Security Directory

Network & Knowledge is a professional services firm based in Brescia, Italy, specializing in accounting, legal, and business consultancy services. Established in 2000, the company has grown to a medium-sized firm with over 70 professionals across 7 offices serving more than 1,200 clients. Their service portfolio includes traditional accounting, legal consultancy, labor consultancy, and specialized training through their Academy. The website reflects a mature and professional business with consistent branding and comprehensive service descriptions targeting businesses in the Brescia province. Technically, the site uses Joomla CMS with modern frontend libraries and frameworks, but lacks HTTPS support, which is a critical security gap. Security headers are present but the absence of SSL/TLS significantly reduces the security posture. Privacy and cookie policies are implemented with GDPR compliance. Overall, the site is content-rich and user-friendly but requires urgent security improvements to protect user data and enhance trust.

Ε

ΕΘΝΙΚΟ ΜΕΤΣΟΒΙΟ ΠΟΛΥΤΕΧΝΕΙΟ

ntua.gr

40

The National Technical University of Athens (NTUA) is a leading public educational institution in Greece, specializing in engineering and technical education. The website serves as the official digital presence of NTUA, providing comprehensive information about its mission, history, academic schools, study programs, research activities, news, events, and services for students and staff. It targets students, researchers, academic personnel, and the general public interested in the university's offerings and updates. The business model is that of a public university focused on education and research services, with a strong market position as a top technical university in Greece.

D

DigiTrace GmbH

digitrace.de

40

DigiTrace GmbH is a specialized IT-forensics and IT-security service provider based in Germany, offering a broad range of services including IT forensics, incident response, eDiscovery, and expert IT assessments. The company targets businesses, authorities, auditors, and legal professionals, positioning itself as a trusted expert in IT security and forensic investigations. The website is professionally designed using Joomla CMS and includes detailed service descriptions and contact information, although it lacks some modern security configurations. Technically, the site suffers from the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts its security posture. Other security best practices such as security headers and HSTS are also missing. Privacy compliance is addressed with a comprehensive privacy policy and DMARC/SPF email protections, but no cookie consent mechanism is present. Overall, the site is functional and informative but requires urgent improvements in security infrastructure to meet modern standards.

L

Landitec GmbH

landitec.com

53

Landitec GmbH is a medium-sized German company specializing in high-quality, flexible, and high-performance appliance solutions and services for the B2B sector. They focus on customized IT security appliances and software solutions, including network hardware, edge AI, 5G, and industrial applications. The company holds a strong market position as an OPNsense Platinum Partner and collaborates with notable partners such as SECUDOS and Barracuda. Their offerings include both hardware and software appliances, tailored to customer needs from initial concept to final product delivery. Technically, the website is built on Joomla CMS with the Helix Ultimate framework, utilizing modern libraries like jQuery and Bootstrap. The site is well-structured, mobile-optimized, and includes SEO best practices. However, the absence of a valid SSL certificate and HTTPS significantly impacts their security posture. Security headers are partially implemented, and cookie consent mechanisms are in place, indicating good privacy compliance. Analytics usage is moderate, primarily via Google Analytics and Tag Manager. Security-wise, the lack of valid HTTPS is a critical issue that lowers the overall security score. Other security best practices such as HSTS, OCSP stapling, and session resumption are not implemented. No explicit security policy or incident response information is found. The company provides clear contact information and maintains a professional online presence, but should prioritize securing their website with valid SSL certificates to enhance trust and compliance. Overall, Landitec GmbH presents a professional and credible business with solid technical infrastructure but requires urgent improvements in security configuration to meet modern standards and ensure customer trust.

L

Landitec GmbH

scope7.de

40

scope7.de is the online presence of Landitec GmbH's scope7® brand, specializing in hardware appliances tailored for open source solutions such as OPNsense®, flexiWAN, IPFire, Untangle®, and FRRouting. The company positions itself as a provider of powerful, cost-effective, and ready-to-use hardware platforms that are pre-installed with popular open source firewall and routing software. Their market position is strengthened by official certifications and partnerships, notably as an OPNsense Platinum Partner and flexiWAN certified hardware provider. The website reflects a professional and consistent brand image targeting businesses and professionals seeking vendor-independent open source security appliances. Technically, the site is built on Joomla CMS with modern frontend libraries and extensions, delivering good performance and mobile optimization. Security posture is solid with HTTPS enforced, HSTS header present, and no detected SSL vulnerabilities, though improvements like OCSP stapling and DNSSEC could enhance security further. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Contact information is available with a clear company phone number and contact forms, supporting business credibility. Overall, the website demonstrates a mature digital presence with strong business and security fundamentals.

S

SECUDOS GmbH

secudos.de

40

SECUDOS GmbH is a German-based technology company specializing in innovative IT security solutions aimed at ensuring digital sovereignty and high-performance network infrastructures for businesses. Their product portfolio includes secure data exchange software (Qiata), a hardened operating system (DOMOS), and recovery technology for hardware appliances (SDR). The company positions itself as a reliable and experienced partner with over 20 years of expertise in complex network environments, serving a broad range of corporate clients. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and jQuery, offering good mobile optimization and user experience. However, the absence of a valid SSL certificate and lack of HTTPS support significantly weaken the security posture, despite proper email authentication records and GDPR compliance. Overall, the site demonstrates good business credibility and privacy practices but requires urgent improvements in SSL/TLS implementation to enhance security and trust.

D

Diondo GmbH

diondo.com

51

Diondo GmbH is a German-based manufacturer and service provider specializing in industrial computed tomography (CT) and X-ray inspection systems. The company offers a comprehensive portfolio of products including compact CT systems for battery module inspection, flexible CT systems with advanced manipulation capabilities, and user-friendly CT software solutions. Diondo positions itself as a market leader in industrial CT solutions, targeting industrial clients in research, development, production, and quality assurance sectors. The website content is professionally presented, with clear navigation and detailed product descriptions, supported by certifications such as ISO 9001 and ISO 14001. Technically, the site is built on Joomla CMS with modern frameworks and includes user consent mechanisms for privacy compliance. However, the absence of a valid SSL certificate and HTTPS significantly weakens the security posture, exposing users to potential risks. The site uses Google Analytics for tracking and integrates social media channels for broader engagement. Overall, Diondo demonstrates a solid business presence with room for improvement in security infrastructure to enhance trust and compliance.

K

Klar Webagentur GmbH

klar-webagentur.ch

40

Klar Webagentur GmbH is a Swiss-based digital agency specializing in web design, web development, content production including photography and video, and online marketing services targeted primarily at Swiss small and medium-sized enterprises (KMU) and organizations. The company positions itself as a provider of clear, practical web solutions that help clients achieve their digital goals efficiently. Their website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on Joomla CMS and leverages modern JavaScript libraries such as jQuery and GSAP, along with Mapbox for map integration. The site uses Google Analytics and Google Tag Manager for analytics and marketing purposes. Hosting appears to be managed via sui-inter.net nameservers. Performance is somewhat slow due to a large page size and many resources, but mobile optimization is good. From a security perspective, the site uses HTTPS with TLS 1.3 and 1.2 protocols and has valid SPF and DMARC DNS records, although DMARC is set to a non-enforcing policy. There is no HSTS enabled, no DNSSEC, and no OCSP stapling, which are areas for improvement. No explicit security or incident response policies are published on the site. Cookie consent is implemented with a banner and opt-in mechanism, but GDPR compliance indicators are basic. Overall, the website is functional, professional, and credible but could benefit from enhanced security configurations and improved performance. Strategic recommendations include enabling HSTS, improving DMARC policy, implementing DNSSEC, and optimizing page load times to strengthen security posture and user experience.

L

Landitec GmbH

landitec.de

40

Landitec GmbH is a medium-sized German company specializing in high-quality, flexible, and high-performance appliance solutions and services for the B2B sector. They focus on tailored IT security and network solutions, including hardware appliances, virtualization, SD-WAN, and industrial applications. The company holds a strong market position as an OPNsense Platinum Partner and collaborates with several notable technology providers such as Barracuda, 6WIND, and SECUDOS. Their offerings include customized appliances, pre-installed systems, and comprehensive customer support through an online portal. Technically, the website is built on Joomla CMS with Helix Ultimate framework and utilizes modern web technologies including Bootstrap 5 and jQuery. They employ Google Tag Manager and Google reCAPTCHA for analytics and security. However, a critical security gap is the absence of HTTPS/SSL, which significantly impacts their security posture. The site is mobile-optimized with good content quality and SEO practices. From a security perspective, while some security headers are present, the lack of SSL/TLS encryption, HSTS, and modern TLS protocols exposes the site to potential risks. No explicit security or incident response policies were found. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the site is professional and trustworthy in content and business representation but requires urgent security improvements to protect data and enhance user trust.

S

Spar- und Leihkasse Wynigen AG

slwynigen.ch

68

Spar- und Leihkasse Wynigen AG is a small, independent regional bank based in Switzerland, established in 1929. The bank offers a range of financial services including savings, loans, mortgages, and digital banking solutions such as E-Banking and mobile apps. The website reflects a strong regional focus with personalized customer service as a key differentiator. Technically, the site is built on Joomla CMS, hosted behind Cloudflare, and integrates third-party services like Google Tag Manager and Mapbox. However, the website suffers from significant security shortcomings, notably the absence of a valid SSL certificate and lack of modern TLS protocols, which undermines user trust and data protection. DNS records are properly configured with SPF and DMARC, indicating some email security awareness. Cookie consent mechanisms are implemented in compliance with GDPR, enhancing privacy transparency. Overall, the site demonstrates good business professionalism but requires urgent security improvements to protect customer data and maintain regulatory compliance.

U

Unisinos

unisinos.br

57

Unisinos is a private Jesuit university in Brazil offering a wide range of educational programs including undergraduate, graduate, MBA, specialization, extension, and distance learning courses. It holds a strong market position as one of the top private universities in Brazil with over 55 years of history and numerous international partnerships. The institution is maintained by Associação Antônio Vieira (ASAV), a non-profit entity certified as a social assistance beneficent entity. The website reflects a comprehensive academic offering with clear navigation and strong branding consistency. Technically, the site is built on Joomla CMS with Helix3 framework and hosted likely on Microsoft Azure, but suffers from poor SSL/TLS configuration and slow performance.

K

KM Business Information US, Inc

keymedia.com

57

Key Media is a globally recognized B2B media company specializing in niche publishing, events, and digital content delivery across multiple sectors including mortgage, insurance, HR, and wealth management. With a medium-sized workforce and offices worldwide, it maintains a strong market position supported by numerous industry awards and a large global audience. The website infrastructure is built on Joomla CMS with standard web technologies and is hosted behind Cloudflare, ensuring basic performance and security. However, the site exhibits slow load times and lacks advanced mobile optimization and accessibility features. Security posture is moderate with valid SSL, SPF, and DMARC configurations but lacks HSTS, DNSSEC, and CAA records, which are recommended for enhanced protection. No explicit security or incident response policies are publicly available, and cookie consent mechanisms are absent, indicating potential compliance gaps. Overall, the site is professional and trustworthy but could benefit from technical and security enhancements to improve resilience and user trust.

G

Gam-Anon International Service Office, Inc.

gam-anon.org

85

Gam-Anon International Service Office, Inc. operates a non-profit website dedicated to providing information and support for families and loved ones affected by compulsive gambling. The organization serves an international audience with resources including meeting directories, literature, and educational materials. The website is built on Joomla CMS and incorporates various web technologies such as jQuery, Bootstrap, and UIkit to deliver a responsive and accessible user experience. However, the site lacks critical security infrastructure, notably an invalid or missing SSL certificate, which undermines user trust and data protection. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols represents a significant vulnerability. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. Contact information is limited to a phone number and postal address, with no email or social media presence detected. Overall, the site provides valuable content but requires urgent security and compliance improvements to protect users and enhance credibility.