Security Directory

G

GoodData

gooddata.com

72

GoodData is a well-established enterprise technology company founded in 2007, specializing in composable data intelligence and embedded AI platforms. The company offers a broad suite of analytics and AI-driven services targeting businesses and developers seeking to embed intelligent applications and automate workflows. Their market position is strong, supported by industry recognitions such as Gartner Magic Quadrant and high customer satisfaction ratings. The website reflects a mature digital presence with comprehensive resources, customer testimonials, and a clear value proposition focused on accelerating ROI through AI and automation. Technically, the website employs modern web technologies including Bootstrap, jQuery, Lottie animations, and HubSpot for marketing and form management. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices and structured data enhancing search visibility. The use of Google Tag Manager and HubSpot indicates a moderate level of user tracking balanced with privacy compliance. From a security perspective, GoodData demonstrates a strong posture with HTTPS enforcement, recognized certifications (ISO 27001, SOC 2 Type II, HIPAA, GDPR compliance), and secure form handling. However, the absence of explicit security headers and a public vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. The missing WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional site content and business signals. Overall, GoodData presents a low-risk profile with a robust business model and digital maturity. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure and incident response contacts, and improving transparency around data retention policies to further strengthen trust and compliance.

F

Fiera Gustarte – Fiera Nazionale dei Territori

fieragustarte.com

57

Fiera Gustarte is a national Italian event focused on promoting local tourism, gastronomy, traditions, sustainability, sport, and art. The website presents a professional and well-structured platform built on WordPress with Elementor, targeting visitors and exhibitors interested in cultural and territorial promotion. The technical infrastructure includes modern tracking tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and contact information appear credible. Overall, the site serves its business purpose effectively but requires improvements in privacy compliance and domain registration transparency.

Z

Z Sea Line

zsealine.com

63

Z Sea Line is a maritime transportation company specializing in the shipping of crude oil and energy products, operating since 2019 under the Zeren Group Holding Companies. The company positions itself as a reliable partner in global shipping with a focus on sustainable and cost-effective maritime logistics. Their website reflects a professional and business-oriented approach targeting industry professionals and businesses in the energy and transportation sectors. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, and various UI libraries, hosted behind Cloudflare DNS. The site is mobile optimized with good navigation and design quality, though no CMS or advanced backend platform is detected. Performance is moderate with no evident broken elements. However, the site lacks advanced SEO and accessibility features. From a security perspective, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. There are no privacy or cookie policies, nor vulnerability disclosure mechanisms, indicating compliance and security maturity gaps. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency policies to improve trust and regulatory adherence.

Z

Zeren Group Energy BV

zolarisenergy.com

66

Zolaris Energy, operated by Zeren Group Energy BV, is a renewable energy company founded in 2023 and based in Amsterdam, Netherlands. The company focuses on sustainable energy solutions derived from natural sources such as sunlight, wind, and geothermal heat. Their website presents a professional image with clear branding and contact information, targeting businesses and stakeholders interested in clean energy. The company positions itself as an integrated energy provider emphasizing sustainability and environmental benefits. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for UI and animation effects. It is hosted behind Cloudflare DNS services, ensuring good availability and moderate performance. The site is mobile-optimized with basic accessibility features but lacks advanced SEO and security headers. No CMS or analytics platforms were detected, indicating a lean technical footprint. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and important security headers. There are no visible privacy or cookie policies, which represents a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. The absence of tracking scripts suggests minimal user data collection, but also a lack of transparency on data protection practices. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and improved transparency to strengthen trust and regulatory adherence.

Z

ZEREN Energy

zerenenergy.com

62

ZEREN Energy is a relatively new company founded in 2022, operating in the European energy trading sector with a focus on natural gas. The company offers a range of services including forward contracts, market access and capacity products, financial derivatives, and physical delivery of natural gas across multiple European countries. The website reflects a professional business presence with consistent branding and clear contact information, targeting energy market participants in Western, Central, and Southeastern Europe. Technically, the website uses a modern frontend stack including jQuery, Bootstrap, and various UI libraries, hosted behind Cloudflare DNS and CDN services. The site is mobile optimized and performs moderately well, though SEO and accessibility features are basic. No CMS or backend platform was detected from the provided data. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, it lacks important security headers and DNSSEC is not enabled. There are no visible privacy or cookie policies, nor any incident response or vulnerability disclosure information, which indicates gaps in compliance and security transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency measures to improve trust and regulatory adherence.

P

Petroleum Energy

petroleumenergy.co

61

Petroleum Energy is a Turkey-based company specializing in services related to the production, distribution, and refining of petroleum products. The company offers a broad range of services including technical and financial feasibility studies, market and regulatory research aimed at local and foreign entrepreneurs in the energy sector. Their website positions them as a service provider with a focus on supporting energy production and sales businesses. Technically, the website uses a modern tech stack including Bootstrap and jQuery libraries, with moderate performance and good mobile optimization. However, there is a lack of advanced SEO and accessibility features. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. Contact information is clearly provided, including phone, email, and physical address, along with active social media profiles. Overall, the website is professional and business-focused but requires significant improvements in security and privacy compliance to enhance trust and regulatory adherence.

P

pide&co

pide-co.com

59

Pide&Co is a small hospitality business based in London specializing in traditional Turkish cuisine including pide, lahmacun, and meze. The website presents a professional and visually appealing design with clear navigation and integration for online ordering via Deliveroo. The business targets local customers seeking authentic Turkish food with options for dine-in and delivery. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. Mobile optimization is good, and the site includes social media links to Facebook, Instagram, and TikTok, enhancing customer engagement. However, the website lacks critical privacy and cookie policies, and no consent mechanisms are present, indicating compliance gaps with GDPR and other privacy regulations. Security headers are not detected, and DNSSEC is not enabled, which could expose the site to certain risks. The WHOIS data shows inconsistencies, notably a domain creation date set in the future, which reduces trustworthiness despite the legitimate business content. Overall, the site is functional and professional but requires improvements in privacy compliance and security hardening to reduce risk and enhance trust.

M

MYZ Trading

myztrading.com

63

MYZ Trading is a newly established energy trading company founded in 2024, specializing in the global supply and trading of crude oil, petrochemical products, and investments. The company serves a diverse clientele including national oil companies, multinational corporations, and industrial firms, emphasizing sustainability and responsible business practices. The website reflects a professional and consistent brand image aligned with its parent company, Zeren Group Holding. Technically, the site employs a modern tech stack with popular JavaScript libraries and frameworks, hosted behind Cloudflare DNS, and uses HTTPS for secure communication. However, the absence of security headers and DNSSEC indicates room for improvement in security hardening. Privacy compliance is weak due to missing privacy and cookie policies, and no explicit contact information is provided, which may affect user trust and regulatory compliance. Overall, the website is functional, well-designed, and content-rich but requires enhancements in security and privacy transparency to strengthen its digital maturity and trustworthiness.

M

MYZ Bilgisayar Otomotiv İnşaat Petrol Sanayi Tic. Ltd. Şti.

myzco.com

63

MYZ Bilgisayar Otomotiv İnşaat Petrol Sanayi Tic. Ltd. Şti. is a diversified Turkish company established in 2014, offering a wide range of services including open-air advertising, media and advertising, IT and software development, automotive and fleet rental, consultancy, logistics, supply, and commodity trading. The company targets business clients seeking comprehensive solutions across these sectors and maintains a moderate market position with a medium-sized enterprise profile. Their website reflects a professional and consistent brand image with clear service descriptions and client references. Technically, the website employs modern front-end technologies such as Bootstrap and jQuery, with Cloudflare DNS services. The site is moderately optimized for performance and mobile use, though accessibility and SEO features are basic. No CMS or advanced analytics tools are detected, indicating a relatively straightforward technical infrastructure. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and important security headers, which are recommended for enhanced protection. No explicit security or incident response policies are published, and no vulnerability disclosure or data protection officer information is available. Cookie consent is implemented with an opt-in mechanism, and a privacy policy is present but basic. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration data aligns well with the business history, supporting legitimacy. Strategic improvements in security headers, DNSSEC, and published security policies would enhance the security posture and compliance standing.

G

GET Energy Trading SRL

getenergytrading.com

63

GET Energy Trading SRL is a newly established company (founded 2023) specializing in natural gas trading across key Eastern European markets including Bulgaria, Romania, and Hungary. The company leverages advanced trading tools to provide spot, forward, and structured energy trading solutions. Their website is professionally designed using WordPress and Elementor, reflecting a moderate level of digital maturity with good mobile optimization and clear navigation. However, the technical infrastructure lacks some security best practices such as DNSSEC and security headers, and the Google Analytics plugin is present but not configured, indicating incomplete analytics setup. Privacy compliance is limited, with no cookie consent mechanism detected and only a basic privacy policy available. The domain registration is consistent with the company’s recent founding, registered via a Turkish registrar service, with no privacy protection applied. Overall, the security posture is moderate but could be improved by implementing security headers, enabling DNSSEC, and enhancing privacy compliance. The business credibility is supported by clear company information and consistent branding, though contact details are limited to a contact form without explicit emails or phone numbers. Strategic recommendations include improving security configurations, completing privacy compliance, and properly configuring analytics tools to enhance trust and operational insight.

F

Foxcroft Turizm Otelcilik Seyahat Sanayi ve Tic. A.Ş.

foxcrofthotels.com

59

Foxcroft Turizm Otelcilik Seyahat Sanayi ve Tic. A.Ş. operates in the hospitality sector, likely providing hotel and tourism services in Turkey. The website is currently a minimal 'Coming Soon' placeholder page with very limited content and no interactive features or detailed business information. The target audience appears to be potential customers or visitors interested in hospitality services, but the site does not yet provide sufficient information to engage or convert visitors. Technically, the website uses basic web technologies including HTML5, CSS3, JavaScript, jQuery, and Modernizr. It is hosted behind Cloudflare DNS services, but no detailed hosting or CMS information is available. The site shows basic mobile optimization and accessibility but lacks SEO optimization and advanced technical features. Performance is moderate given the minimal content. From a security perspective, the site lacks visible HTTPS confirmation in the provided data, no security headers are detected, and no privacy or cookie policies are present. There are no forms or data collection points to assess for input security. The domain registration is consistent with the business and country, registered in 2020 with a reputable Turkish registrar. Overall security posture is weak due to missing best practices and policies. The overall risk is moderate given the minimal content and lack of security and privacy features. Strategic improvements should focus on enabling HTTPS, adding privacy and cookie policies, providing contact information, and enhancing security headers and SEO. These steps will improve trust, compliance, and user engagement.

B

Beboz

beboz.com

59

Beboz is a London-based Italian street food restaurant offering fresh, customizable Italian dishes including pasta, wraps, salads, and pizzas. The business operates multiple physical locations and leverages online ordering and delivery partnerships with major platforms such as Just Eat, Uber Eats, Deliveroo, and Feedr. The website is built on WordPress with modern plugins and tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNS security and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, Beboz presents a credible and professional online presence aligned with its hospitality business model.

Alpet Madeni Yağları is a Turkish company specializing in the manufacturing and distribution of lubricants and industrial oils, operating for nearly 20 years under the umbrella of Zeren Group Holding. The company serves a broad industrial and commercial audience with a diverse product portfolio including engine oils, marine lubricants, greases, and complementary products. Their market position is that of a well-established domestic producer with an international distribution network spanning 54 distributors. Technically, the website is built on WordPress using modern tools like Elementor and Yoast SEO, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified. Overall, the website is professional and trustworthy, but improvements in security and privacy compliance are recommended.

4

42 Holborn

42holborn.com

63

42 Holborn is a small hospitality business located in London, specializing in Italian-Spanish fusion cuisine with additional offerings such as a cocktail bar, private dining rooms, and live entertainment. The website reflects a well-maintained digital presence with a professional design, clear navigation, and integration of reservation services via SevenRooms. The business targets general dining customers and event attendees in the Holborn area. Technically, the site is built on WordPress using the Enfold theme and includes modern web technologies such as LayerSlider, Google Fonts, FontAwesome, and Google reCAPTCHA for form security. Hosting and DNS are managed via Cloudflare, providing good performance and security infrastructure. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks DNSSEC and HTTP security headers, and no published security or privacy policies are present. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

G

Große Kreisstadt Annaberg-Buchholz

annabergerweihnachtsmarkt.de

67

The Annaberger Weihnachtsmarkt website represents the official online presence of the Annaberg-Buchholz Christmas market, a culturally significant and family-friendly event in Germany. The site effectively promotes the event with rich content including program overviews, vendor information, and service offerings. It targets tourists, families, and local visitors, positioning itself as one of Germany's most beautiful Christmas markets with strong municipal backing. Technically, the site uses the Sitepark CMS platform with modern JavaScript libraries and is hosted on rzone.de servers. The website is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, professional, and well-maintained, supporting the event's reputation and visitor engagement.

S

Sächsische Staatskanzlei

sachsen.de

62

The website www.sachsen.de serves as the official digital portal for the Free State of Saxony, Germany. It provides comprehensive information about the state government, public services, economic sectors, culture, and citizen engagement. The portal targets residents, businesses, and visitors, offering access to e-government services and up-to-date news from the state administration. The site is well-positioned as the authoritative source for Saxony's governmental information and services. Technically, the website employs a modern and responsive design with technologies such as jQuery, Bootstrap-like frameworks, and custom navigation components. It is hosted likely by Deutsche Telekom, indicated by the nameservers, and uses HTTPS with good SSL configuration. The site includes accessibility features and SEO optimizations, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, explicit security headers are not detected, and there is no public security policy or incident response information. Analytics are performed via etracker with moderate user tracking. Overall, the security posture is solid but could be enhanced with additional headers and published policies. The domain WHOIS data aligns with the official government entity, showing consistent registration since 2005, supporting the site's legitimacy. No suspicious or malicious indicators are present. The site is safe for general audiences, with no adult or questionable content. Strategically, the site effectively serves its governmental role with strong content quality and user trust. Enhancements in security transparency and incident response readiness would further strengthen its posture.

K

Kompetenzzentrum Internationale Jugendarbeit und non-formale Bildung

kvleipzig-international.de

44

The Kompetenzzentrum Internationale Jugendarbeit und non-formale Bildung is a small non-profit organization based in Leipzig, Germany, focused on international youth work and non-formal education. The website presents a professional and consistent brand image, offering services such as youth exchanges, training seminars, and workshops. It targets youth and professionals in the youth work sector, supported by local and EU funding partners. Technically, the site is built on WordPress using modern themes and plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, reflecting the organization's mission and activities effectively.

C

ConFedersicurezza

confedersicurezza.it

49

ConFedersicurezza is an Italian federation coordinating private security associations, serving as a key industry representative and service provider. The website reflects a medium-sized organization with a clear focus on advocacy, publications, events, and member coordination. The technical infrastructure is based on standard web technologies including Bootstrap, jQuery, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and visible CSRF protections on forms. Overall, the site is professional, GDPR compliant, and trustworthy, with room for security enhancements.

U

UNI - Ente Italiano di Normazione

uni.com

72

UNI - Ente Italiano di Normazione is a well-established Italian non-profit organization dedicated to developing, publishing, and disseminating voluntary technical standards. With over 100 years of history, UNI serves a broad audience including professionals, companies, institutions, and consumers, providing key services such as standardization, training through UNITRAIN, and an online store for normative documents. The website reflects a strong market position as a leader in Italian and European standardization efforts. Technically, the site is built on WordPress with modern technologies like jQuery, Swiper.js, and integrates cookie consent and analytics tools such as Iubenda and Google Tag Manager. The site is well-optimized for SEO, mobile-friendly, and accessible. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data for the domain is a concern but is mitigated by the professional content and structured data presence. Overall, UNI's website is a trustworthy and authoritative source for standardization information in Italy.

T

ThemezHut Themes

themezhut.com

54

ThemezHut is a specialized WordPress theme development company focused on creating high-quality magazine and corporate themes. Established in 2013, it has built a niche market presence with over 30,000 active installs, offering both free and premium themes. The company targets WordPress users including bloggers, publishers, and small businesses seeking professional and flexible themes. Their business model revolves around theme sales, support, and documentation, leveraging WordPress as their platform. Technically, the website is built on WordPress 5.9.12, utilizing common plugins such as Yoast SEO, Easy Digital Downloads for e-commerce, Google Analytics for tracking, and CookieYes for GDPR-compliant cookie consent. Hosting is provided by DreamHost, and the site uses HTTPS with a valid SSL certificate. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site employs HTTPS, Google reCAPTCHA for form protection, and cookie consent mechanisms. However, no advanced security headers were detected, and DNSSEC is not enabled. There is no published security policy or incident response information, and no vulnerability disclosure or security.txt file is present. The domain registration is transparent and consistent with the business history, enhancing trust. Overall, ThemezHut presents a professional and trustworthy online presence with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers, vulnerability disclosure, and enhanced accessibility could further strengthen their security posture and user trust.

K

Krolstudio

krolstudio.com

38

Krolstudio is a small, Geneva-based design and communication agency specializing in graphic design, web design, photography, video, and event communication services. The company emphasizes high-quality visual identity creation and a multidisciplinary approach to meet client needs. The website reflects a professional business with clear service offerings and contact information, targeting businesses and individuals seeking creative design solutions. Technically, the website is built on WordPress with common plugins such as Yoast SEO, and uses jQuery and tracking tools like Google Analytics and Facebook Pixel. Hosting is provided by Infomaniak Network SA, a reputable Swiss hosting provider. The site is moderately optimized for performance and mobile, though SEO is limited by a noindex,nofollow robots meta tag. From a security perspective, the site uses HTTPS and has domain transfer protection, but lacks DNSSEC and security headers. There is no visible privacy or cookie policy, which is a compliance gap. Tracking scripts indicate moderate user tracking without explicit consent mechanisms. Overall, the security posture is average with room for improvement. The website content is safe for general audiences, with no adult or questionable content detected. The domain registration is consistent with the business age and location, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and improving SEO settings to enhance visibility and compliance.

Monoloco is a Geneva-based digital agency specializing in custom web development, CMS solutions, intranet systems, and mobile applications for iOS and Android platforms. With over 15 years of experience, the company serves a diverse clientele, delivering tailored digital solutions that address complex business needs. Their portfolio and client testimonials demonstrate a strong market position as a trusted local technology service provider. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for interactive content. Google Fonts and Google Tag Manager are integrated for typography and analytics respectively. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features are basic. The CMS appears proprietary, indicating custom development capabilities. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. No incident response or security policy information is provided. Overall, the website is professional and trustworthy with a solid business credibility score. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance the security posture and regulatory adherence of the company’s online presence.

H

Horus Energy SA

horus.ch

57

Horus Energy SA is a Swiss company specializing in solar-powered and ecological hosting services, including web hosting, cloud storage, email, SMS, and multimedia production. The company positions itself as a sustainable and environmentally responsible service provider, leveraging its own photovoltaic power plants to power its infrastructure. Their market niche focuses on customers valuing ecological impact and data sovereignty within Switzerland. The website is built on WordPress with modern plugins and technologies, offering a good user experience with mobile optimization and clear navigation. Privacy compliance is well addressed with cookie consent management and a comprehensive privacy policy. Security posture is solid with HTTPS, anti-spam measures, and privacy-respecting analytics, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and aligned with its business goals.

B

BE MOVIE

be-movie.ch

47

BE MOVIE is a cultural event platform dedicated to showcasing Bernese films through cinema screenings and online streaming. It targets film enthusiasts, families, and youth, offering workshops and awarding film prizes. The website is built on WordPress with Elementor, using modern web technologies and includes social media integration and Google reCAPTCHA for form security. While the site demonstrates good technical implementation and business credibility, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is solid with HTTPS and security headers present, but incident response information is missing. Overall, the website is trustworthy and professionally presented, serving as a regional media event hub.

B

BIM-Handbuch

bimhandbuch.at

45

BIM-Handbuch.at is a specialized educational platform providing comprehensive resources for Building Information Modeling (BIM) targeted at planning professionals such as architects and engineers primarily in Austria. The website offers a freely downloadable BIM handbook, print versions for sale, video tutorials, and practical downloadable materials. It is supported by professional chambers and federations, enhancing its credibility and trustworthiness. Technically, the site is built using the Hugo static site generator with Bootstrap and jQuery, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and secure form handling, though it lacks explicit cookie consent and some security headers. Privacy compliance is basic but includes a privacy policy and GDPR consent on newsletter subscription. Overall, the site is professional, trustworthy, and well-positioned as a niche educational resource in the BIM domain.

B

Bundeskammer der Ziviltechniker:innen I Arch+Ing

bestevergabe.at

50

Beste Vergabe is an official portal operated by the Bundeskammer der Ziviltechniker:innen, serving as a comprehensive resource for public procurement, competitions, awards, and consulting services primarily targeting civil engineers and architects in Austria. The platform offers structured information on procurement procedures, event listings, publications, and advisory services, positioning itself as an authoritative source within the Austrian government and professional sectors. Technically, the website employs modern web technologies including Bootstrap and Piwik PRO analytics, ensuring a responsive and user-friendly experience with good SEO and accessibility features. Security-wise, the site enforces HTTPS, uses CSRF tokens, and avoids exposing sensitive data, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site demonstrates a solid security posture and professional business credibility, with room for improvement in privacy and security transparency.

G

GreenWebspace

greenwebspace.com

51

GreenWebspace is an Austrian-based eco-social web hosting provider established in 2006, specializing in sustainable and CO2-neutral web hosting solutions primarily targeting customers in Austria, Germany, and Switzerland. Their offerings include green hosting packages, domain registration, managed Nextcloud cloud services, and online meeting tools, all emphasizing environmental responsibility and data sovereignty. The company positions itself as a niche leader in green IT with a strong commitment to GDPR compliance and customer support. Technically, the website is built on WordPress with a modern theme and performance optimizations such as LiteSpeed caching. It uses reputable third-party services like Google Tag Manager for analytics and Imunify360 for security. The infrastructure is hosted in Austria/EU, ensuring data protection compliance. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive structured data enhancing search visibility. Security posture is strong with HTTPS enforced, malware protection in place, and no exposed sensitive data. However, some security headers could be improved, and a formal security policy or incident response page is not found. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by transparent WHOIS data, customer testimonials, and certifications. Overall, GreenWebspace demonstrates a mature digital presence with a clear focus on sustainability and privacy, making it a trustworthy provider in its market segment.

G

Gewerkschaft Bau-Holz

gbh-news.at

10

The website www.gbh-news.at serves as an information platform for members of the Gewerkschaft Bau-Holz (GBH), a trade union representing workers in the construction and wood industries in Austria. It provides news, member services, legal support, education, and campaign information, positioning itself as a key resource for approximately 250,000 employees across multiple sectors. The site is well-branded, professionally designed, and targets union members and stakeholders in the Austrian construction and wood sectors. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and jQuery, with integrations such as Matomo for analytics and Usercentrics for consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized and includes CAPTCHA protections on forms to mitigate spam. However, no CMS or hosting provider details are evident, and some security headers appear to be missing. From a security perspective, the site enforces HTTPS and uses consent management to comply with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit security policies, incident response contacts, and a security.txt file suggests room for improvement in transparency and readiness. The lack of WHOIS data reduces trust in domain registration legitimacy, though the website content and branding appear consistent and professional. Overall, the site presents a low-risk profile with good privacy compliance and user experience but would benefit from enhanced security disclosures and WHOIS transparency to strengthen trust and compliance posture.

U

UGL Sicurezza Civile

uglsc.it

10

UGL Sicurezza Civile is a labor union organization focused on protecting the rights and promoting the safety of workers in the civil security sector in Italy. Founded recently in 2023, it operates primarily as a non-profit entity providing advocacy, training, and informational resources to its members. The website serves as a communication platform featuring news, articles, and updates relevant to its target audience of security workers and union members. The organization maintains an active social media presence and offers newsletter subscriptions to keep stakeholders informed. Technically, the website is built on WordPress using the Elementor page builder, supported by a CDN for content delivery. It employs modern web technologies including jQuery and LiteSpeed caching for performance optimization. The site is mobile-optimized and features good SEO practices, although accessibility features are basic. Privacy and cookie policies are clearly presented, indicating compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and advanced security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, transparent, and legitimate. Overall, the website presents a professional and trustworthy front for the organization. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enabling DNSSEC, implementing additional security headers, and publishing explicit security and incident response policies to further strengthen trust and compliance.

D

Datalynq

datalynq.com

68

Datalynq is a technology company specializing in next-generation case management and market intelligence solutions for the electronics supply chain industry. Their platform provides extensive analytics and real-time data on over 1 billion electronic components, helping businesses optimize supply chain decisions and manage risks effectively. The company positions itself as a key player in supply chain intelligence with a SaaS business model targeting procurement and supply chain professionals. Technically, the website is built on modern web technologies including Webflow CMS, integrated with multiple marketing and analytics tools such as HubSpot, Google Analytics, Hotjar, and Apollo.io. The site uses Cloudflare DNS but lacks DNSSEC, and no advanced security headers were detected. Performance and mobile optimization are good, with a professional design and clear navigation. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks visible privacy and cookie policies, security policies, and incident response contacts. The absence of DNSSEC and security headers presents moderate security risks. User tracking is extensive via multiple analytics and marketing scripts, but privacy compliance is limited due to missing policies. Overall, the website is professional and credible with moderate security posture. Strategic improvements in privacy compliance, security headers, and DNS security would enhance trust and reduce risk.

D

dema dent

demadent.ch

62

dema dent is a Swiss-based dental services platform focused on providing brokerage for dental practices and offering dental seminars. The website targets dental professionals within Switzerland, offering a marketplace and educational resources. The business operates in the healthcare sector with a regional focus and a small company size. Technically, the website employs modern JavaScript libraries, Cookiebot for GDPR compliance, and Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with appropriate security headers, reflecting a good security posture. However, explicit security and incident response policies are not publicly available, which could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with extensive use of tracking and marketing tools typical for its industry.

Y

yomma GmbH

sqat.eu

55

SQAT is a service product of yomma GmbH focused on providing a barrier-free feedback mechanism for websites by translating German Sign Language videos into written language and vice versa. The service targets both website operators seeking to enhance accessibility and deaf users who prefer sign language communication. The website is professionally designed, uses modern WordPress infrastructure, and complies with GDPR and cookie consent regulations. It features partnerships with reputable German government and non-profit organizations, enhancing its credibility. Technically, the site employs common plugins and SEO tools, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent, though explicit security headers and incident response policies are not published. WHOIS data is unavailable due to privacy protection, but the domain and business information align with the website content and market positioning. Overall, SQAT presents a trustworthy and professional digital presence in the niche of accessibility services.

A

Anglo American plc

angloamerican.com

10

Anglo American plc is a leading global mining company specializing in the responsible production of key minerals including copper, premium iron ore, crop nutrients, nickel, diamonds, steelmaking coal, and manganese. The company operates globally with regional subsidiaries and a strong focus on sustainability and ESG principles. Their website reflects a mature digital presence with comprehensive investor relations, sustainability disclosures, and career opportunities, targeting investors, partners, customers, and job seekers. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, and OneTrust for cookie consent, built on the Sitecore CMS platform. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices, supporting a professional user experience. From a security perspective, the site enforces HTTPS, implements security headers such as CSP and HSTS, and uses cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or incident response contact is noted as an area for improvement. WHOIS data was unavailable, which slightly impacts trust but is likely due to privacy or query limitations rather than malicious intent. Overall, Anglo American's website presents a secure, professional, and compliant digital front for a large enterprise in the energy and mining sector. Strategic recommendations include publishing vulnerability disclosure information, incident response contacts, and continuous monitoring of third-party scripts to maintain security posture.

I

Intramovies

intramovies.com

53

Intramovies is an independent film distribution company with a professional online presence showcasing a curated catalogue of feature films, documentaries, classics, and restorations. The company targets film industry professionals and cinephiles, offering distribution and production services. The website is built on WordPress with modern technologies such as Bootstrap and jQuery, and includes SEO optimization and mobile responsiveness. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS data for the domain is a concern, reducing trustworthiness despite the professional site and social media presence. Overall, the site is functional, secure, and compliant with basic privacy standards.

P

PIXELIGHT

pixelight.it

11

PIXELIGHT is a specialized creative studio based in Italy, focusing on motion graphics, animation, and digital visual effects for film, television, and web projects. The company has established a strong market presence with a portfolio of notable clients and partners in the media industry. Their website reflects a professional and modern digital presence, leveraging WordPress and popular frontend technologies to deliver a visually appealing and user-friendly experience. The site includes comprehensive privacy and cookie policies managed through Iubenda, indicating a commitment to GDPR compliance and user privacy. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in HTTP security headers and incident response documentation. Overall, PIXELIGHT demonstrates a mature digital infrastructure suitable for its business model and industry demands.

A

Aisico

aisico.com

52

AISICO is an established Italian company specializing in road safety and crash test services, boasting over 30 years of experience. The company operates a unique European testing center dedicated to crash tests, supported by a skilled team and advanced laboratories. Their market position is strong within the transportation safety sector, offering a broad range of services including certification, infrastructure testing, and training. The website reflects a professional and comprehensive digital presence, supporting their leadership claims with detailed service descriptions and accreditations. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant privacy and cookie policies managed by Iubenda. Security posture is generally good with HTTPS enabled and consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages were found. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, AISICO presents as a credible and professional organization with room for improvement in domain transparency and security hardening.

I

INDIGO FILM SRL

indigofilm.it

49

Indigo Film SRL is an established independent film production company based in Italy, specializing in films, TV series, documentaries, and factual content. The company maintains a professional and well-branded online presence with a website optimized for both desktop and mobile users. Their market position is that of a medium-sized player in the Italian media production industry, targeting a general audience interested in independent film and television content. The website demonstrates good digital maturity with a modern WordPress CMS, SEO optimization via Yoast, and compliance with GDPR through an integrated cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although formal security policies and incident response information are not published. Overall, the site is trustworthy and professionally managed, with strong social media integration and clear business information. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further improve trust and compliance.

A

APT Servizi

aptservizi.com

55

APT Servizi is an Italian service-oriented company with an online presence primarily targeting Italian-speaking customers. The website is built on WordPress and employs common web technologies such as jQuery, Contact Form 7, and Cookiebot for cookie consent management. The presence of Google reCAPTCHA and New Relic indicates attention to bot protection and performance monitoring. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership details. The website is accessible without any WAF or security challenge blocking content. Cookie consent is well implemented, but no explicit privacy policy or terms of service pages were detected in the provided content. Contact information such as emails or phone numbers is not clearly presented on the site.

F

Flyeye

sudtirol360.it

50

Virtual Südtirol is a small hospitality-focused business offering augmented reality virtual tours of the Alto Adige region in Italy. The company, branded as Flyeye, provides immersive virtual experiences to tourists and hospitality clients to enhance travel planning and marketing efforts. The website is professionally designed using Incomedia WebSite X5 Pro and integrates modern analytics tools such as Matomo and Google Analytics, with GDPR-compliant privacy and cookie policies in place. Contact information is clearly presented, including a contact form, phone number, email, and physical address in Meran, Italy. However, the WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency.

G

gastroevents GmbH & Co. KG

ulmmesse-catering.de

41

The website www.ulmmesse-catering.de represents gastroevents GmbH & Co. KG, a small hospitality business specializing in catering services for the Ulm Messe trade fair. The site provides information about catering offerings, job opportunities, and accommodation partnerships, targeting event organizers and visitors. The business operates locally with a clear focus on event catering and hospitality services. Technically, the website is built on WordPress using the Divi theme, with jQuery and a cookie consent plugin. Hosting is provided by cloudpit, as indicated by the nameservers. The site is moderately performant, mobile-optimized, and has basic accessibility and SEO features. Security posture is good with HTTPS enforced and a cookie consent mechanism, but lacks security headers and explicit security policies. Privacy compliance is strong with a clear privacy policy and GDPR-compliant cookie consent. Contact information is available with a physical address and company email. No social media or phone contact is explicitly provided. Overall, the site is professional, trustworthy, and safe for general audiences.

S

servier.bar - Self Ordering

servier.bar

67

servier.bar is a German-based digital ordering and payment platform tailored for the hospitality industry. The company offers self-ordering, kiosk, and webshop solutions that enable guests to order and pay via smartphones, aiming to reduce staff workload, minimize errors, and increase revenue. The website is professionally designed using WordPress with modern SEO and analytics integrations, targeting hospitality businesses in Germany. The technical infrastructure includes WordPress CMS, WPBakery Page Builder, Usercentrics for cookie consent, and analytics tools such as Matomo and Facebook Pixel. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy and terms policies indicates room for improvement. Overall, the website is trustworthy and functional but lacks some compliance and security best practices.

E

Evangelische Gesamtkirchengemeinde Ulm

ulmer-muenster.de

57

The Evangelische Gesamtkirchengemeinde Ulm operates the Ulmer Münster, serving as a religious and community organization in Ulm, Germany. The website provides comprehensive information about visiting hours, tours, church services, music ensembles, and community activities. It targets local residents, visitors, and church members, positioning itself as a key cultural and religious institution in the region. The business model is non-profit, focusing on community engagement and cultural preservation. Technically, the website is built on the ChurchDesk CMS platform, which is tailored for church organizations. It uses modern web technologies including JavaScript and jQuery, and integrates Cookiebot for GDPR-compliant cookie consent management. The site is hosted on servers associated with kasserver.com, with good mobile optimization and accessibility features. Performance is moderate, with a well-structured navigation system and SEO-friendly metadata. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism. However, explicit security headers are not detected, and no dedicated security policy or incident response information is published. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies in German, reflecting GDPR adherence. Overall, the website presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

Y

Your-Run GmbH

your-run.com

10

Your-Run GmbH operates a specialized community app focused on running and triathlon sports, offering a comprehensive event calendar, social community features, and detailed competition statistics. The business targets active runners and triathletes primarily in Germany but with a global event database. The company uses a freemium business model with a premium subscription unlocking advanced features. The website is professionally designed, mobile-optimized, and integrates modern SEO and performance tools.

B

Bernd Hummel

eurotour25-28.de

10

EuroTour25–28 is a multi-year endurance and climate awareness project led by Ulm-based extreme athlete Bernd Hummel, aiming to connect key European regions through sporting challenges and sustainability advocacy from 2025 to 2028. The project is positioned as a niche initiative promoting European unity and environmental responsibility, supported by partners such as the Einstein-Marathon and Technische Hochschule Ulm. The website is built on WordPress using modern tools like Elementor and Yoast SEO, providing a good user experience with mobile optimization and clear navigation. However, it lacks critical compliance elements such as privacy and cookie policies, and no direct contact information is provided, which limits user trust and GDPR compliance. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of security headers and incident response details are areas for improvement.

E

Einstein-Marathon

ulmer-jugendlaeufe.de

52

The website ulmer-jugendlaeufe.de represents the Einstein Jugendläufe, a well-established youth running event held annually in Ulm, Germany. The site is professionally designed using WordPress and Elementor, providing comprehensive information about the event, registration, and results. The business operates in the education and sports event sector, targeting children, youth, families, and schools in the region. The site integrates with partner domains and services such as einsteinmarathon.de and datasport.de for event management and registration. Technically, the website employs modern web technologies including WordPress 6.8.3, Elementor, and Rank Math SEO, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in privacy compliance and security header implementation. The domain WHOIS data aligns with the website's business purpose, showing legitimacy and consistency. No WAF or blocking mechanisms interfere with content access. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, establishing a vulnerability disclosure policy, and enhancing user consent mechanisms to improve compliance and trust.

S

SUN Sportmanagement GmbH

ulmer-klimalauf.de

46

Ulmer Klimalauf is a virtual running event organized by SUN Sportmanagement GmbH, focused on climate protection through community participation. The event encourages participants to collect kilometers by running, walking, or hiking, supporting climate-related projects such as water supply initiatives in Uganda. The website is well-branded, professionally designed, and provides comprehensive information about the event, partners, and sustainability efforts. Technically, the site is built on WordPress with Elementor and uses Cloudflare DNS for performance and security. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and cookie consent mechanisms could be improved. Contact information and privacy policies are clearly presented, supporting GDPR compliance. Overall, the site is trustworthy and serves its target audience effectively.

Y

yorkwachter

ulmer-muensterturmlauf.de

52

Ulmer Münsterturmlauf is a specialized event website promoting the annual tower running race held in Ulm, Germany. The site provides detailed event information, registration links, news updates, and partner information, targeting runners and sports enthusiasts. The business operates as a small, niche event organizer with a focus on local and regional participants, emphasizing sustainability and community engagement. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring secure connections. Security posture is good but could be improved with additional security headers and explicit privacy and cookie policies. No direct contact emails or phone numbers are published, relying on contact forms and newsletter signups. Overall, the website is professional, trustworthy, and safe for general audiences.

U

Ulmer Frauenlauf

ulmer-frauenlauf.de

54

Ulmer Frauenlauf is a regional event organizer focused on women's running events in southern Germany. The website provides comprehensive event information, partner promotion, and registration details, targeting female runners and sports enthusiasts. The site is built on WordPress with Elementor and uses modern SEO practices including structured data. Hosting and DNS are managed via Cloudflare, ensuring good performance and security at the infrastructure level. However, the site lacks explicit privacy and cookie policies, and no consent mechanisms are detected, which may pose compliance risks under GDPR. Security posture is moderate with HTTPS enforced but missing security headers and vulnerability disclosure. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

Datasport Germany GmbH operates a professional website focused on sports event timing and registration services, primarily targeting event organizers and participants in Germany. The company offers key services including event timing, registration management, live result publishing, and event organization support. The website is well-branded and consistent with the company's identity, reflecting a medium-sized business with a solid market position in the sports event sector. Technically, the website employs modern frameworks such as Bootstrap and Material Design Bootstrap, uses jQuery for interactivity, and leverages Cloudflare for DNS and CDN services. Analytics are handled via Matomo, indicating a moderate level of user tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Cloudflare services, but lacks explicit security headers and published security policies. Privacy compliance is addressed with clear privacy and cookie policies, though a cookie consent mechanism is absent. No incident response or vulnerability disclosure information is provided, which could be improved. Overall, the website is trustworthy, professional, and safe for general audiences, with no adult or questionable content. The domain registration data aligns with the business identity, supporting legitimacy. Strategic improvements in security policy transparency and privacy consent mechanisms would enhance compliance and trust.

tapCLIQ is a technology company specializing in AI-driven engagement automation and front-office robotic process automation (RPA) solutions primarily targeting eCommerce businesses and enterprises. Their platform offers a suite of customizable bots and RPAs designed to automate sales processes, enhance customer experience, and improve conversion and retention rates. The company positions itself as an enterprise-grade solution provider with a focus on intelligent marketing automation and customer journey orchestration. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, Typed.js for dynamic text effects, and integrates multiple analytics and advertising tools such as Google Analytics, Google Tag Manager, and AdRoll. The site is mobile-optimized with good SEO practices and interactive content including video embeds and multiple user engagement forms. From a security perspective, the site enforces HTTPS and uses secure form validation but lacks explicit security headers and does not disclose a formal security policy or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and business presentation are professional and consistent. Overall, tapCLIQ presents a mature digital presence with strong business and technical foundations but would benefit from improved transparency in domain registration and enhanced security practices to bolster trust and compliance.