Security Directory

O

OpenJS Foundation

nodejs.org

72

Node.js is a mature, widely adopted open-source JavaScript runtime environment supported by the OpenJS Foundation. The website serves a global developer audience, offering downloads, documentation, learning materials, and certification opportunities. It maintains a strong market position as a leading technology platform for server-side JavaScript execution. Technically, the site is built on modern frameworks such as Next.js and React, hosted on Vercel, and integrates analytics and partner services effectively. Security posture is robust with HTTPS, security policies, and best practices implemented, though cookie consent mechanisms and explicit contact details could be improved. Overall, the site reflects a professional, trustworthy, and well-maintained digital presence.

P

Prusa Research a.s.

prusa3d.com

74

Prusa Research a.s. operates a professional e-commerce platform specializing in Original Prusa 3D printers, filaments, resins, and accessories. The company is well-positioned in the manufacturing sector with a strong reputation among makers, professionals, and educational institutions. Their website reflects a mature digital presence with comprehensive product offerings, educational content, and community engagement. Technically, the site leverages modern frameworks such as Next.js and React, integrates security features like reCAPTCHA Enterprise, and maintains good performance and accessibility standards. Security posture is strong with HTTPS, security headers, and privacy compliance, although WHOIS data is not publicly available, likely due to privacy protection. Overall, the site demonstrates high professionalism and trustworthiness.

S

Scaleway

online.net

75

Scaleway is a European enterprise-focused cloud and dedicated server rental provider offering high-performance dedicated servers starting from €4.99. The website presents a professional and modern digital presence built with Next.js and React technologies, optimized for mobile and desktop users. The company targets enterprise customers seeking reliable and scalable dedicated server solutions in Europe. Despite the professional presentation, the absence of WHOIS domain registration data and lack of visible privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture appears moderate with no explicit security headers detected, suggesting room for enhancement in web security best practices. Overall, the website is functional and credible from a business perspective but would benefit from improved privacy disclosures and security configurations to strengthen trust and compliance.

S

Scaleway SAS

scaleway.com

83

Scaleway SAS is a prominent European cloud service provider specializing in delivering a resilient and sustainable cloud ecosystem tailored for AI and intelligent applications. The company offers a broad portfolio of cloud infrastructure services including dedicated servers, virtual instances, GPU-powered computing, serverless functions, containers, storage solutions, managed databases, and emerging quantum computing services. Positioned as a European alternative to major hyperscalers, Scaleway emphasizes data sovereignty, compliance with GDPR, and environmental sustainability. Their market presence is supported by a large customer base and a comprehensive partner ecosystem. Technically, Scaleway's website is built on modern web technologies such as Next.js and React, with a CMS likely powered by Strapi. The platform demonstrates excellent performance, mobile optimization, and accessibility. The use of structured data and comprehensive metadata supports strong SEO and user experience. Hosting appears to leverage both their own infrastructure and AWS S3 for media assets. From a security perspective, the website enforces HTTPS, provides detailed security and resilience information, and implements GDPR-compliant cookie consent mechanisms. While no explicit security headers were detected in the provided data, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Incident response channels are available, including abuse reporting. Overall, Scaleway presents a trustworthy, professional, and technically mature cloud provider with a strong focus on European market needs, AI innovation, and sustainability. The lack of public WHOIS data is consistent with privacy protection practices common in the industry and does not detract from the company's legitimacy. Strategic recommendations include enhancing public security header disclosures and adding a vulnerability disclosure policy to further strengthen trust.

B

Brussels-Capital Region

be.brussels

54

The be.brussels website serves as the official portal for the Brussels-Capital Region government, providing comprehensive information on regional administrations, public services, and community resources. It targets residents, businesses, and visitors seeking authoritative regional information. The site is well-positioned as a trusted government resource with a clear focus on accessibility and transparency. Technically, the website leverages modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. Accessibility is certified by the AnySurfer label, indicating a strong commitment to inclusive design. From a security perspective, the site employs HTTPS with strong SSL configuration and security headers. It integrates Google reCAPTCHA to protect forms and implements cookie consent mechanisms aligned with GDPR requirements. However, there is no explicit security policy or incident response information publicly available, which could be improved. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards. It is suitable for general audiences and contains no adult or questionable content. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around data retention.

W

World Athletics

worldathletics.org

72

World Athletics is the global governing body for athletics, providing comprehensive coverage of athletics events, athlete rankings, news, and media content. The organization operates a professional and well-branded website that serves athletes, fans, media, and event organizers worldwide. The site demonstrates a mature digital presence with modern technologies such as React, Next.js, and AWS hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and consent management, although DNSSEC is not enabled. Privacy policies are comprehensive and GDPR compliant, reflecting a commitment to user data protection. Overall, the website is trustworthy, professional, and aligned with the organization's global stature.

T

Templately

templately.com

61

Templately is a technology company specializing in providing a large collection of WordPress templates for Elementor and Gutenberg editors, complemented by cloud-based collaboration tools such as MyCloud and WorkSpace. The company positions itself as a leading provider in the WordPress template marketplace with a focus on ease of use and team collaboration. The website demonstrates a modern technical infrastructure leveraging React and Next.js frameworks, hosted on Google Cloud DNS infrastructure, and integrates AI-powered content generation features to enhance user productivity. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvements. Overall, the website is professional and trustworthy, with a moderate risk profile primarily due to missing privacy and security disclosures.

Electrolux.cz is the Czech Republic localized website of Electrolux, a global leader in manufacturing and retailing household appliances. The site targets consumers in the Czech and Slovak markets, offering a comprehensive range of white goods and domestic appliances. The business is positioned as an innovator in home appliances with a strong brand presence and a focus on quality and design. The website reflects a mature digital presence with modern technologies and good user experience.

P

Prusa Research a.s.

prusa3d.cz

72

Prusa Research a.s. is a Czech-based manufacturer and e-commerce provider specializing in Original Prusa 3D printers, filaments, resins, and related accessories. The company is well-established in the 3D printing industry, offering a broad product range including professional and educational solutions. Their website demonstrates a mature digital infrastructure leveraging modern web technologies such as Next.js, React, and integrates advanced security features including HTTPS, reCAPTCHA Enterprise, and cookie consent management. The site is optimized for performance, mobile responsiveness, and accessibility, providing a high-quality user experience. Security posture is strong with appropriate headers and monitoring tools, though explicit security policies and incident response details are not publicly disclosed. Overall, the website reflects a trustworthy and professional brand with comprehensive content and good privacy compliance, despite the absence of publicly available WHOIS registration data.

A

anji s.r.o.

24safestorage.cz

45

24SAFE STORAGE is a luggage storage service operating in the heart of Prague, offering 24/7 access and secure lockers for travelers. The company targets tourists and visitors who need a safe place to store their belongings while exploring the city. Their business model focuses on convenience, security, and affordability, supported by positive customer reviews and insurance guarantees. The website is professionally designed with clear navigation and a modern tech stack including React and Next.js, integrated with Google Maps and Google Tag Manager for enhanced user experience and analytics. Security posture is strong with HTTPS, security headers, and GDPR-compliant data collection via contact forms. No critical vulnerabilities or suspicious patterns were detected, and the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

T

The Newsmast Foundation

channel.org

55

Channel.org is a media-focused platform operated by The Newsmast Foundation, providing tools for organisations and content creators to manage channels, content, and communities. The platform leverages modern web technologies such as React and Next.js to deliver a responsive and performant user experience. The website is professionally designed with clear navigation and mobile optimization, targeting organisations and community managers in the media sector. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but aligns with the organization's non-commercial nature. Overall, the site is safe, professional, and trustworthy with room for security and privacy improvements.

E

Eventbrite

eventbriteapi.com

72

Eventbrite is a leading global event management and ticketing platform that enables users to discover, create, and promote a wide variety of events including concerts, workshops, festivals, and corporate events. The platform serves event organizers and attendees worldwide, providing comprehensive tools for ticket sales, event marketing, and payment processing. Eventbrite's market position is strong, supported by a large user base and extensive service offerings. Technically, the website leverages modern web technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. The integration of multiple analytics and marketing tools like Google Tag Manager, Facebook Pixel, and TikTok Analytics demonstrates a mature digital infrastructure focused on user engagement and data-driven marketing. From a security perspective, Eventbrite employs HTTPS with strong SSL configurations and implements key security headers to protect users. The presence of a dedicated security page and consent management platform indicates a commitment to privacy and regulatory compliance, including GDPR. However, explicit incident response contacts and vulnerability disclosure mechanisms are not publicly detailed. Overall, Eventbrite presents a low-risk profile with a professional, secure, and user-friendly website. The absence of WHOIS data is noted but does not detract from the platform's legitimacy given its global recognition and operational transparency.

Texthelp Ltd. is a medium-sized technology company specializing in accessibility and literacy software solutions, primarily serving education and workplace sectors. Their flagship product, ReachDeck, integrates the legacy Browsealoud toolbar with enhanced accessibility features to help organizations comply with WCAG guidelines and improve content inclusivity. The company offers a SaaS business model with tiered pricing based on website traffic and provides trial options to prospective customers. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the website leverages modern web technologies including React and Next.js, with content managed via Prismic CMS. Marketing and analytics tools such as Google Tag Manager and Mautic are employed, indicating a sophisticated digital marketing infrastructure. The site demonstrates good performance and accessibility standards, though some security headers could be improved. HTTPS is enforced, and cookie consent mechanisms are implemented, supporting privacy compliance. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. Social media presence and trust indicators further support the company's legitimacy. Overall, Texthelp Ltd. presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

S

Slysavarnafélagið Landsbjörg

landsbjorg.is

65

Slysavarnafélagið Landsbjörg is a prominent Icelandic non-profit organization dedicated to rescue operations, safety education, and community support. The organization operates nationally with a strong volunteer base and is supported through donations, sponsorships, and an integrated e-commerce platform offering branded safety products. The website reflects a professional and well-structured digital presence, targeting Icelandic residents, volunteers, and donors. It effectively communicates its mission and services with clear navigation and rich content. Technically, the site leverages modern frameworks such as Next.js and integrates Shopify for online sales, ensuring a responsive and performant user experience. Security measures are robust, including HTTPS enforcement and security headers, though the absence of a public security policy and incident response page suggests room for improvement. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site presents a trustworthy and credible front for the organization, though WHOIS data is unavailable, likely due to privacy protections common in Icelandic domains.

P

PrintFriendly

printfriendly.com

69

PrintFriendly is an established online service providing PDF tools and web page print optimization solutions. The website offers users the ability to convert files to and from PDF format, edit documents, and sign them digitally. The service targets a broad general audience including individuals and businesses needing easy-to-use document management tools. Technically, the website is built on modern frameworks such as Next.js and React, with Tailwind CSS for styling, and integrates Google services for analytics and identity management. The site is performant, mobile-optimized, and SEO-friendly. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks a publicly available security policy or incident response contacts. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, though the website itself appears professional and trustworthy. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and security disclosures.

A

Arthrex

arthrex.io

67

Arthrex is a globally recognized leader in the orthopedic medical device industry, specializing in minimally invasive products, surgical techniques, and comprehensive medical education. The company targets surgeons, healthcare professionals, and patients, providing advanced solutions and educational resources to improve patient outcomes. Their market position is strong, supported by decades of clinical research and a broad portfolio of innovative products. The website reflects a mature digital presence with excellent content quality and user experience, emphasizing education and scientific research. Technically, the site leverages modern frameworks such as Next.js and Bootstrap, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, Arthrex demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and authoritative source in its industry.

F

Formspark

submit-form.com

66

Formspark is a technology-focused SaaS company founded in 2018, providing a backend service that connects web forms to email and other integrations without requiring users to manage servers or databases. The company targets agencies, freelancers, developers, and marketing teams, positioning itself as a reliable and easy-to-use form backend solution trusted by over 20,000 companies. The website is professionally designed with excellent content quality and clear navigation, supporting multiple languages and integrations with popular platforms such as Slack, Zapier, and various spam protection services. Technically, the website leverages modern frameworks including Next.js and React, hosted on AWS infrastructure. It demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforced, secure form handling, and multiple anti-spam protections, although some security headers are not explicitly detected and DNSSEC is not enabled. Privacy compliance is good with a comprehensive privacy policy and GDPR page, but lacks a cookie consent mechanism. Overall, the security maturity is solid for a small SaaS provider, with no visible vulnerabilities or suspicious patterns. The domain registration is privacy protected but consistent with the business profile and age. Contact information is available via email and support forms, with active social media presence. No critical issues were found, and the website is safe for general audiences. Strategic recommendations include implementing security headers, enabling DNSSEC, publishing a formal security policy and vulnerability disclosure program, and adding cookie consent to enhance privacy compliance and trust.

The MS Barometer website is an informational platform focused on providing data and statistics related to Multiple Sclerosis in Europe. It targets healthcare professionals, researchers, and the MS community by offering findings, comparisons, and country-specific insights. The site uses modern web technologies including React, Next.js, and Material-UI, hosted likely on DigitalOcean infrastructure. Google Analytics and Tag Manager are employed for user tracking, with a visible cookie consent mechanism ensuring basic compliance. However, the absence of explicit privacy policies, terms of service, and contact information limits its privacy compliance and business credibility. Security posture is moderate with HTTPS enforced but lacking security headers and vulnerability disclosures.

A

Arthrex Inc.

arthrexvetsystems.com

54

Arthrex Vet Systems is a division of Arthrex Inc., specializing in orthopedic and orthobiologic medical devices for veterinary applications, targeting veterinarians treating large and small animals. The website offers educational courses and product information, positioning itself as a leader in veterinary orthopedic solutions. The technical infrastructure is modern, leveraging Next.js, React, and CDN services to deliver a responsive and performant user experience. Security posture is generally good with HTTPS and reCAPTCHA usage, though lacks explicit security headers and published privacy or cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trust. Overall, the site is professional and trustworthy in content but requires improvements in privacy compliance and security transparency.

T

Thuasne

thuasne.com

58

Thuasne is a healthcare company specializing in medical devices such as orthopedic supports and compression therapy products, serving an international market with localized websites for multiple countries. The website is built on modern web technologies including React and Next.js, providing a good user experience with mobile optimization and basic accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit privacy policies, terms of service, and detailed contact information which are important for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy and should be investigated further. Overall, the site is professional and trustworthy in appearance but requires improvements in transparency and security best practices.

N

Nadační fond Dům Ronalda McDonalda

drmcd.cz

61

Nadační fond Dům Ronalda McDonalda is a Czech non-profit organization dedicated to supporting families of children with serious long-term illnesses by providing free accommodation near hospitals. The organization operates the first Ronald McDonald House in Motol and is actively fundraising for a second house in Olomouc. The website reflects a professional and well-established charity with a clear mission and strong community engagement. Technically, the site is built on modern frameworks such as Next.js and Sanity CMS, hosted by Active24, and optimized for performance and mobile devices. Security posture is strong with HTTPS, security headers, and secure donation processing via a trusted third-party platform. Privacy compliance is evident with a comprehensive privacy policy and cookie consent mechanisms. Overall, the site demonstrates high trustworthiness and professionalism, with active social media presence and transparent business information.

OET.com is the official website for the Occupational English Test, a globally recognized English language test specifically designed for healthcare professionals. The website offers test booking, preparation courses, career resources, and access solutions, targeting international healthcare professionals seeking to work, study, or register in English-speaking countries. The business is well-established, with a domain age dating back to 1998, indicating a mature market presence and trustworthiness. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Next.js and React, supported by Cloudflare DNS and Google services for analytics and maps integration. Security posture is generally good with HTTPS enabled and domain status protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information such as emails and phone numbers are not explicitly found in the provided content, which may impact user trust and compliance. Overall, the website is a high-quality, professional platform serving a niche healthcare education market with strong business credibility but could improve privacy and security transparency.

F

Formthotics

formthotics.com

64

Formthotics is a healthcare-focused company specializing in custom thermoformable medical orthotic insoles, targeting healthcare professionals, clinicians, sports retailers, and patients. The company leverages over 40 years of foot science expertise to provide clinically proven orthotic solutions that enhance patient comfort and performance. Their business model includes product manufacturing, distribution, and professional training services. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, but lack some advanced security headers and explicit security policies. The security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of privacy policy and terms of service pages represents a compliance gap. The WHOIS data is missing, which raises concerns about domain registration transparency and legitimacy. Overall, the site is trustworthy and professional but would benefit from improved compliance documentation and domain registration verification. Strategic recommendations include implementing comprehensive privacy and terms policies, enhancing security headers, providing incident response contacts, and verifying domain registration details to improve trust and compliance.

U

UAB RoboLabs

robolabs.lt

32

RoboLabs is a Lithuanian company specializing in modern accounting services, document processing, and business analytics, delivered through their proprietary ROBO platform. The company targets businesses across Lithuania, offering scalable service plans and a user-friendly digital platform that integrates accounting with business management tools. With over 1300 companies trusting their services, RoboLabs positions itself as a modern and efficient accounting service provider in the Lithuanian market. Technically, the website is built using modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. The site employs Google Tag Manager and Facebook SDK for analytics and marketing, alongside Cookiebot for GDPR-compliant cookie consent management. The technical infrastructure supports a professional user experience with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces transparency and trustworthiness, though the website content and business presence suggest legitimacy. Overall, RoboLabs demonstrates a strong digital presence and business credibility with room for improvement in domain registration transparency and published security governance. Strategic enhancements in these areas would further strengthen trust and compliance.

O

Ottobock

ottobock.cz

68

Ottobock is a globally recognized healthcare technology company specializing in prosthetics, orthotics, and mobility solutions. The company has a strong market position as a leader in rehabilitation and medical devices, serving patients and healthcare professionals worldwide. Their website reflects a mature digital presence with modern technologies such as Next.js and React, integrated with consent management and analytics tools to ensure compliance and user experience. Security posture is robust with HTTPS enforcement and security headers, although explicit security policies and incident response information could be improved. Overall, the website demonstrates professionalism, trustworthiness, and compliance with privacy regulations, supporting Ottobock's reputation as a reliable healthcare provider.

Zimmer Biomet is a leading global healthcare company specializing in orthopedic and musculoskeletal medical devices and surgical solutions. The website presents a professional and comprehensive digital presence, targeting healthcare professionals, patients, and caregivers with detailed product information, services, and educational resources. The company positions itself as a market leader with a broad portfolio of innovative healthcare solutions. Technically, the site leverages modern frameworks such as React and Next.js, hosted on Vercel, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although explicit incident response contacts and vulnerability disclosure mechanisms are not publicly available. Overall, the site reflects a mature digital infrastructure aligned with enterprise healthcare standards.

D

Datarun

datarun.cz

66

Datarun is a Czech technology company specializing in data processing and automation solutions, targeting business clients. The website is built using modern web technologies including React and Next.js, hosted behind Cloudflare, and incorporates cookie consent mechanisms via Cookiebot. The site demonstrates a moderate level of digital maturity with good design quality and mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, though the absence of a privacy policy and contact information reduces compliance and trust levels. The domain WHOIS data is unavailable, likely due to privacy protection, which slightly impacts legitimacy assessment. Overall, the website is professional and functional but would benefit from enhanced transparency and compliance documentation.

L

Ljósmæðrafélag Íslands

ljosmaedrafelag.is

66

Ljósmæðrafélag Íslands is a professional association dedicated to midwives in Iceland, providing comprehensive support and services to both practicing midwives and midwifery students. The organization focuses on labor issues, professional development, and member benefits, positioning itself as a key national entity in the healthcare sector for maternal care. The website is well-structured, professionally designed, and serves as a central hub for information, news, and resources relevant to its members and the public. Technically, the site leverages modern web technologies including Next.js and Prismic CMS, ensuring a responsive and accessible user experience. Security measures such as HTTPS and appropriate security headers are in place, contributing to a strong security posture. However, the absence of explicit incident response contacts and vulnerability disclosure policies suggests areas for improvement in transparency and security readiness. Overall, the site reflects a mature digital presence aligned with the organization's professional and non-profit nature.

P

PC Financial

pcfinancial.ca

51

PC Financial is a Canadian financial services brand offering banking and credit card products integrated with the PC Optimum loyalty rewards program. The website presents a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrates multiple marketing and analytics tools to optimize user engagement and business insights. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature, trustworthy financial brand with a strong focus on customer rewards and digital banking convenience.

H

Hyve

hyve.com

75

Hyve is a professional managed hosting and cloud services provider with a global footprint, offering tailored IT infrastructure solutions including private cloud, dedicated servers, and colocation. The company positions itself as a customer-centric, secure, and reliable partner with over 35 global locations and multiple industry certifications. The website demonstrates a mature digital presence with modern technologies and strong SEO and accessibility features. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security policies and incident response details are not publicly available. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, but the overall professional presentation and trust signals mitigate this risk. Strategic recommendations include publishing detailed security policies and monitoring domain registration status to enhance trust.

Č

Česká asociace farmaceutických firem

caff.eu

50

Česká asociace farmaceutických firem (ČAFF) is a professional industry association representing pharmaceutical companies in the Czech Republic, focusing on generics, biosimilars, and value-added medicines. The organization serves as a key advocate and information hub for its members and stakeholders, maintaining strong ties with European pharmaceutical bodies such as Medicines for Europe. The website reflects a medium-sized organization with a clear focus on healthcare industry stakeholders, providing member services, certification, and public information. The content is primarily in Czech with some English support, targeting industry professionals, media, and members.

E

Economist Impact

economistimpact.com

66

Economist Impact is a specialized division of The Economist Group focused on partnering with corporations, foundations, NGOs, and governments to drive change in key global themes such as sustainability, health, and globalisation. The organization leverages a combination of independent research, bespoke content creation, advertising, sponsorship, and large-scale events to influence policy and business decisions worldwide. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content that supports its mission. Technically, the site is built on modern web frameworks including React and Next.js, uses Contentful as a CMS, and integrates advanced monitoring and analytics tools such as New Relic. The presence of a consent management platform indicates attention to privacy compliance, particularly GDPR. Performance and mobile optimization are strong, contributing to a positive user experience. From a security perspective, the site uses HTTPS and monitoring tools but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or scripts. The WHOIS data for the subdomain is not publicly available, which is typical for subdomains, and the domain is strongly associated with the reputable Economist brand. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and providing vulnerability disclosure information to further strengthen trust and compliance.

L

Loblaw Companies Ltd.

loblaw.ca

66

Loblaw Companies Ltd. is a leading Canadian retail company specializing in grocery, health, beauty, financial services, and fashion. The website showcases a comprehensive portfolio of brands and services aimed at serving Canadian consumers with a focus on affordability, health, and lifestyle. The company operates an extensive network of stores and subsidiaries, positioning itself as a dominant player in the Canadian retail market. Technically, the website is built on modern web technologies including React and Next.js, with integrations for analytics and authentication such as Google Analytics, Google Tag Manager, and Okta. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses secure authentication mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the website presents a professional, trustworthy, and secure digital presence for Loblaw Companies Ltd. The lack of WHOIS data is attributed to privacy protection, which is justified for a large enterprise. Strategic recommendations include publishing a vulnerability disclosure policy and enhancing incident response transparency to further strengthen security posture.

Rek.ai, operated by Sandskogen AI Aktiebolag, is a Swedish technology company specializing in artificial intelligence solutions for website personalization. Founded in 2018, the company targets businesses seeking to enhance user experience through AI-driven personalized content and analytics. Their market position is that of a niche AI personalization provider primarily serving the Scandinavian region. The website reflects a modern technical infrastructure built on React and Next.js frameworks, with Cloudflare DNS services and Cookiebot for privacy compliance. The site is professionally designed, mobile-optimized, and provides clear navigation and business-focused content. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is supported by a comprehensive cookie consent mechanism, but lacks a dedicated privacy policy or terms of service pages. Contact information is available via a contact page but lacks direct emails or phone numbers in the visible content. Overall, the website is trustworthy, business-oriented, and safe for general audiences.

Rivile is a well-established Lithuanian software company specializing in accounting and business management solutions, including cloud-based ERP and desktop applications. The company targets businesses in Lithuania, offering modular software products that cover a wide range of business needs such as payroll, POS, and document digitization. Their market position is strong, supported by over 20 years of operation and a large client base. Technically, the website is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security measures include HTTPS, Google reCAPTCHA, and a comprehensive cookie consent mechanism, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates professionalism, compliance with GDPR, and a trustworthy digital presence.

R

Revolut

revolut.com

73

Revolut is a leading global fintech company providing a comprehensive suite of financial services including personal and business accounts, international money transfers, currency exchange, savings, investments, cryptocurrency, and insurance products. With over 65 million customers worldwide and strong regulatory authorizations from the UK's Financial Conduct Authority, Revolut holds a significant market position in the digital banking and fintech space. The website reflects a mature digital presence with excellent content quality, user experience, and mobile optimization. Technically, the website leverages modern web technologies such as React and Next.js, delivering fast performance and strong SEO optimization. Security measures are robust, including HTTPS enforcement and multiple security headers, alongside a proactive fraud detection team and a responsible disclosure program. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. Overall, Revolut demonstrates a strong security posture with no critical vulnerabilities detected. The absence of WHOIS data is likely due to privacy protection, which is common for fintech companies to mitigate spam and abuse risks. The website is trustworthy, professional, and well-aligned with industry best practices, making it a reliable platform for financial services users.

M

MEDDI hub a.s.

meddi.com

65

MEDDI hub a.s. operates a telemedicine platform that enables patients and healthcare professionals to connect securely via calls, video calls, and chat. The platform supports multiple devices and languages, offering services such as online consultations, prescriptions, confirmations, and second opinions. The company holds partnerships with reputable medical institutions and maintains ISO 27001 certification, underscoring its commitment to security and compliance. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies with consent mechanisms. Technically, the site uses modern frameworks like Next.js and React, integrates Google Tag Manager for analytics, and enforces HTTPS with strong encryption practices. While WHOIS data is unavailable, the overall trust indicators and business presence suggest legitimacy. Security posture is strong, though improvements in publishing explicit security headers and incident response contacts are recommended.

O

Okredo

okredo.com

64

Okredo is a specialized business data provider focusing on delivering company ratings, credit limits, corporate values, and financial indicators to support business growth. The company targets businesses seeking reliable credit and financial insights primarily in Lithuania and selected European countries. Their market position is that of a niche data-as-a-service provider with a clear focus on financial data and credit risk management. The website is built on modern technologies including Next.js and React, integrating secure payment processing via Stripe and comprehensive cookie consent management through Cookiebot. The technical infrastructure reflects a mature digital presence with fast performance and good mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy hosted by Cookiebot. However, the site lacks explicit terms of service and security policy pages, and no direct contact information is provided on the main page, which could be improved to enhance business credibility. Overall, the website is professional, trustworthy, and well-structured, supporting Okredo's business objectives effectively.

J

Jackpotpiraten

jackpotpiraten.de

72

Jackpotpiraten is a German online slot gaming platform specializing in legal PayPal-based slot games such as Merkur and Novoline. The website positions itself as a trusted and legal online casino alternative, offering promotions like free spins with low deposit requirements. Technically, the site is built on modern frameworks like Next.js and React, leveraging Cloudflare for DNS and CDN services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and terms of service documents are not found in the provided content. No WAF or blocking mechanisms interfere with content access. Overall, the platform targets adult German users interested in online gambling, maintaining a professional and consistent brand presence.

C

CaptchaFox

captchafox.com

52

CaptchaFox is a Germany-based technology company specializing in GDPR-compliant captcha and bot protection services for websites and mobile applications. Founded in 2020, it positions itself as a privacy-first alternative in the bot mitigation market, emphasizing compliance with European data protection standards and adaptive bot detection technologies. The website reflects a professional SaaS business model targeting companies seeking to protect their digital assets from malicious bot traffic while maintaining user privacy. Technically, the website is built using modern frameworks such as Next.js and React, hosted on bunny.net, and optimized for performance and accessibility. The site demonstrates good SEO practices and mobile responsiveness, with rich SVG graphics and structured data enhancing its digital maturity. However, explicit privacy and cookie policies are not directly found in the provided content, which could be improved to enhance transparency. From a security perspective, the site uses HTTPS and has domain transfer protections in place. There is no evidence of security.txt or vulnerability disclosure mechanisms, and security headers are not detected in the provided data. The absence of explicit contact information and security policies suggests areas for improvement in incident response readiness and user trust. Overall, CaptchaFox presents a credible and professional online presence with a strong focus on privacy and compliance. Strategic enhancements in policy disclosures, security headers, and contact transparency would further strengthen its security posture and compliance standing.

E

Euroleague Basketball

euroleaguebasketball.net

66

Euroleague Basketball operates as the official digital platform for the Euroleague basketball competitions, providing comprehensive media coverage including live matches, news, statistics, video highlights, and fan engagement features such as fantasy challenges. The website is well-designed, mobile-optimized, and uses modern web technologies like Next.js and React, hosted likely on Vercel. The platform integrates multiple advertising and analytics services, indicating a mature digital marketing strategy. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and visible privacy/legal policies, which are areas for improvement. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency, though the website content and branding appear professional and trustworthy. Overall, the site serves a specialized audience of basketball fans and stakeholders in European basketball with high-quality content and user experience.

W

Wines from Czech Republic

wineofczechrepublic.cz

63

The website www.vinazmoravyvinazcech.cz serves as a regional informational and promotional platform focused on wines from the Moravia and Bohemia regions of the Czech Republic. It targets wine enthusiasts, tourists, and consumers interested in Czech wines, offering details about wine varieties, events, and related content. The site uses modern web technologies such as React and Next.js, providing a good user experience with responsive design and clear navigation. However, the absence of WHOIS registration data and lack of visible privacy, cookie, and contact policies reduce its trustworthiness from a security and compliance perspective. No security headers or SSL configuration details were available, and no explicit security or incident response contacts were found. Overall, the site is functional and informative but would benefit from enhanced transparency and security practices.

The Technical University of Košice (TUKE) is a well-established public university in Slovakia, offering a broad range of higher education and research programs in innovative technical fields. The website reflects a strong market position as a leading educational institution with a large student body and international collaborations, including Erasmus+ and the Ulysseus European University alliance. The digital presence is modern, leveraging Next.js and React technologies, with excellent mobile optimization and user experience. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the university's mission and audience.

3

Events in Jablonec | 365 Jablonec

365jablonec.cz

47

The website 365jablonec.cz serves as a local event listing platform for Jablonec nad Nisou, Czech Republic, providing up-to-date information on cultural, sports, educational, and leisure events. It targets a general audience interested in local happenings and offers features such as event search and organizer information. The site uses modern web technologies including React and Next.js, indicating a contemporary technical infrastructure with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness, impacting the overall risk profile. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to improve compliance and trust.

The website www.priserkyvhlave.cz is an educational platform in Czech language focused on teaching about monsters through interactive games and resources, primarily targeting schools and children. It is a project supported and co-financed by the European Union and the Czech Ministry of Interior, indicating a non-commercial, public service nature. The site uses modern web technologies such as React and Next.js, providing a good user experience with responsive design and clear navigation. However, the site lacks visible privacy, cookie, and terms of service policies, and no contact information is provided, which limits transparency and user trust. From a technical perspective, the site is built on a modern JavaScript framework with client-side rendering and moderate performance. No analytics or tracking scripts were detected, suggesting minimal user tracking. Security posture is limited due to the absence of security headers and no visible SSL configuration details. The WHOIS data for the domain is unavailable, likely due to privacy protection or domain registration issues, which negatively impacts the trustworthiness assessment. Overall, the website is safe and suitable for general audiences, with no adult or explicit content detected. The lack of WHOIS transparency and privacy policies are the main concerns. Strategic recommendations include implementing comprehensive privacy and cookie policies, improving security headers, providing clear contact and incident response information, and verifying domain registration details to enhance trust and compliance.

S

Sitejabber

sitejabber.com

63

Sitejabber is a leading online platform specializing in consumer business reviews and ratings, serving over 200 million customers and featuring reviews for more than 130,000 businesses. Positioned as a trusted resource, it offers consumers insights to make informed purchasing decisions and provides businesses with a platform to engage with customers. The company emphasizes trust, consumer protection, and transparency, supported by its award-winning status and Google Partner certification. Technically, Sitejabber employs modern web technologies including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. Security is robust with HTTPS enforcement and comprehensive security headers, although public incident response and vulnerability disclosure policies are not evident. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, Sitejabber demonstrates a mature digital presence with high professionalism and trustworthiness, though WHOIS data unavailability slightly impacts domain transparency.

Matyáš Herman is an independent fullstack developer specializing in React, Node.js, PHP, and modern web technologies, targeting brands and businesses seeking modern website solutions. The website serves as a personal portfolio showcasing skills and services. The technical infrastructure is based on modern frontend frameworks such as React and Next.js, providing a responsive and visually appealing user experience. However, the site lacks advanced security headers and privacy compliance documentation, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the active social media presence supports legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

E

eVstupenka

evstupenka.cz

68

eVstupenka.cz is a well-established online ticketing platform primarily serving the Liberec region in the Czech Republic. Founded in 2006, it offers a comprehensive catalog of cultural events including theater, concerts, musicals, festivals, and other entertainment options. The platform supports online ticket sales, subscription packages, and gift vouchers, targeting local residents and visitors interested in cultural activities. The website demonstrates a consistent brand presence and provides a user-friendly experience with clear navigation and mobile optimization. Technically, it leverages modern web technologies such as React and Next.js, integrated with DatoCMS for content management, and employs Google Tag Manager and Analytics for tracking.

Global Concept Consulting is a well-established communication agency based in Brussels, Belgium, with over 20 years of experience delivering strategic communication, public affairs, media relations, event management, branding, video production, and web development services. The company has a strong international presence, working on projects in more than 80 countries and maintaining close proximity to European institutions. Their market position is reinforced by awards such as the German Brand Awards and partnerships with European and United Nations agencies. Technically, the website is built on a modern React and Next.js framework with a headless WordPress CMS backend, hosted via OVH sas, providing a solid digital infrastructure with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance elements such as privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-branded, though it would benefit from enhanced privacy compliance and security best practices.

A

Amusnet

amusnet.com

70

Amusnet is a well-established gaming provider founded in 2012, specializing in online casino games, live casino, and land-based slot cabinets. The company holds a strong market position supported by numerous industry awards and a broad network of partners. Their business model focuses on B2B services, delivering innovative gaming solutions and reliable support to operators worldwide. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, hosted via Cloudflare, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, although improvements are recommended in DNSSEC and security headers. Privacy compliance is currently lacking, with no visible privacy or cookie policies, which is a notable gap. Overall, Amusnet demonstrates high business credibility and trustworthiness but should enhance privacy and security transparency to align with best practices.