Security Directory

Ö

Öserix

oeserix.ch

47

Öserix is a regional Swiss initiative focused on producing and promoting local agricultural food products from Appenzell Innerrhoden. The website serves as a platform to showcase the regional value chain, including producers, product information, and an online shop. The business targets consumers interested in sustainable, regional, and seasonal food products, emphasizing quality and local economic support. Technically, the site is built on WordPress with modern plugins and tracking tools such as Google Analytics and Tag Manager, showing moderate digital maturity. Security posture is adequate with HTTPS and IP anonymization but lacks advanced security headers and explicit incident response information. Privacy compliance is partial with a privacy policy present but missing cookie consent mechanisms. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

Nechtovyobchodik.sk is a Slovak-based e-commerce retailer specializing in professional beauty salon products and cosmetics. The website offers a wide range of products including professional cosmetics, salon equipment, and accessories, targeting beauty salons and individual consumers interested in beauty care. The business appears to be a small but established player in the regional beauty retail market, with a clear focus on quality and customer engagement through blogs and newsletters. Technically, the website is built on a custom e-commerce platform hosted likely by eshop-rychle.cz, utilizing modern web technologies such as Matomo for analytics and Swiper.js for UI components. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. SEO practices are well implemented, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses consent mechanisms for analytics tracking, reflecting a good privacy posture. However, it lacks explicit cookie consent banners and security.txt files, and does not publicly disclose incident response contacts or security policies. Security headers are partially implemented, and no critical vulnerabilities were detected in the provided content. Overall, the website presents a trustworthy and professional online presence with moderate technical maturity and good business credibility. Strategic improvements in privacy compliance and security transparency could further enhance trust and regulatory adherence.

P

Politiets Efterretningstjeneste

pet.dk

70

Politiets Efterretningstjeneste (PET) is the Danish Security and Intelligence Service responsible for national security, counterterrorism, and intelligence operations within Denmark. The website serves as an official government portal providing information about PET's roles, recent news, recruitment opportunities, and security advice. It targets Danish citizens, government officials, and security professionals, offering authoritative content and resources. Technically, the website employs modern web technologies including AngularJS and Cookiebot for cookie consent management, alongside Google Maps API integration. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, some security headers are not detected, and DNSSEC is not enabled, indicating areas for security enhancement. From a security perspective, the site enforces HTTPS, uses CSRF protection tokens, and manages cookie consent in compliance with GDPR. No critical vulnerabilities or exposed sensitive data were identified. The domain registration is consistent with a legitimate government entity, with a long history dating back to 1997. Overall, PET's website demonstrates a strong security posture, good privacy compliance, and professional business credibility. Recommendations include enabling DNSSEC, adding security headers, and publishing explicit security policies or incident response contacts to further enhance trust and security transparency.

P

Politi (Danish Police)

politi.dk

51

The website politi.dk is the official online presence of the Danish Police, providing comprehensive public services including crime reporting, legal information, news updates, and contact details for police stations across Denmark. It serves a broad audience of Danish residents and visitors seeking law enforcement information and services. The site is well-positioned as a national government authority with a large operational scope and a clear mission to serve public safety needs. Technically, the site employs modern web technologies such as AngularJS and jQuery, integrates Cookiebot for cookie consent management, and uses secure session management practices. The infrastructure supports mobile responsiveness and accessibility, ensuring a good user experience across devices. The presence of HTTPS and CSRF protection tokens indicates a solid security foundation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although DNSSEC is not enabled, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. The site respects privacy regulations with a cookie consent banner and detailed cookie declarations, though a dedicated privacy policy page was not found in the analyzed content. Overall, politi.dk demonstrates a trustworthy, professional, and secure government website with good technical implementation and user experience. Strategic recommendations include enabling DNSSEC, verifying security headers, and publishing explicit privacy and security policies to enhance compliance and user trust.

D

Danmarks Domstole

domstol.dk

64

Danmarks Domstole is the official website for the Danish judiciary system, providing comprehensive information about courts, legal topics, and public services related to the Danish legal system. The site targets Danish citizens and legal professionals seeking authoritative legal information. It maintains a strong market position as the official government portal for judiciary matters in Denmark. Technically, the website employs modern web technologies including jQuery and Cookiebot for cookie consent management, and integrates a third-party chat service (Puzzel) for user support. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and a professional design. Security-wise, the site enforces HTTPS and implements a robust cookie consent mechanism, demonstrating compliance with GDPR. However, explicit security headers and a public security policy or vulnerability disclosure are not present, representing areas for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with a low risk profile.

R

Regeringen

regeringen.dk

58

Regeringen.dk is the official website of the Danish government, serving as a primary platform for disseminating government news, speeches, publications, and information about ministers and government structure. It targets the general public, media, and stakeholders interested in Danish governmental affairs. The website is well-established with a domain age dating back to 1998, reflecting its longstanding role as an authoritative government source. Technically, the site employs modern web technologies including React and WebP images, with good mobile optimization and accessibility features. The CMS appears to be Umbraco, a common enterprise-level content management system. Performance is fast, and SEO practices are well implemented, though some security headers are missing. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No privacy or cookie policies were found, indicating gaps in GDPR compliance. Contact information is limited but includes an official government email and physical address. No incident response or vulnerability disclosure information is provided. Overall, the website is professional, trustworthy, and serves its purpose effectively but would benefit from improved privacy compliance and enhanced security configurations to align with best practices.

E

Evangelische Freiwilligendienste gGmbH

ev-freiwilligendienste.de

49

Evangelische Freiwilligendienste gGmbH operates as a central coordinating body for evangelical voluntary services in Germany and abroad, offering programs such as the Freiwilliges Soziales Jahr, Diakonisches Jahr, Bundesfreiwilligendienst, and international volunteer programs. The organization serves volunteers and partner organizations, providing consulting and placement services. The website is built on TYPO3 CMS, hosted on securehost.de, and uses Matomo analytics with privacy-respecting opt-in/out features. Security measures include HTTPS and Content Security Policy, though CSP could be improved by removing unsafe directives. Contact information is clearly presented, supporting trust and transparency. However, the site lacks a cookie consent banner and explicit terms of service or security policy pages, which are areas for compliance improvement.

S

Sites 365

sites-365.de

3

The website at https://sites-365.de/user/login appears to be a login portal with minimal publicly accessible content. It lacks essential business information, privacy policies, cookie consent mechanisms, and contact details, which limits its transparency and trustworthiness. The technical infrastructure is based on AngularJS and Material Design CSS, indicating a modern frontend framework, but there is no evidence of advanced SEO, accessibility, or performance optimizations. Security posture is weak due to the absence of visible HTTPS enforcement and security headers, and no incident response or vulnerability disclosure information is provided. Overall, the site presents a low-risk profile in terms of content safety but suffers from poor business credibility and privacy compliance. Strategic improvements are needed to enhance trust, security, and compliance.

C

CEC Praha a.s.

starcasinoteplice.cz

9

Star Casino Teplice operates as a modern casino located in Teplice, Czech Republic, offering a variety of live casino games including American Roulette, Black Jack, and Poker, alongside Video Lottery Terminals (VLT) from multiple providers. The business targets adult customers seeking gambling entertainment with additional food and beverage services enhancing the experience. The website is professionally designed with clear navigation and mobile optimization, reflecting a medium-sized hospitality business with a local/regional market focus. Technically, the site uses modern JavaScript libraries and Google services, with HTTPS enforced and a GDPR-compliant cookie consent mechanism. However, the absence of a privacy policy page and security headers indicates room for improvement in compliance and security posture. The WHOIS data is missing, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the consistent business information and active social media presence. Overall, the site is functional, trustworthy, and suitable for its target audience but would benefit from enhanced security and compliance documentation.

C

CEC Praha a.s.

casinopalace.cz

9

Palace Casino, operated by CEC Praha a.s., is a regional casino located in Svatý Kříž, Czech Republic, offering a variety of live casino games including roulette, blackjack, and Texas Hold'em, alongside modern VLT slot machines and a bar serving drinks. The casino targets adult customers seeking entertainment and gambling experiences near the border crossing. The website is professionally designed with multimedia content, responsive layout, and clear navigation, reflecting a medium-sized hospitality business with a solid market position within a group of related casinos. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Slick carousel, and GSAP, with Google Fonts integration and cookie consent mechanisms. Security posture is good with HTTPS enforced and CSRF tokens present, but lacks explicit security headers and a dedicated privacy policy page. The WHOIS data is missing, which slightly reduces transparency and trustworthiness, but the presence of a valid Czech Ministry of Finance license and clear company information supports legitimacy. Overall, the site is compliant with GDPR cookie consent requirements and includes age verification to restrict access to adults only.

C

CEC Praha a.s.

starcasinogroup.cz

10

Star Casino Group is a well-established casino operator in the Czech Republic, managing over 50 physical casino locations and an online casino platform. The company emphasizes fair play and responsible gambling, supported by age verification and ethical whistleblowing channels. Their market position is strong regionally with a broad footprint across multiple cities. Technically, the website uses modern JavaScript libraries and Google services, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS and cookie consent mechanisms, though explicit security headers are not detected and WHOIS transparency is lacking. Overall, the business appears legitimate and compliant with GDPR, but domain registration details should be verified for full trust.

C

CEC Praha a.s.

starcasinoplzen.cz

10

Star Casino Plzeň operates as a local casino in Plzeň, Czech Republic, offering live casino games and a variety of VLT machines with jackpots and bonuses. The business is part of the larger Star Casino Group managed by CEC Praha a.s., a registered company in Prague. The website targets adult customers with clear age verification and legal disclaimers about gambling risks. Technically, the site uses modern JavaScript libraries and fonts, with a responsive design and good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. WHOIS data is unavailable, likely due to privacy protection, which is common in the gambling industry. Overall, the site presents a professional and trustworthy front for its business operations.

C

CEC Praha a.s.

starcasinopetrovice.cz

9

Star Casino Petrovice is a regional casino operator in the Czech Republic, offering live table games such as poker, blackjack, and roulette, alongside a wide selection of modern VLT slot machines. The casino operates 24/7 with free entry and is located conveniently next to a shopping center with parking. The business is operated by CEC Praha a.s., a registered company with licensing from the Czech Ministry of Finance. The website demonstrates a moderate level of digital maturity, using modern JavaScript libraries and multimedia content to engage visitors. Security measures include HTTPS, CSRF tokens, and age verification, but lack some advanced security headers and explicit privacy policy pages. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance documentation.

E

European Society for Vascular Surgery

esvs.org

10

The European Society for Vascular Surgery (ESVS) operates a professional website focused on vascular surgery education and professional development. The site targets vascular surgeons and healthcare professionals across Europe, providing resources, events, and membership services. The domain is well-established, created in 1997, and hosted by OVH sas, indicating a stable and legitimate presence in the healthcare sector. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies including Google Tag Manager and reCAPTCHA for security and analytics. The site demonstrates good SEO practices and moderate performance with mobile optimization. However, there is room for improvement in accessibility and security headers. Security posture is adequate with HTTPS enabled and domain status protections, but the absence of DNSSEC and some security headers suggests potential enhancements. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the website is professional and trustworthy with a solid business model as a non-profit medical society. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, and enhancing security headers to improve trust and compliance.

The website congress-imk.ch serves as a specialized conference management and overview platform primarily targeting the healthcare sector in Switzerland. Operated by IMK Institut für Medizin und Kommunikation AG, it provides listings and management tools for medical conferences, webinars, and educational events. The platform is well-branded and consistent, with content primarily in German and options for English and French, catering to a multilingual professional audience. The business model focuses on event hosting and conference management services within the healthcare education niche. Technically, the site uses a custom CMS platform named Converia, with standard web technologies such as JavaScript, CSS, and HTML5. The site demonstrates basic mobile optimization and good accessibility features, though SEO and performance optimizations appear moderate. No advanced frameworks or third-party analytics/tracking tools were detected, indicating a lean technical footprint. From a security perspective, the site is accessible without WAF or blocking mechanisms and uses HTTPS (assumed from domain and standard practice, though not explicitly confirmed). However, no security headers or cookie consent mechanisms were detected, and no explicit privacy or incident response policies are published on the main page. The WHOIS data aligns well with the business identity, showing a legitimate and consistent registration without privacy protection, enhancing trustworthiness. Overall, the website is professional and trustworthy for its intended audience but would benefit from improved privacy compliance (cookie consent), enhanced security headers, and more visible contact information to strengthen its security posture and user trust.

The website civz.hr is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, specifically an error 1005 indicating that the autonomous system number (ASN) of the visitor's IP address is banned. This results in no accessible content beyond the Cloudflare error page, preventing any meaningful analysis of the business, services, or user experience. The domain is newly registered in late 2023 with a valid registrar and Cloudflare nameservers, suggesting a legitimate but very young entity likely based in Croatia. The lack of accessible content and policies severely limits the ability to assess the company's market position, technical maturity, or security posture beyond the presence of Cloudflare protection.

P

Požeško-slavonska županija

pszupanija.hr

60

Požeško-slavonska županija is a regional government entity in Croatia providing a wide range of public administrative, social, educational, cultural, and economic services to its residents and stakeholders. The official website serves as a central hub for information dissemination, public documents, news, and transparency initiatives. The site targets local citizens, businesses, and government partners, emphasizing accessibility and compliance with privacy regulations. Technically, the website is built on Joomla CMS with modern frameworks such as Bootstrap and Helix Ultimate, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and CSRF protections, although some security headers could be improved. Overall, the website is professional, trustworthy, and well-aligned with its government function.

B

BJELOVARSKO-BILOGORSKA ŽUPANIJA

bbz.hr

48

Bjelovarsko-Bilogorska Županija (BBŽ) is the official regional government authority for the Bjelovarsko-Bilogorska County in Croatia. The website serves as a public information portal providing news, administrative details, public calls, and legal forms relevant to residents and stakeholders of the county. It positions itself as a key regional government entity with a focus on agricultural and economic development, public administration, and community engagement. The site targets local citizens, businesses, and government officials, offering structured navigation and official announcements in Croatian with English language support.

S

Sisačko-moslavačka županija

smz.hr

59

Sisačko-moslavačka županija operates an official regional government website providing comprehensive information about county administration, public projects, news, tenders, and contact details. The site targets residents, businesses, and public officials within the Sisak-Moslavina County in Croatia. The website is built on Joomla CMS with Helix Ultimate framework and uses modern web technologies including Bootstrap and jQuery. It features good mobile optimization and accessibility tools, including an accessibility menu and cookie consent mechanisms compliant with GDPR. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and well-aligned with its government function.

M

Međimurska županija

medjimurska-zupanija.hr

43

Međimurska županija operates as the official regional government entity for the Međimurje County in Croatia, providing a comprehensive digital platform for residents, businesses, and visitors. The website offers extensive information on local governance, administrative departments, EU-funded projects, transparency in budget and procurement, and public announcements. It targets local citizens, stakeholders, and tourists, positioning itself as a trusted source of regional governmental information and services. Technically, the website is built on WordPress 6.8.3 using the Oxygen Builder theme, integrating modern web technologies such as Google Fonts, Flickity carousel, and Google reCAPTCHA for security. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although some minor improvements in security headers could enhance its posture. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms compliant with GDPR, and uses reCAPTCHA to mitigate automated abuse. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, additional HTTP security headers and regular updates are recommended to maintain a robust security posture. Overall, the website presents a professional, trustworthy, and user-friendly interface consistent with government standards. It complies with privacy regulations and provides clear contact information, enhancing its credibility and user trust.

L

Ličko-senjska županija

licko-senjska.hr

52

Ličko-senjska županija is the official regional government entity for the Ličko-senjska County in Croatia. The website serves as the primary digital platform for disseminating public administration information, news, official documents, tenders, and transparency reports. It targets residents, businesses, and stakeholders within the county, providing comprehensive access to government services and updates. The site reflects a medium-sized government organization with a focus on regional development, public services, and community engagement. Technically, the website employs a modern tech stack including jQuery, Modernizr, Owl Carousel, and Google Fonts, built on a CMS platform by VIT. It is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security is robust with HTTPS enforced and a Content-Security-Policy header, although some additional security headers could enhance protection. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. The security posture is strong, with no detected vulnerabilities or exposed sensitive data. The site lacks a security.txt file and explicit incident response contacts, which are recommended for improved security transparency. The domain registration is consistent with the official government entity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, serving its public sector role effectively.

K

Krapinsko-zagorska županija

kzz.hr

58

Krapinsko-zagorska županija operates as the official regional government authority for the Krapinsko-zagorska County in Croatia. The website serves as a comprehensive portal providing residents, businesses, and visitors with access to administrative information, news, public tenders, official documents, and cultural and tourism promotion. The site targets a broad audience including local citizens and stakeholders interested in regional governance and services. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, Font Awesome, and various plugins enhancing user experience and functionality. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA for form protection, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source of regional government information.

Z

Zadarska županija

zadarska-zupanija.hr

47

Zadarska županija is the official regional government website for the Zadar County in Croatia, providing public administration and citizen services. The website serves as an information portal targeting residents and visitors of the region. It is built on Joomla CMS with the Helix Ultimate framework, utilizing modern web technologies such as Bootstrap, jQuery, and Font Awesome, ensuring a responsive and accessible user experience. The site demonstrates good technical maturity with HTTPS enforced and security headers implemented, reflecting a solid security posture. However, it lacks critical compliance documents such as a privacy policy and terms of service, which are essential for GDPR compliance and user trust. No contact emails or phone numbers were explicitly found, which may hinder user communication. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and compliance transparency.

S

Splitsko-dalmatinska županija

dalmacija.hr

56

Splitsko-dalmatinska županija operates as the official regional government authority for the Split-Dalmatia County in Croatia, providing public administration, regional development, tourism promotion, and social services. The website serves as a comprehensive portal for citizens and stakeholders, offering news, public procurement information, official documents, and contact avenues. The organization maintains a consistent brand presence and leverages social media channels to engage with the public. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, Bootstrap, and modern JavaScript libraries such as Swiper.js and Mmenu.js. It integrates Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or scripts. The domain WHOIS data aligns with the official government entity, confirming legitimacy. Overall, the website presents a professional, trustworthy, and functional digital presence for the regional government, with room for improvement in security header implementation and incident response transparency.

Š

Šibensko-kninska županija

sibensko-kninska-zupanija.hr

65

Šibensko-kninska županija operates as the official regional government authority for the Šibenik-Knin County in Croatia, providing a comprehensive digital platform for citizens, investors, and tourists. The website offers news, public tenders, administrative documents, and information about the county's organizational structure and services. The site is well-structured and professionally designed, reflecting its role as a government entity with a focus on transparency and public service.

D

Dubrovačko-neretvanska županija

dubrovnik-neretva.hr

53

Dubrovačko-neretvanska županija operates as the official regional government authority for the Dubrovnik-Neretva County in Croatia. The website serves as a comprehensive portal offering news, public notices, administrative services, event information, and access to official documents. It targets residents and stakeholders within the county, providing essential government-related information and services. The site maintains a consistent brand identity and high trust indicators typical of government entities.

E

EUROPE DIRECT CENTAR KARLOVAC

europedirect-karlovac.eu

55

Europedirect Karlovac operates as a regional European Union information center based in Karlovac, Croatia. It serves as a public outreach and informational hub, providing EU-related news, publications, and event information primarily targeting local citizens, government bodies, and regional stakeholders. The website is professionally designed using WordPress with Elementor and Yoast SEO, reflecting a moderate to good level of digital maturity. It offers multilingual support with Croatian as the primary language and English as an alternate. The business model is non-commercial, focusing on public service and EU policy dissemination.

R

RMCE BUSINESS s.r.o.

lightdata.cz

37

LightData, operated by RMCE BUSINESS s.r.o., is a Czech Republic-based B2B data service providing extensive databases of Czech companies and managerial contacts. The platform targets businesses seeking detailed company and contact information to enhance their business operations. The website offers registration and login functionalities, with demo credentials available for trial. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and integrates third-party marketing and analytics tools such as Smartsupp Live Chat and Piwik/Matomo. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, while HTTPS is assumed, explicit security headers are missing, and privacy compliance is weak due to absent privacy and cookie policies. WHOIS data is unavailable, which raises some concerns about domain legitimacy, though the website content and contact details suggest a legitimate business presence.

Alsenta.com operates as a B2B marketplace platform focused on supplier discovery and procurement auctions, primarily targeting businesses seeking efficient supplier selection processes. The website content is in Czech with some multilingual options, offering integration with reverse auction systems to enhance procurement efficiency. Technically, the site uses basic JavaScript libraries such as Prototype.js and AJAX but lacks modern CMS or frameworks. The site shows moderate performance but poor mobile optimization and minimal SEO or accessibility features. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and insecure form handling. No privacy or cookie policies are present, and no contact or social media information is provided, limiting transparency. The WHOIS data is missing, raising concerns about domain legitimacy. Overall, the site presents basic business functionality but requires significant improvements in security, privacy compliance, and technical modernization.

A

ALSENTA s.r.o.

seeky.cz

36

Seeky.cz is a Czech-based B2B service operated by ALSENTA s.r.o. that specializes in identifying and converting website visitors into potential customers. The company targets businesses seeking to enhance their lead generation and sales conversion through visitor monitoring, targeted offers, and direct customer engagement. The website demonstrates a professional presence with a clear value proposition, client testimonials, and a multi-country reach across 40 countries with over 2000 users. Technically, the site employs modern web technologies including Bootstrap, jQuery, and multiple analytics tools such as Google Analytics and Matomo, alongside live chat support for customer engagement. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, indicating room for compliance improvement. WHOIS data is unavailable, which slightly impacts trust but does not detract from the overall professional presentation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and regulatory adherence.

H

Hrvatski ragbijaški savez

rugby.hr

42

The website rugby.hr serves as the official online presence of the Croatian Rugby Union (Hrvatski ragbijaški savez), providing comprehensive information about rugby competitions, national teams, news, and archival data. It targets rugby players, fans, and the broader sports community in Croatia, positioning itself as the national governing body for rugby. The business model is non-profit, focusing on sports promotion and organization. The site is well-branded and consistent with trust indicators such as official social media links and sponsorships. Technically, the site is built on Joomla CMS with common JavaScript libraries like jQuery and Bootstrap, hosted by CARNET, a reputable Croatian academic network. Performance and mobile optimization are basic but functional. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided data, and there is a lack of privacy and cookie policies, indicating compliance gaps. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced security and privacy compliance measures.

H

Naslovnica - Hrvatski vaterpolski savez

hvs.hr

50

The website hvs.hr represents a Croatian entity with a domain registered since 2000, indicating a well-established presence. The site uses standard web technologies such as jQuery and Google Analytics, and is hosted behind Cloudflare DNS, suggesting a modern infrastructure. However, the site lacks explicit privacy and cookie policies, as well as clear contact information, which impacts its privacy compliance and user trust. The security posture is moderate with HTTPS enabled but missing important security headers and vulnerability disclosure mechanisms. Overall, the site is professional and safe for general audiences but would benefit from enhanced privacy and security practices to improve compliance and trustworthiness.

H

Hrvatski košarkaški savez

hks-cbf.hr

45

The Hrvatski košarkaški savez (Croatian Basketball Federation) operates as the national governing body for basketball in Croatia, providing official news, league information, team rosters, and historical data related to Croatian basketball. The website serves basketball fans, players, clubs, and the broader sports community in Croatia. It maintains a strong digital presence with official social media channels and regularly updated content. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Analytics, and various UI libraries such as Owl Carousel and Font Awesome. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and uses Google Analytics for tracking. However, it lacks several important security headers like Content-Security-Policy and X-Frame-Options, which could be improved to enhance security posture. No WAF or blocking mechanisms were detected, and no exposed sensitive data was found. Overall, the website is legitimate and professional, though WHOIS data is unavailable due to GDPR privacy protections. The absence of a cookie consent mechanism may represent a compliance gap. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, and maintaining regular updates to WordPress and plugins to mitigate vulnerabilities.

Sportska Hrvatska is a Croatian non-profit association established in 2006 focused on promoting sports news. The website serves as a basic informational portal with minimal content, providing contact details, statutory documents, and organizational information. The market position is niche and local, targeting sports enthusiasts and stakeholders in Croatia. The business model is centered on association activities rather than commercial services. Technically, the website is simple, built with basic HTML and hosted behind Cloudflare DNS, but lacks modern CMS or frameworks. Performance and mobile optimization are basic, with limited SEO due to noindex directives. Security posture is weak, with no visible HTTPS confirmation, no security headers, and no privacy or cookie policies, indicating low maturity in security and compliance. Overall, the site is functional but minimalistic, with room for significant improvements in security, privacy, and user experience.

A

ATR International AG

atr.de

45

ATR International AG operates as a global trade cooperation entity for leading distributors in the independent automotive aftermarket. Founded in 1967 and headquartered in Denkendorf, Germany, ATR facilitates collaboration among automotive spare parts distributors, manufacturers, suppliers, and independent multi-brand garages. The company focuses on purchasing coordination, digital transformation, workshop concepts, sustainable aftermarket initiatives, and steering committees to strengthen the independent aftermarket and drive collective growth. The website reflects a mature organization with a consistent brand presence and a clear business model centered on trade cooperation rather than direct retail. Technically, the website is built on TYPO3 CMS with Bootstrap 5 and incorporates modern JavaScript libraries such as jQuery and Photoswipe. It uses Matomo for analytics, demonstrating a preference for privacy-conscious tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism that complies with GDPR requirements. No blocking or WAF challenges were detected, allowing full content access. From a security perspective, the site enforces HTTPS and employs cookie consent with opt-in and revocation capabilities. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and trust. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, ATR International AG presents a professional, trustworthy online presence aligned with its business objectives. Strategic improvements include publishing a dedicated security policy, incident response contacts, and implementing additional security headers to further strengthen its security posture.

The website www.elite-network.com is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. No actual business content, contact information, or company details are available on the page. The domain WHOIS data is missing or unregistered, which raises concerns about the legitimacy and registration status of the domain. Technically, the site uses Cloudflare as a security and hosting provider, but no further technology stack or CMS is identifiable due to the blocked content. Security posture cannot be fully assessed, but the presence of a WAF challenge indicates some level of protection. Overall, the site lacks transparency, business credibility, and privacy compliance indicators, resulting in a low trust and security score.

A

American Chamber of Commerce in Croatia

amcham.hr

69

The American Chamber of Commerce in Croatia is a well-established non-profit organization founded in 1999, serving as the leading international business advocacy group in Croatia. The website reflects its role as a membership organization providing advocacy, networking events, business delegations, and public policy representation. The content is professionally presented in Croatian and English, targeting business professionals and international companies. The organization maintains a strong market position as a trusted voice for international businesses in Croatia.

T

TOKIĆ d.d.

tokic-alati.hr

54

TOKIĆ d.d. operates the website tokic-alati.hr as an e-commerce platform specializing in tools and service equipment, targeting professional and retail customers primarily in Croatia. The company holds a strong market position as a regional distributor and retailer, offering a broad portfolio of over 20 brands. The website is built on WordPress with WooCommerce, integrating modern analytics and tracking tools such as Google Analytics and Hotjar, and is hosted by POSLUH HOSTING d.o.o. The site demonstrates good digital maturity with responsive design and clear navigation. Security posture is solid with HTTPS enforced and secure form handling, though improvements in security headers and anti-CSRF protections are recommended. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional and trustworthy business presence with clear contact and company information.

T

Tokić d.o.o.

tklub.hr

48

Tokić d.o.o. operates a loyalty program website (TKLUB) targeting automotive professionals and customers in Croatia. The company is a well-established distributor of automotive parts with a strong market presence. The website supports user registration, login, and a points-based reward system, reflecting a mature digital engagement strategy. Technically, the site is built on WordPress with WooCommerce and uses modern frontend libraries such as Swiper and OwlCarousel, indicating a moderate to advanced technical infrastructure. Security posture is solid with HTTPS and secure form handling, though some security headers are missing and no explicit security policies are published. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. WHOIS data confirms the legitimacy and consistency of the domain registration with the business location and operations. Overall, the website is professional, trustworthy, and well-aligned with the business goals.

T

Tokić

autocheckcenter.hr

47

Auto Check Center - Tokić is a well-established automotive service network operating multiple service centers across Croatia. The company offers comprehensive vehicle servicing, repairs, diagnostics, and related automotive services, targeting vehicle owners seeking professional and reliable maintenance solutions. The website reflects a mature digital presence with detailed service descriptions, multiple locations, and integration of modern web technologies such as WordPress, Yoast SEO, and Google Maps API. Security posture is strong with HTTPS, security headers, and use of reCAPTCHA for forms, though privacy and cookie policies are missing, representing a compliance gap. Overall, the business demonstrates high credibility and trustworthiness in its sector.

C

Centar Velike Zvijeri

centar-velikezvijeri.eu

40

Centar Velike Zvijeri is a Croatian public institution visitor center dedicated to the education and conservation of large carnivores in the Gorski kotar region. The center operates under EU-funded projects and regional partnerships, providing educational services, research dissemination, and public engagement. The website is professionally designed using WordPress with modern plugins and offers bilingual content in Croatian and English. Technically, the site is well-structured, mobile-optimized, and integrates Google Tag Manager and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and some best practices, though it lacks explicit security policies and vulnerability disclosures. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and serves its niche audience effectively.

P

Posit

quarto.org

58

Quarto.org is the official website for Quarto, an open source scientific and technical publishing system that supports multiple programming languages including Python, R, Julia, and JavaScript. The platform enables users to author and publish high-quality, reproducible documents such as articles, books, websites, and presentations in various formats. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It targets data scientists, researchers, and technical authors seeking advanced publishing tools integrated with popular data science languages. The business is backed by Posit, a reputable company in the data science ecosystem, indicating a solid market position and credibility. Technically, the website employs modern web technologies including Bootstrap for responsive design, Algolia for search functionality, and various JavaScript libraries for enhanced user experience. It integrates with platforms like Jupyter and RStudio, reflecting a mature and well-supported technical infrastructure. Performance and mobile optimization are excellent, and SEO practices are well implemented. Hosting and domain registration are stable and consistent with the business identity. From a security perspective, the site uses HTTPS with a good SSL configuration and domain-level protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and security headers are not visibly implemented, which could be improved. There is no explicit security policy or incident response information publicly available. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, Quarto.org presents a trustworthy, professional, and technically sound web presence for a specialized technical publishing product. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and security posture further.

B

Byrokratova přísaha

byrokrates.cz

42

Byrokratova přísaha is a Czech language blog focused on public policy, governance, and innovation topics primarily targeting professionals and academics interested in government and public administration. The website operates on WordPress CMS hosted by Wedos, using common plugins such as Jetpack and Google Analytics for analytics and performance. The content is well-structured and relevant, with a moderate level of technical implementation and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No contact information or formal business credentials are provided, indicating a small-scale informational blog rather than a commercial enterprise. Overall, the website is safe, trustworthy, and provides valuable content for its niche audience.

I

Interreg MED Programme

interreg-med.eu

48

The Interreg MED Programme website represents a European transnational cooperation initiative focused on sustainable growth in the Mediterranean region. It serves as an information and project support portal for 13 European countries collaborating on innovative and resource-conscious projects. The site targets public sector entities, project partners, and stakeholders involved in regional development. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo and a robust cookie consent mechanism. Security posture is solid with HTTPS and RSA encryption for login forms, though it lacks explicit published security policies and advanced HTTP headers. Overall, the site is professional, well-structured, and trustworthy, with a clear focus on transparency and compliance. Strategic recommendations include enhancing security disclosures and incident response readiness to further strengthen trust and compliance.

B

Beli Visitor Centre

belivisitorcentre.eu

41

Beli Visitor Centre is a specialized non-profit organization focused on the conservation and rehabilitation of griffon vultures in Cres, Croatia. The center provides educational exhibits, workshops, volunteer programs, and operates a rehabilitation facility for these birds. It serves both local visitors and international nature enthusiasts, positioning itself as a key regional conservation hub. The website is professionally designed using WordPress, with good mobile optimization and accessibility features, reflecting a mature digital presence. Security measures include HTTPS and Google reCAPTCHA, though some improvements in security headers and privacy compliance are recommended. Overall, the site is trustworthy and well-aligned with its mission, with clear contact information and partner affiliations.

SGS is a globally recognized leader in testing, inspection, and certification services, with a dedicated website for its Greece operations. The company positions itself as the world's leading provider in its sector, targeting a broad audience requiring quality assurance and compliance services. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the site leverages modern frameworks such as Next.js and Tailwind CSS, and integrates multiple Google Tag Manager scripts for analytics and marketing purposes, indicating a mature digital infrastructure. However, the absence of visible privacy and cookie policies, as well as missing WHOIS data, limits the assessment of compliance and domain legitimacy. Security posture is moderate with no detected security headers or explicit security policies, suggesting room for improvement in hardening the website. Overall, the site is accessible, safe, and professional but would benefit from enhanced transparency and security measures.

B

Bureau Veritas

bureauveritas.hr

66

Bureau Veritas Croatia is a local branch of the global Bureau Veritas group, a leader in testing, inspection, and certification services since 1828. The website presents a professional and comprehensive overview of their services across multiple industries including energy, transport, manufacturing, finance, and government sectors. The company targets businesses requiring compliance and certification services, offering a broad portfolio including management system certification, product certification, inspection, and training. Technically, the website is built on Drupal 10, uses modern consent management tools, and integrates Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policy and incident response information are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.