Cloudflare DNS services. Security posture is strong with HTTPS and published security policies, though DNSSEC is not enabled and no explicit incident response contacts or vulnerability disclosure policies are found. Privacy compliance is robust with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, content-rich, and trustworthy, suitable for its target audience of businesses seeking IT services.

I

International Academic Program (IAP)

iapsymposia.com

45

The International Academic Program (IAP) is a small, education-focused non-profit initiative established in 2019, dedicated to fostering lifelong learning through symposia, workshops, and collaborative research projects. It targets university professors and researchers primarily from Latin America, Spain, and the broader international academic community. The program is well-positioned with partnerships including Harvard and MIT, and recognized by the Global Compact United Nations Spanish Network. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and AOS, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is basic, with no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and content-rich, supporting its academic mission effectively.

T

Tava Tehnika

tava-tehnika.lv

46

Tava Tehnika is a Latvian e-commerce retailer specializing in tools, garden and forest equipment, and both hand and power tools. The company operates an online store with a broad product assortment and offers nationwide delivery within Latvia. The website is professionally designed, featuring clear navigation and multiple contact channels including phone, email, and a contact form. Social media presence is integrated via Facebook. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and OpenCart CMS, supported by Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No blocking or WAF mechanisms were detected, allowing full content access. Privacy and cookie policies are present and GDPR compliant. Overall, the website demonstrates a mature digital presence suitable for its market segment.

C

Comité Olímpico Español

coe.es

60

The Comité Olímpico Español (COE) is the official national Olympic committee for Spain, responsible for organizing Spain's participation in the Olympic Games and promoting Olympic sports and values nationally. The website serves as an information hub for athletes, federations, and the public, providing news, results, and resources related to Olympic activities. The organization holds a strong market position as the authoritative Olympic body in Spain, with a medium-sized operational scale and a history dating back to 1912. Technically, the website is built on WordPress using Elementor, leveraging modern web technologies such as jQuery, Bootstrap, and FontAwesome. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Cookie consent and privacy compliance mechanisms are implemented effectively, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the organization's credibility. Strategic recommendations include enhancing security transparency, publishing incident response information, and improving accessibility features to further strengthen the site's security posture and user experience.

A

AutoWallis Nyrt.

autowallis.com

58

AutoWallis Nyrt. is a leading automotive and mobility service provider in Central and Eastern Europe, specializing in new and used vehicle sales, fleet management, and mobility services. Founded in 2021, the company has quickly established a strong market position with a large operational scale and a clear focus on investor relations and corporate transparency. The website reflects this with comprehensive business information, investor resources, and multilingual support. Technically, the site is built on WordPress with modern libraries and plugins, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit incident response policies. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

E

Excellence-Innova S.L.

campusdelvino.com

61

Campus Internacional del Vino, operated by Excellence-Innova S.L., is a specialized educational platform offering university-level training focused on the wine industry, including enology, viticulture, wine business management, and enotourism. The website presents a professional and content-rich platform with a clear focus on e-learning and collaborative education. It targets professionals and students seeking specialized knowledge in the vitivinicultural sector. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and UIkit, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mautic. The site is mobile-optimized and provides a good user experience with clear navigation and professional branding. Security-wise, HTTPS is enforced, and forms include CSRF tokens; however, the absence of security headers and a missing WHOIS domain registration record are notable concerns. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the site is credible and functional but would benefit from improved domain registration transparency and enhanced security headers.

fast.ai is an educational organization focused on making deep learning and neural networks accessible through practical courses, open-source software libraries, and published materials. The website serves as a hub for their courses, software (fastai and nbdev), and blog content, targeting developers and learners interested in AI and machine learning. The organization is recognized in reputable media outlets, enhancing its credibility. Technically, the website uses modern frameworks such as Bootstrap and Quarto, with good mobile optimization and fast performance. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable due to malformed responses, limiting domain trust verification. Overall, the site is professional, content-rich, and trustworthy but could improve privacy compliance and security best practices.

R

RLDatix Government & Commercial

rldatixgc.com

56

RLDatix Government & Commercial operates a professional website offering advanced workforce management and transport solutions tailored for government and commercial sectors. The company positions itself as a strategic partner for organizations facing complex operational challenges, providing software products such as OneView, Flexiroute, HRCase, and Expenses. The website demonstrates a mature digital presence with modern technologies, strong SEO, and user-friendly design optimized for mobile devices. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS registration data and lack of direct contact emails or phone numbers slightly diminish the overall trustworthiness from a domain registration and business transparency perspective. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but incident response and security policy disclosures are missing. Overall, the website reflects a credible and professional business with room for improvement in transparency and security communication.

N

Nissan Motor Corporation

nissanmotor.jobs

58

Nissan Motor Corporation operates a comprehensive global career website aimed at attracting talent worldwide. The site highlights Nissan's diversified automotive manufacturing business, emphasizing innovation, diversity, and employee development. It serves as a portal for job seekers to explore career areas and apply via trusted recruitment partners. Technically, the website employs modern frameworks such as React and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and privacy compliance evident through linked policies and consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site projects a professional and trustworthy image aligned with Nissan's global brand.

M

My Assignment Services

myassignment-services.com

66

My Assignment Services is an established online academic assistance provider primarily targeting Australian students. The company offers a wide range of services including assignment help, dissertation writing, essay assistance, case study analysis, and specialized academic support across numerous disciplines. With a strong market presence demonstrated by over one million assignments delivered and a large pool of subject experts, the business positions itself as a trusted partner for academic success. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Analytics, Microsoft Clarity, and Google Tag Manager, ensuring a responsive and interactive user experience. The site uses HTTPS with good SSL configuration and includes captcha mechanisms on forms to mitigate spam. However, some security headers are not explicitly detected, and there is no visible cookie consent mechanism, indicating room for improvement in privacy compliance. From a security perspective, the site shows a good baseline posture with encrypted connections and input validation but lacks published security policies or incident response information. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency, which could impact trustworthiness. Overall, the site is functional, professional, and credible but would benefit from enhanced security disclosures and privacy compliance measures. Strategically, the company should focus on improving transparency around domain registration, implementing comprehensive security headers, and introducing explicit cookie consent to align with GDPR and other privacy regulations. These steps will strengthen user trust and regulatory compliance, supporting sustainable growth in the competitive academic services market.