Security Directory

S

Práce, která vás posune vpřed | StartupJobs.cz

startupjobs.cz

41

StartupJobs.cz is an online job portal specializing in startup job opportunities within the Czech Republic. The platform targets job seekers interested in the startup ecosystem and startups looking to recruit talent. The business model revolves around providing a niche job board service connecting startups and candidates. The website's content and design are basic but functional, focusing on relevant job listings and career advancement in the startup sector. Technical infrastructure includes modern JavaScript frameworks such as Nuxt.js, and analytics tools like Matomo and Google Tag Manager, indicating a moderate level of digital maturity. However, the absence of WHOIS data and registrant information limits the ability to fully verify domain legitimacy. Security posture shows room for improvement, with no detected security headers and unknown SSL configuration. Privacy compliance is weak, with no visible privacy or cookie policies. Overall, the website appears legitimate and safe for general audiences but would benefit from enhanced security and compliance measures.

R

Reticulum

reticulum.eu

57

Reticulum is a well-established investment company focused on real estate, agriculture, food, and technology sectors. With over 33 years of market presence and operations spanning 11 countries, it offers investment opportunities and business support including mentorship. The company maintains offices in Prague and Olomouc, Czech Republic, and showcases a diverse portfolio of subsidiaries and partner companies. The website reflects a professional and consistent brand image with comprehensive business information and clear contact details. Technically, the website employs modern web technologies including Alpine.js, Google Tag Manager, and YouTube iframe API, ensuring a fast, mobile-optimized, and accessible user experience. SEO and structured data are well implemented, enhancing discoverability and content clarity. Analytics usage is moderate with privacy compliance evidenced by GDPR and cookie policies with consent mechanisms. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The domain registration aligns well with the business claims, enhancing trustworthiness. Overall, Reticulum's digital presence is strong, professional, and secure with minor recommendations to enhance security headers and incident response transparency. The risk profile is low, supporting its credibility as a reputable investment firm.

P

Panattoni Development Europe sp .z o.o.

panattoni.cz

64

Panattoni Development Europe sp .z o.o. is a leading industrial real estate developer in Europe, with a strong presence in the Czech Republic since 2007. The company specializes in logistics and industrial property development, offering comprehensive services including project design, construction, capital investment, and property management. Their market position is reinforced by recognized sustainability certifications such as BREEAM and LEED, and a portfolio of high-profile clients like Amazon and DHL. The website reflects a mature business with a clear focus on sustainability and investor relations. Technically, the website employs modern web technologies including Google Tag Manager for analytics and Sentry for error monitoring, hosted behind Cloudflare DNS services. The site is well-optimized for mobile devices, has good SEO practices, and includes a comprehensive cookie consent mechanism compliant with GDPR, CCPA, and LGPD. The domain age and WHOIS data align with the company's claimed history, enhancing trustworthiness. From a security perspective, the site uses HTTPS with a clientTransferProhibited domain status, indicating domain transfer protection. However, DNSSEC is not enabled, and security headers are not explicitly detected in the provided data, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found in the content. Privacy policies and cookie consent are well implemented, supporting compliance. Overall, the website presents a professional, trustworthy, and compliant digital presence for a large real estate developer. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and adding a vulnerability disclosure program to further enhance security posture and stakeholder trust.

N

Nadace O2

nadaceo2.cz

52

Nadace O2 is a well-established corporate foundation affiliated with the telecommunications operator O2, operating since 2006. The foundation focuses on supporting the younger generation, providing technology for community benefit, and engaging O2 employees in social activities. It holds a strong market position in the Czech Republic's non-profit sector with a medium-sized organizational footprint. The website reflects a professional and modern digital presence, leveraging contemporary web technologies such as Alpine.js, Google reCAPTCHA, and a consent management platform to ensure compliance and user experience. Security posture is robust with HTTPS enforcement and privacy compliance mechanisms in place, although explicit security headers could be further verified. Overall, the site demonstrates high trustworthiness and professionalism with clear business information and active social media engagement.

M

Masarykova univerzita

muni.cz

67

Masarykova univerzita is a prominent public university based in Brno, Czech Republic, offering a wide range of educational programs including bachelor, master, doctoral, and lifelong learning. The website reflects a mature digital presence with comprehensive content targeting prospective students, researchers, academic staff, and the general public. It maintains a consistent brand identity and provides multiple official channels for engagement including social media and partner sites. The technical infrastructure leverages modern analytics and tracking tools such as Matomo, Microsoft Clarity, and Google Analytics, integrated via Google Tag Manager, ensuring effective data collection and user behavior insights. The site is well-optimized for mobile and accessibility, with clear navigation and professional design.

N

NEXTERA tech s.r.o.

anything.cz

65

NEXTERA tech s.r.o. is a Czech technology company specializing in digital transformation solutions for manufacturing firms. Their offerings include custom enterprise information systems, mobile and web application development, production technology measurement, asset inventory management, and data analytics. The company targets manufacturing businesses seeking automation and digitalization to improve efficiency and competitiveness. The website demonstrates a mature digital presence with modern technologies such as React, Node.js, and Docker, and is well optimized for mobile devices. Security posture is good with HTTPS and cookie consent mechanisms in place, though some security headers and policies are not explicitly published. The absence of WHOIS data is a notable gap that impacts domain trustworthiness, but the detailed contact information and client references support legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR requirements.

R

represent.network

represent.network

53

Represent.network is a niche online platform dedicated to highlighting the work of BPOC and (post)migrant visual communicators living and working in Germany. The website serves as a cultural and creative network, providing visibility and connection opportunities for this community. The platform uses modern web technologies including Vue.js and Nuxt.js, and employs privacy-focused analytics via Plausible. The site is accessible and uses HTTPS, but lacks comprehensive contact information, cookie consent mechanisms, and security headers, which are areas for improvement. The WHOIS data is privacy protected, which is common for small niche sites but limits transparency. Overall, the site is functional and safe but could enhance trust and compliance by improving security and privacy features.

M

Mathias Krebser

mathiaskrebser.de

55

Mathias Krebser operates a professional portfolio website showcasing multidisciplinary visual art services including graphic design, video/animation, and illustration. The site targets a general audience interested in creative visual arts and is positioned as an independent artist from Stuttgart, Germany. The business model appears to be service and portfolio presentation oriented, with an additional shop hosted externally on Squarespace. The website is well-branded and consistent in design, reflecting a small creative business.

The website deutscheurlauber.eu serves as a news aggregation platform focusing on incidents involving German tourists and cruise ships, particularly highlighting tragic maritime events and migration-related news. The site compiles headlines and links from various reputable German news outlets, targeting a general audience interested in these topics. The business model appears to be informational, without direct commercial services or e-commerce functionalities. Technically, the site employs modern web technologies including ES modules and CSS, delivering a moderately optimized and mobile-friendly experience. However, it lacks advanced SEO and accessibility features. From a security perspective, the site is accessible without WAF or blocking mechanisms but shows significant gaps. There is no evidence of HTTPS enforcement or security headers, no privacy or cookie policies, and no contact or incident response information. These deficiencies reduce the site's trustworthiness and compliance posture. No analytics or advertising scripts were detected, indicating minimal user tracking. The WHOIS data shows the domain is registered via a reputable registrar but lacks detailed registrant information, which slightly impacts legitimacy assessment. Overall, the site provides relevant and well-structured content but requires improvements in security, privacy compliance, and business transparency to enhance trust and professional standing. The risk level is moderate due to missing security best practices and lack of user data protection disclosures.

P

Prose London

prose.london

60

Prose London is a small, London-based full-service creative agency and publishing house specializing in identity and culture. The website presents a professional and visually appealing design, targeting creative professionals and businesses seeking branding and creative services. The technical infrastructure leverages modern technologies such as SvelteKit, Sanity CMS, and is hosted on Vercel, ensuring fast performance and good mobile optimization. Analytics are implemented via Plausible Analytics, reflecting a privacy-conscious approach with minimal user tracking. Security posture is generally good with HTTPS enforced and no exposed sensitive data; however, the absence of security headers and security policy documentation indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the website is legitimate and trustworthy but would benefit from enhanced privacy and security transparency.

K

Kobalt Music Group

kobaltmusic.com

64

Kobalt Music Group operates as a global music rights management and services company focused on empowering creators through creative A&R, sync licensing, payment administration, and transparency enabled by technology. The website reflects a mature digital presence with modern video embedding, a responsive design, and comprehensive privacy and cookie policies. The technical infrastructure leverages Alpine.js, Vimeo, Spotify embeds, and Cookiebot for consent management, indicating a commitment to user experience and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the professional branding and content quality support a trustworthy business profile. Strategic recommendations include enhancing security headers, publishing security policies, and adding contact information to improve transparency and trust.

A

ACRE | A Creative Endeavour Ltd

acre.studio

60

ACRE Studio, operating under A Creative Endeavour Ltd, is a London-based creative design agency specializing in brand identities, motion, and digital design services for forward-thinking clients. The company positions itself as a niche creative studio with a professional and consistent brand presence. The website employs modern frontend technologies such as SvelteKit and integrates privacy-conscious analytics via Plausible. The site is well-optimized for mobile and desktop, featuring rich multimedia content and clear navigation. However, it lacks visible privacy and cookie policies, security headers, and incident response contact information, which are important for compliance and security transparency. The domain WHOIS data is limited due to TLD restrictions and privacy protection, but the website content and structured data support legitimacy. Overall, the site demonstrates a strong digital maturity with room for improvement in privacy and security disclosures.

A

Art for You

artforyou.ch

68

Art for You is a Swiss-based e-commerce business specializing in selling posters and art prints created by Swiss artists. The company emphasizes sustainable and ecological production, targeting art enthusiasts and customers interested in unique Swiss art. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Facebook Pixel and Mailchimp for marketing and analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the business appears legitimate and trustworthy with consistent WHOIS data and a clear market niche.

S

Some Place Studio

someplace.studio

57

Some Place Studio is a small architectural practice operating out of Berlin and Vienna, specializing in buildings, interiors, and exhibitions with a strong commitment to sustainability and cultural engagement. The firm emphasizes collaboration and diversity, positioning itself as a woman-owned business within the German architecture market. Their service offerings include comprehensive architectural design, project management, and construction supervision, targeting clients who value sustainable and contextually aware design solutions. Technically, the website is built on the Cargo CMS platform, utilizing modern web standards and custom typography, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or direct contact details are provided, which may impact user engagement and trust. Overall, the domain appears legitimate with privacy-protected WHOIS data, consistent with the professional nature of the business. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and providing clear contact information to improve compliance and user trust.

D

Dinamo Typefaces

abcdinamo.com

70

Dinamo Typefaces is a Berlin-based specialized type design studio offering a range of retail and bespoke typefaces, design software, research, and consultancy services. The company targets design professionals and clients seeking custom font solutions, positioning itself as a niche player with a strong international presence. The website reflects a professional and modern digital presence with excellent design quality, clear navigation, and mobile optimization. Technically, the site uses modern JavaScript frameworks (Vue.js), lazy loading, and secure HTTPS connections, supported by strong security headers and CSRF protections on forms. However, there is room for improvement in privacy compliance, particularly regarding cookie consent mechanisms and publishing explicit security policies or incident response information. Overall, the security posture is strong with no evident vulnerabilities or exposed sensitive data. The domain registration data is consistent with the business claims, enhancing trustworthiness. Strategic recommendations include enabling DNSSEC, adding cookie consent, publishing security and incident response policies, and establishing a vulnerability disclosure process.

D

Diamond Schmitt

dsai.ca

60

Diamond Schmitt is a well-established architecture firm founded in 2001, specializing in designing cultural, educational, and research facilities. The company has a strong market position with a portfolio of notable projects and serves clients primarily in Canada and the United States. Their website reflects a professional and consistent brand image, targeting institutional clients and stakeholders seeking architectural services. Technically, the website is built on WordPress with modern JavaScript libraries and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain registration transparency, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy compliance is basic, with no clear cookie consent mechanism or detailed privacy policy found. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

L

Lever Architecture

leverarchitecture.com

67

Lever Architecture is a professional architectural design firm operating primarily in Portland, Oregon, and Los Angeles, California. The company offers architectural, interior design, and research services, targeting clients seeking innovative and impactful building solutions. Their market position is supported by a mature domain age and media recognition for notable projects, indicating a stable and reputable presence in the architecture sector. Technically, the website employs modern web technologies including JavaScript, Turbolinks, and Google Analytics for tracking. The hosting infrastructure leverages Google Cloud DNS services, and the site is secured with HTTPS and CSRF protections. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. From a security perspective, the site demonstrates a solid baseline with HTTPS and CSRF tokens but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent banner and privacy policy present but no explicit GDPR compliance statements or data retention policies. Overall, the website is professional, trustworthy, and secure for its business purpose. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and user trust.

Stiftung Buchkunst is a well-established non-profit organization based in Germany that promotes exemplary book design through prestigious competitions such as 'Die Schönsten Deutschen Bücher', 'Förderpreis für junge Buchgestaltung', and 'Best Book Design from all over the World'. The organization targets the book industry, designers, publishers, and the general public interested in book arts. Their business model centers on cultural promotion and recognition of design excellence rather than commercial sales. The website reflects a mature digital presence with clear navigation, multilingual support, and a focus on content quality. Technically, the site uses standard web technologies with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. Overall, the site is trustworthy and professional, with transparent contact information and GDPR compliance.

Affichage Public is a small Swiss cultural association founded in 2015 dedicated to promoting Swiss graphic design as a cultural heritage through exhibitions and events primarily in the French-speaking region of Switzerland. The website serves as an informational platform highlighting upcoming exhibitions, partner organizations, and the association's mission. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with jQuery, without advanced CMS or analytics integrations. Mobile optimization and accessibility are basic but functional. Security posture is minimal with no visible security headers or policies, and no HTTPS verification data available. Privacy and cookie policies are absent, which impacts compliance and user trust. The WHOIS data is consistent with the association's profile, showing no privacy protection and appropriate domain age. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

N

Netflix

netflix.com

75

Netflix is a leading global streaming entertainment service offering unlimited films, series, and more via subscription. The website targets a general audience in Finland with localized language options and provides a seamless user experience for streaming content across multiple devices. The business model is subscription-based, positioning Netflix as a dominant player in the media industry with a strong brand presence and consistent global branding. Technically, the site employs modern web technologies including JavaScript and React, with cookie consent managed by OneTrust, ensuring compliance with privacy regulations such as GDPR. The site is well-optimized for mobile and desktop platforms, delivering fast performance and good accessibility. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers and incident response information are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance, though WHOIS data is unavailable likely due to registry restrictions. Strategic recommendations include enhancing transparency around security policies and vulnerability disclosures to further strengthen trust.

G

GitHub

github.blog

71

GitHub Blog is a professionally maintained content platform operated by GitHub, Inc., a leading technology company specializing in software development and collaboration tools. The blog serves as a key communication channel to deliver updates, insights, and educational content to developers worldwide, reinforcing GitHub's market position as a premier developer platform. The site targets software developers, engineers, and technology professionals, offering resources on AI, security, enterprise software, and developer skills. Technically, the website is built on WordPress with modern SEO and accessibility optimizations, ensuring fast performance and a responsive user experience across devices. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and vulnerability disclosure mechanisms are not prominently published on the blog. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website demonstrates high business credibility, technical maturity, and content quality, supporting GitHub's brand and community engagement objectives.

G

GitHub

githubuniverse.com

60

GitHub Universe 2025 is a flagship global developer event hosted by GitHub, a leading technology company and subsidiary of Microsoft. The event focuses on innovation, collaboration, and AI-powered software development, targeting developers, engineers, and technology professionals worldwide. The website provides comprehensive event details including dates, location, agenda, speakers, ticketing options, and highlights from previous years. The business model centers on ticket sales for in-person attendance and free virtual participation, positioning GitHub Universe as a premier industry event with strong brand recognition and market presence. Technically, the website is built using modern web technologies such as React and Next.js, ensuring fast performance, mobile optimization, and good accessibility. The site is hosted with reputable DNS and registrar services, and employs HTTPS with strong domain registration security flags. However, there is room for improvement in DNS security (DNSSEC not enabled) and in publishing comprehensive privacy and security policies. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and domain locking. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of explicit privacy, cookie, and security policies, as well as contact information for incident response, represents a compliance gap that should be addressed to enhance trust and regulatory adherence. Overall, GitHub Universe 2025's website is professional, trustworthy, and technically sound, supporting its role as a major industry event. Strategic improvements in privacy compliance and security transparency will further strengthen its security posture and user confidence.

P

Programming Language Group at Delft University of Technology

webdsl.org

57

WebDSL is an academic project developed by the Programming Language Group at Delft University of Technology, providing a domain-specific language for modeling web applications with a rich data model. The website serves as a documentation hub with tutorials, references, and source code links, targeting developers and researchers interested in domain-specific languages and web application modeling. The project is positioned as a niche academic tool with a small but focused audience. Technically, the site is built using MkDocs with the Material theme, hosted likely on GitHub Pages, and employs modern web standards including HTTPS and responsive design. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks DNSSEC and security headers which could enhance protection. Privacy compliance is minimal with no visible privacy or cookie policies and no contact information for incident response or data protection officers. Overall, the site is trustworthy and professional for its academic purpose but could improve compliance and security transparency.

T

Team Tito

tito.io

61

Tito is a small technology company offering a simple and powerful event registration software platform. Their website presents a professional and modern design focused on event organizers seeking fast and flexible ticketing solutions. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js and BootstrapVue, with deferred script loading and privacy-conscious analytics integration. Security posture is adequate with HTTPS enforced and minimal tracking, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the website is functional and trustworthy but would benefit from enhanced transparency and security documentation.

L

LaunchDarkly

launchdarkly.com

77

LaunchDarkly is a leading feature management platform founded in 2014, providing developers and enterprises with tools to safely deliver software through feature flags, experimentation, and AI-driven configurations. The company positions itself as a critical enabler for modern software delivery, emphasizing reliability, automation, and data-driven decision making. Their platform integrates deeply into developer workflows and supports a wide range of SDKs and integrations, targeting developers, DevOps, SREs, and product managers. Technically, the website leverages modern frameworks such as Gatsby and React, hosted on Netlify with AWS DNS, and employs comprehensive analytics and marketing tools including Segment, Google Analytics, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and reputable third-party services, though explicit security headers could be more visible. The WHOIS data confirms domain legitimacy with consistent registration details and a long-term expiry. Overall, the site demonstrates high professionalism, technical maturity, and compliance readiness.

The website younesklouche.com serves as a personal portfolio for photographer Younès Klouche, showcasing photographic projects under categories such as 'Personnal' and 'Comissions'. The site targets a general audience interested in photography and artistic commissions. The business model is primarily personal branding and portfolio display, with no direct e-commerce or transactional features evident. The domain is registered since 2017 with OVH sas, a reputable hosting and registrar provider, indicating a stable and legitimate online presence. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for UI elements. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism or privacy policies are present, which is a compliance gap. The site is hosted on OVH infrastructure with basic SSL configuration and no DNSSEC enabled. Performance and mobile optimization are basic but functional. From a security perspective, the site uses HTTPS but lacks security headers such as Content-Security-Policy or X-Frame-Options, which could improve protection against common web attacks. No vulnerability disclosures or incident response contacts are provided. The absence of privacy and cookie policies and lack of GDPR compliance indicators reduce trust and compliance posture. No suspicious or malicious content was detected. Overall, the website is a straightforward personal portfolio with moderate technical implementation and basic security posture. Strategic improvements include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and enhancing GDPR compliance. These steps will improve trustworthiness, security, and legal compliance, benefiting both the site owner and visitors.

S

SavvyCal, Inc.

savvycal.com

68

SavvyCal, Inc. operates a professional SaaS scheduling platform designed to simplify meeting bookings for individuals and teams. The company positions itself as a niche player with innovative features such as calendar overlays, team scheduling modes, and round robin scheduling. Their market focus is on professionals and teams seeking efficient and user-friendly scheduling solutions. The website reflects a mature digital presence with modern technologies including Inertia.js, Cloudflare CDN, Stripe for payments, and privacy-conscious analytics via Fathom. Security is well-implemented with HTTPS, security headers, and CSRF protections, although DNSSEC is not enabled. Privacy policies and terms of service are comprehensive and GDPR compliant, supporting trust and compliance. Overall, the site is professional, fast, and user-friendly, with strong branding and clear business information.

D

Diplom-Designer Jonas List

jonaslist.de

48

Jonas List operates as a freelance communication designer and full stack web developer based in Germany, specializing in creative coding and advanced web technologies such as WebGL and Web 3D. The business targets clients seeking innovative and boundary-pushing web design solutions. The website serves as a professional portfolio showcasing selected projects and providing clear contact information. Technically, the site is built using modern frameworks like Next.js and React, hosted behind Cloudflare DNS services, and includes minimal but effective analytics via plausible.io. The design is responsive and user-friendly, with good content relevance and navigation clarity. Security posture is moderate, with HTTPS implied but no explicit security headers detected, and no privacy or cookie policies present, indicating compliance gaps. Overall, the site is legitimate and professional but would benefit from enhanced security and privacy measures.

H

Handshake®

handshake.fun

51

Handshake® is a small creative media and publishing studio based in Spain, specializing in artistic publications and studio projects. The website showcases their key publication 'The Chromatics of Flowers' by Paula Codoner and offers e-commerce capabilities for book sales. The business targets art enthusiasts and creative professionals, positioning itself as a niche player in the media industry. Technically, the website is built on the Cargo Collective platform, utilizing modern web technologies including JavaScript frameworks and analytics tools. The site is mobile-optimized and presents a professional design with good user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security hardening are recommended.

M

Marc Morro

marcmorro.com

61

Marc Morro is a professional furniture designer based in Barcelona, specializing in creative and commissioned/custom furniture design. The website serves as a portfolio showcasing various furniture projects and collections, targeting individuals and galleries interested in unique designer furniture. The site is built using modern web technologies such as SvelteKit, ensuring a fast, mobile-optimized, and accessible user experience. However, the absence of WHOIS data raises concerns about the domain's registration legitimacy, which impacts overall trust. Security posture is moderate with HTTPS implied but lacking security headers and formal privacy or cookie policies. Contact information is clearly provided, enhancing business credibility.

Tiro Typeworks is a specialized digital type foundry founded by John Hudson and Ross Mills, focusing on creating custom fonts for multilingual publishing and computing. The company operates a professional and well-structured website showcasing a broad catalog of fonts, articles, and licensing information. Their market position is that of a niche player with international reach, serving publishers, typographers, and scholars. The business model revolves around font licensing and custom font creation, targeting a specialized audience in the technology and publishing sectors. Technically, the website is built on Craft CMS and employs modern web technologies including JavaScript, CSS, and HTML5. It uses Cloudflare Turnstile captcha for form security and Fathom Analytics for privacy-conscious visitor tracking. The site is mobile-optimized, SEO-friendly, and performs well with fast loading times and good accessibility features. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy, though no cookie consent mechanism was found. Contact information is limited to a subscription form, with no direct emails or phone numbers publicly listed. Overall, the website is trustworthy and professional, though the absence of WHOIS data for the domain reduces domain registration transparency and slightly impacts trust. Strategic improvements include adding security headers, publishing security and incident response policies, and implementing cookie consent to enhance privacy compliance.

exljbris.com is the official website of exljbris Font Foundry, owned by Jos Buivenga, specializing in font design and distribution. The site offers a portfolio of proprietary fonts including free and commercial options, targeting graphic designers and typographers. The business operates as a small niche foundry with a long-established domain since 2007, indicating stable market presence. Technically, the website uses legacy font replacement technologies such as Cufon and SIFR, alongside JavaScript libraries like Prototype.js and Scriptaculous. Hosting is provided via Argewebhosting, with moderate performance and basic mobile optimization. SEO and accessibility features are minimal, reflecting a dated technical infrastructure. Security posture is basic with no DNSSEC, no visible security headers, and mixed content loading (http and https). The domain is protected against unauthorized transfers but lacks modern security enhancements. Privacy compliance is weak, with no privacy or cookie policies and moderate user tracking via StatCounter and Google Analytics without clear disclosures. Overall, the website is functional and moderately trustworthy but requires modernization in security, privacy compliance, and technical implementation to improve user trust and regulatory adherence.

H

HvD Fonts

hvdfonts.com

64

HvD Fonts is a specialized type foundry offering high-quality original retail fonts and custom font solutions. The company targets designers and businesses seeking professional typography products. Their website reflects a niche market position with a clear business model focused on font licensing and custom typeface design. The digital infrastructure employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for performance and marketing insights. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

V

Visualio s.r.o.

visualio.space

46

Visualio s.r.o. is a Czech-based creative studio specializing in brand design, web development, and advertising campaigns. Established in 2015, the company serves businesses seeking to build successful brands, demonstrated by a strong portfolio and client testimonials from reputable companies. The website is professionally designed, multilingual, and optimized for modern devices, reflecting a mature digital presence. Technically, the site employs modern JavaScript frameworks like Alpine.js, integrates Google Analytics, Tag Manager, reCAPTCHA, and Smartlook for analytics and security. Security posture is solid with HTTPS and bot protection, though lacks some advanced security headers and published policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies or consent mechanisms. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, Visualio presents a trustworthy and professional digital footprint with room for improvement in privacy and security transparency.

D

Datamart Inc.

komito.net

57

Komito Analytics is an open-source enhancement tool designed to augment popular web analytics software, providing advanced visitor behavior metrics and integration support. The company behind it, Datamart Inc., is a small technology firm based in the United States, founded in 2017. The website presents a professional and consistent brand image, emphasizing transparency and community engagement through open-source code availability and partner collaborations. Technically, the site leverages modern web standards, Cloudflare hosting, and offers multiple integration methods including Google Tag Manager, WordPress plugin, and NPM package. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Privacy compliance is basic, lacking explicit privacy and cookie policies, which should be addressed to enhance user trust and regulatory adherence. Overall, the website is trustworthy, well-structured, and serves a niche market of analytics professionals and digital marketers.

W

Wine Industry Network

winesalessymposium.com

56

The Wine Sales Symposium website represents a well-established annual event focused on providing wineries with expert insights and strategies to increase sales and profitability. The event is produced by the Wine Industry Network, a recognized entity in the wine industry, and targets professionals such as winery owners, marketing executives, and sales professionals. The site offers comprehensive event details, sponsor information, and registration options, positioning itself as a premier industry gathering. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted with Cloudflare DNS and GoDaddy registrar. While the site uses HTTPS and standard security practices, it lacks visible security headers and a cookie consent mechanism, which are areas for improvement. Overall, the website is professional, content-rich, and trustworthy, with moderate tracking and marketing integrations.

W

Wine Industry Careers

wineindustrycareers.com

68

Wine Industry Careers operates as a specialized online job board dedicated to connecting talent and employers within the wine industry. The platform offers job listings, company profiles, candidate profiles, educational resources, and industry news, targeting professionals and businesses in the wine sector. The website is professionally designed with clear navigation and a consistent brand presence, supporting a niche market position. Technically, the site leverages modern web technologies including Bootstrap, Google reCAPTCHA, Stripe for payments, and CDN hosting via Amazon Cloudfront, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain registration locks in place, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and credible but would benefit from enhanced privacy and security measures.

W

Waiting Room Press

waitingroom.press

45

Waiting Room Press is a small UK-based creative publishing business specializing in artistic calendars, zines, and printed media with botanical and brutalist themes. The company operates an e-commerce website built on the Cargo Collective platform, offering direct sales of its unique print products worldwide. The website demonstrates good content quality and a consistent brand presence, targeting art enthusiasts and collectors. Technically, the site uses modern web technologies including JavaScript and jQuery, with Stripe integrated for payment processing. However, there are gaps in privacy compliance and security best practices, such as the absence of privacy and cookie policies and missing security headers. The domain registration is consistent and transparent, supporting the legitimacy of the business. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

Big Cartel is a specialized e-commerce platform designed to empower artists and small businesses to create and manage online stores with ease. The company offers a tiered pricing model starting with a free plan, targeting a niche market of creative entrepreneurs. The website demonstrates a strong market position within the e-commerce sector by providing customizable templates, product management tools, and integrated payment options tailored for small-scale sellers. Technically, the site leverages modern web technologies such as React and Next.js, ensuring fast performance, mobile responsiveness, and good SEO practices. Security is robust with HTTPS enforcement and comprehensive security headers, although there is room for improvement in public security policy disclosures and incident response visibility. Overall, the site is professional, trustworthy, and well-optimized for its target audience, though the lack of publicly available WHOIS data introduces some uncertainty regarding domain registration details.

RRQ88 operates as an online gambling affiliate site focused on promoting slot games and related services primarily targeting the Indonesian market. The website claims to be a leading and trusted source for slot gaming links and live RTP updates, positioning itself as a top player in the local gambling affiliate niche. The business model revolves around providing access and information to slot game players, leveraging affiliate marketing and VIP access offerings. The site content and branding are basic but moderately consistent, with a strong emphasis on gambling-related keywords and user reviews indicating high engagement.

The website matteovenet.org is a personal portfolio site for an individual named Matteo Venet, primarily showcasing visual projects or artworks. The site is built on WordPress and uses standard web technologies such as JavaScript, CSS, and HTML5. The technical infrastructure is basic but functional, with HTTPS enabled and a moderate performance profile. However, the site lacks key compliance and security features such as privacy and cookie policies, security headers, and contact information. No analytics or tracking tools are present, indicating minimal user data collection. The domain registration is consistent with the website content and shows no suspicious patterns, supporting legitimacy. Overall, the site is suitable for general audiences with safe content but would benefit from improved security and compliance measures.

P

Projector Media

projector.media

55

Projector Media is a small creative and digital media agency specializing in branding, multi-page publications, and periodicals. The website showcases a portfolio of projects, targeting creative professionals and businesses seeking media services. The technical infrastructure is based on the Readymag platform, leveraging custom fonts and a CDN for content delivery. The site is mobile optimized and provides a visually rich user experience, although SEO and accessibility features are basic. Security posture is limited, with no detected security headers or explicit policies, and WHOIS data is privacy protected, which is common for small agencies. Overall, the site is professional but could improve in privacy compliance and security best practices.

1

100 Beste Plakate e. V.

100-beste-plakate.de

43

100 Beste Plakate e. V. is a German non-profit organization that organizes an annual competition showcasing the 100 best posters of the year. The website serves as a platform to present competition winners, exhibitions, and related publications. It targets design professionals, artists, cultural institutions, and the general public interested in graphic design and poster art. The organization maintains a recognized position in the cultural and media sector in Germany with international outreach through exhibitions. Technically, the website is built on WordPress using a custom theme, with modern HTML5, CSS3, and JavaScript technologies. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks advanced security headers and formal security policies. No vulnerabilities or exposed sensitive data were found in the provided content. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is minimal, with no direct emails or phone numbers visible, which may impact user trust. Overall, the website is professionally designed and trustworthy for its cultural purpose, but improvements in security policies, privacy mechanisms, and contact transparency would enhance its risk posture and user confidence.

Alex Dujet Type System Corp is a specialized graphic and type design studio based in Geneva, Switzerland, founded in 2015. The company focuses on visual communication, editorial, and type design services, and co-founded the Extraset Swiss Type Foundry. The website serves as a portfolio showcasing extensive design projects, exhibitions, and collaborations with notable design entities. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Google Analytics, hosted by Infomaniak Network SA. While the site is functional and professionally designed, it lacks privacy and cookie policies, and DNSSEC is not enabled on the domain. The domain WHOIS data shows a future creation date, which is inconsistent with the business history and may require verification. Security headers are not detected, and no incident response or vulnerability disclosure information is provided. Overall, the website is moderately secure and credible but would benefit from improved privacy compliance and enhanced security configurations.

E

East Side Studio

eastsidestudiolondon.co.uk

66

East Side Studio is a small UK-based e-commerce business specializing in affordable modern art prints, supporting independent artists with framed and unframed options and global shipping. The website is built on the Shopify platform, leveraging a modern tech stack with integrations for marketing, analytics, and user engagement tools. The technical infrastructure is solid with good mobile optimization and performance, though some accessibility features could be improved. Security posture is good with HTTPS and some anti-copy protections, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

D

DWX Developer World

dotnet-developer-conference.de

56

DWX Developer World is a well-established media and event organization specializing in the .NET developer community, hosting the annual .NET Developer Conference (DDC) in Cologne. The company offers a comprehensive program of workshops, sessions, and networking opportunities targeting professional developers focused on Microsoft technologies. Their market position is strong within the German-speaking developer ecosystem, supported by a professional website and clear branding. Technically, the website employs modern web technologies including Google Tag Manager, Usercentrics for consent management, and responsive design, ensuring good performance and accessibility. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

G

GitNation

c3fest.com

62

C3 Fest is a contemporary software engineering and design festival organized by GitNation, targeting developers, QA professionals, and UX researchers globally. The event focuses on career advancement, networking, and showcasing innovative tech ideas with a strong lineup of industry-leading speakers. The website demonstrates a high level of professionalism with excellent content quality, mobile optimization, and user experience. Technically, it leverages modern JavaScript frameworks, Cloudflare DNS, and integrates multiple marketing and analytics tools, ensuring good performance and scalability. Security posture is solid with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to improve trust and regulatory adherence. Overall, the site is trustworthy and well-positioned in the tech event market, but could enhance transparency and security documentation.

G

GitHub, Inc.

gh.io

65

GitHub, Inc. operates one of the world's leading developer platforms, providing a collaborative environment for millions of developers and businesses globally. The platform offers a comprehensive suite of tools including code hosting, code review, CI/CD automation, security scanning, and AI-powered coding assistance. As a Microsoft subsidiary, GitHub holds a strong market position with enterprise-grade services and a vast open source community. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding. Technically, GitHub's website leverages modern web technologies such as React and Turbo, hosted on AWS infrastructure with Contentful CMS integration. The site demonstrates fast performance, mobile optimization, and good accessibility standards. Security practices are robust, with HTTPS enforced, multiple security headers, and secure form handling. Minor improvements such as enabling DNSSEC could further enhance DNS security. The security posture is strong, supported by certifications like ISO 27001 and SOC 2, and a clear incident response framework with dedicated security contact channels. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. No critical vulnerabilities or suspicious indicators were found during analysis. Overall, GitHub's website and domain registration details confirm a legitimate, enterprise-grade platform with high trustworthiness. Strategic recommendations include enabling DNSSEC, continuous dependency auditing, and enhanced transparency on data retention to maintain leadership in security and compliance.

European Architectural Supply, Inc. is a specialized supplier of high-performance European windows and doors, focusing on energy-efficient building projects such as Passive House and Net Zero Energy constructions. The company has been operating since 2003 and positions itself as a premier North American provider with a strong emphasis on custom craftsmanship and collaboration with architects and contractors. Their product offerings include custom wood, aluminum, and uPVC windows and doors with advanced energy performance features. Technically, the website uses basic HTML, CSS, and JavaScript with an outdated jQuery version and Google Analytics for tracking. The site is hosted behind Cloudflare DNS but lacks modern security headers and cookie consent mechanisms. Performance and mobile optimization are basic, and SEO is minimally addressed through meta keywords and descriptions. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and visible security policies. No privacy or cookie policies are present, and no incident response or vulnerability disclosure information is provided. The WHOIS data indicates a legitimate, long-standing domain registration consistent with the business claims, enhancing trustworthiness. Overall, the website is functional and professional but would benefit from improved privacy compliance, updated technical stack, and enhanced security practices to better protect users and align with modern standards.

R

Rockwool A/S

rockwool.com

61

Rockwool A/S is a well-established enterprise specializing in stone wool insulation products, a critical component in fire-resilient and energy-efficient buildings. Founded in 1909 and headquartered in Denmark, the company targets construction professionals and end users seeking high-quality insulation solutions. The website reflects a mature digital presence with comprehensive content, consistent branding, and clear business messaging. Technically, the site employs modern web technologies including JavaScript frameworks, marketing automation via Marketo, and cookie management through Cookiebot, ensuring a responsive and performant user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and a public security policy page suggests room for improvement. The lack of WHOIS data for the domain introduces some uncertainty, but the overall professionalism and trust indicators mitigate this concern. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.