Security Directory

L

Le Pharmachien

lepharmachien.com

40

Le Pharmachien is a well-established French-language health and medical information website operated by Olivier Bernard, a pharmacist. It provides high-quality, evidence-based content including articles, podcasts, books, and conferences targeting French-speaking audiences interested in health, nutrition, and medical skepticism. The website is hosted on Bluehost and built on WordPress, utilizing common plugins for SEO and user experience enhancements. The technical infrastructure is modern and supports good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. No direct contact information or incident response channels are provided, which limits transparency. Overall, the site is professional and trustworthy but would benefit from improved privacy and security practices.

L

La Quadrature du Net

laquadrature.net

50

La Quadrature du Net is a French non-profit organization dedicated to defending fundamental freedoms in the digital realm, focusing on issues such as censorship, surveillance, and digital rights. The website is well-maintained, multilingual, and provides up-to-date content on relevant legislative and social issues. Technically, the site is built on WordPress using modern JavaScript libraries like jQuery, with HTTPS enforced, ensuring secure communications. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website itself appears legitimate and professional. Security practices are generally good, but the lack of security headers and cookie consent mechanisms indicate areas for improvement. Overall, the site serves its advocacy mission effectively but could enhance trust and compliance by addressing these gaps.

Jan.ai is an open-source AI chat platform developed by Grit Labs, offering a privacy-focused alternative to ChatGPT by running AI models entirely offline on users' devices. The platform targets privacy-conscious users and AI enthusiasts who prefer local AI processing without data exposure. With over 3.5 million downloads and a strong GitHub presence, Jan.ai has established itself as a niche player in the AI technology sector. Technically, the website leverages modern frameworks such as Next.js and React, hosted behind Cloudflare DNS, ensuring fast performance and good mobile optimization. Security posture is strong with HTTPS enforced and multiple security headers present, though DNSSEC is not enabled. However, the site lacks explicit privacy and cookie policies, as well as contact information and formal security policies, which are areas for improvement. Overall, Jan.ai presents a trustworthy and professional digital presence with room to enhance compliance and transparency.

Finska Missionssällskapet is a Finnish non-profit mission society focused on humanitarian aid, mission work, development cooperation, and peace efforts in over 20 countries. The organization positions itself as a major actor in Finland's development cooperation sector and serves congregations and donors interested in global mission and aid. The website is professionally designed using WordPress with modern SEO and accessibility features, supporting multiple languages and active social media engagement. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and terms policies are missing. The WHOIS data confirms legitimacy with consistent registrant information matching the organization's identity. Overall, the site is trustworthy and functional but could improve privacy compliance and incident response transparency.

Suomen Lähetysseura is a prominent Finnish non-profit organization engaged in international mission, development cooperation, and peace work across 30 countries. The website reflects a well-established entity with a strong market position in Finland's development and church sectors. It targets Finnish-speaking donors, volunteers, and church communities, offering clear calls to action for donations and participation. The content is rich, professionally presented, and regularly updated, demonstrating a mature digital presence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Google Tag Manager, and CookieHub for privacy compliance. It employs Bootstrap for responsive design and integrates social media feeds and Google Maps. Performance is moderate with good mobile optimization and accessibility features. SEO practices are well implemented with proper meta tags and structured data. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA on forms, and cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found. Incident response and security policy information are not publicly available, indicating an area for enhancement. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It effectively supports the organization's mission and engagement with its audience. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen security and trust.

The website nationbuilder.com is currently inaccessible due to a Cloudflare Turnstile security challenge page, which prevents access to actual website content. As a result, no direct business information, policies, or contact details are available for analysis. The domain is well-established, registered since 1999 with NameCheap, Inc., and shows no suspicious WHOIS patterns. The technical infrastructure leverages Cloudflare services for security and performance, indicating a mature hosting environment. However, the inability to access content severely limits the assessment of the website's business model, security posture, and compliance status. The overall risk is moderate due to lack of visibility, and strategic recommendations focus on enabling access for proper evaluation and ensuring transparency in privacy and security policies.

V

Validity

validity.ngo

53

Validity is an international non-governmental organization based in Hungary, specializing in legal advocacy for persons with intellectual and psychosocial disabilities. The organization operates globally, focusing on strategic litigation, capacity building, and coalition building to promote inclusion and justice. Their website reflects a professional and consistent brand with clear messaging and recent content updates, positioning them as a leading entity in their sector. Technically, the site is built on WordPress with modern plugins and hosted by A2 Hosting, offering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements are needed in DNSSEC and security headers. Privacy compliance is lacking, with no visible privacy or cookie policies, which should be addressed to meet GDPR standards. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

K

Krones AG

krones.group

69

Krones AG is a global supplier specializing in complete production lines and individual machines for the beverage and food industries, offering process technology, filling and packaging solutions, digital services, and lifecycle support. The website demonstrates a mature digital presence with comprehensive business and investor information, strong branding, and a focus on sustainability and innovation. Technically, the site uses modern technologies including Google Tag Manager and Usercentrics for consent management, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the extensive corporate information and professional presentation. Overall, the site is well-structured, trustworthy, and aligned with industry standards.

E

Eden Springs (Denmark) A/S

edensprings.dk

57

Eden Springs Denmark is a leading supplier of water and coffee solutions for businesses and homes in Denmark, recently integrated into the Culligan group. The company offers a broad range of products including spring water coolers, filtered drinking water dispensers, coffee beans, and related services, emphasizing sustainability and customer vitality. Their market position is strong within Denmark, supported by a professional website with clear navigation and multilingual support. Technically, the site is built on Drupal CMS with modern JavaScript libraries and tracking tools such as Google Tag Manager and Microsoft Clarity, ensuring good performance and analytics capabilities. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and incident response details are missing. The absence of WHOIS data reduces transparency but does not significantly impact trust given the brand recognition and professional presentation. Overall, Eden Springs Denmark demonstrates a mature digital presence with room for security policy enhancements.

C

Chateaud'eau SARL

chateaudeau.lu

60

Chateaud'eau SARL is a Luxembourg-based company specializing in providing water solutions for enterprises, including water fountains, bottled water, and filtration systems. The company positions itself as a market leader in Luxembourg, supported by its affiliation with the Eden Springs group. Their offerings focus on improving workplace hydration with environmentally conscious products and services. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, targeting B2B customers in Luxembourg. Technically, the site uses Drupal CMS with modern JavaScript libraries and integrates multiple analytics and advertising tracking tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though it lacks some advanced security headers and published security policies. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and consistent with a professional enterprise. Overall, the site demonstrates good compliance with privacy regulations and offers a trustworthy user experience.

E

Eden Springs

edensprings.no

65

Eden Springs is a leading Norwegian provider of drinking water and coffee solutions for businesses, offering high-quality water coolers, coffee machines, and related products. Since January 2024, Eden Springs has been part of the Culligan group, enhancing its market position and service capabilities. The website is professionally designed, mobile-optimized, and provides clear navigation and business information targeted at corporate customers in Norway. Technically, the site runs on Drupal CMS with modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Bing Ads, all managed with GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies are absent. The absence of WHOIS data is a notable anomaly but does not currently detract from the site's legitimacy based on content and contact information. Overall, Eden Springs presents a credible and professional online presence with room for enhanced security transparency and incident response readiness.

E

Eden Springs

edensprings.ee

53

Eden Springs Estonia is a well-established provider of innovative water and coffee solutions targeted at businesses and home users within Estonia. The company operates under the umbrella of the Culligan Group, enhancing its market credibility and reach. Their website offers a professional and user-friendly experience, showcasing a range of products including water coolers, filtered water, and coffee machines, with clear calls to action and localized content in Estonian. The presence of a cookie consent mechanism and privacy policy indicates compliance with GDPR requirements. Technically, the site is built on Drupal CMS, uses modern JavaScript libraries, and integrates analytics tools such as Google Tag Manager and Piwik PRO, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Overall, Eden Springs Estonia presents a trustworthy and professional online presence aligned with its business objectives.

E

Eden Springs Oy Finland

edensprings.fi

59

Eden Springs Oy Finland operates as a specialized distributor of water and coffee solutions for businesses in Finland. The company offers a broad range of water dispensers including spring water and tap water machines, along with related accessories and services. Since January 2024, Eden Springs has been part of the Culligan group, enhancing its market position and operational capabilities. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant business content targeted at Finnish enterprises. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Trustpilot widgets. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with comprehensive cookie consent mechanisms and GDPR-aligned privacy policies. Contact information is clearly presented, though no direct company emails are visible in the HTML content. Overall, the site reflects a mature digital presence consistent with a medium-sized B2B service provider in the water solutions sector.

A

Aquaservice

edensprings.pt

62

Aquaservice is a large Portuguese company specializing in water and coffee delivery services for both residential and business customers. The website is professionally designed using WordPress and Elementor, featuring multi-language support and integrated e-commerce capabilities. The company emphasizes sustainability and convenience, offering water dispensers and coffee solutions with a focus on circular economy principles. Technically, the site uses modern plugins and tracking tools such as Google Analytics and Trustpilot for social proof. Security posture is good with HTTPS and cookie consent implemented, though some security headers and explicit privacy policies are missing. The absence of WHOIS data reduces domain trustworthiness but the website content and branding strongly indicate a legitimate business. Overall, the site provides a good user experience and clear contact information, supporting its business credibility.

E

Eden Springs (Switzerland) SA

edensprings.ch

60

Eden Springs (Switzerland) SA operates as a specialized provider of water and coffee solutions targeting businesses and households within Switzerland. The company offers a range of products including water dispensers with gallons, plumbed water dispensers, and home water delivery services. As part of the Culligan group, Eden Springs holds a strong market position with a focus on quality, environmental responsibility, and customer service. The website reflects a professional brand image with consistent messaging and trust signals such as Trustpilot reviews. Technically, the website is built on Drupal CMS and leverages modern JavaScript libraries and tracking tools such as Google Tag Manager and Microsoft Clarity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and accessible privacy and cookie policies. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, explicit security headers and published security policies are absent, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional controls and transparency. The domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the website. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Strategic recommendations include implementing stronger security headers, publishing incident response contacts, and enhancing accessibility features to further strengthen the site’s security and compliance stance.

E

Eden Springs

edensprings.lt

53

Eden Springs Lithuania operates as a specialist supplier of water and coffee products targeting both private individuals and corporate clients within Lithuania. The company is part of the larger Culligan group, indicating a strong corporate backing and market presence. Their website offers a comprehensive range of water dispensers, filtration systems, and coffee machines, supported by clear navigation and professional branding. The digital infrastructure is built on Drupal CMS with modern JavaScript libraries and analytics tools, reflecting a mature technical setup. Privacy compliance is well addressed with cookie consent mechanisms and a privacy policy in Lithuanian. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are lacking. The absence of WHOIS data limits domain legitimacy verification, but the website content and branding suggest a legitimate and established business. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

E

Eden Springs Scandinavia AB

edensprings.se

58

Eden Springs Scandinavia AB operates as a distributor of water solutions for businesses in Sweden, offering high-quality water dispensers, filtration systems, and related services. Since January 2024, Eden Springs is part of the Culligan group, enhancing its market position and service capabilities. The website presents a professional and consistent brand image with clear navigation and relevant business content targeted at corporate customers. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Bing Ads. The site is mobile optimized and implements a detailed cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies are missing. WHOIS data for the exact subdomain queried is unavailable, limiting domain registration trust verification, but the overall business credibility remains high based on website content and external references.

C

Culligan Nederland / Eden Springs Nederland

edensprings.nl

57

Eden Springs Nederland, now merged with Culligan Nederland, is a leading European provider of water and coffee solutions for offices and homes. The company offers a broad range of water coolers, water bottles, and coffee machines with a focus on quality, environmental respect, and customer vitality. Their market position is strong, supported by multiple certifications and a clear brand presence. Technically, the website is built on Drupal CMS with modern JavaScript libraries and integrates analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

E

Eden Springs

edensprings.co.uk

54

Eden Springs is a well-established provider of water and coffee solutions targeting both businesses and households in the United Kingdom. The company emphasizes high-quality products, delivery, installation, and maintenance services, with a strong commitment to environmental responsibility as evidenced by their CarbonNeutral® certification since 2010. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience. From a technical perspective, the website is built on the Drupal CMS platform and incorporates modern JavaScript libraries and analytics tools such as Google Analytics, Microsoft Clarity, and Trustpilot widgets. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with a well-structured front-end and use of asynchronous script loading. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but there is room for improvement in implementing comprehensive security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to domain naming rules is a notable anomaly but does not detract significantly from the overall legitimacy of the site given the professional content and consistent branding. Overall, Eden Springs presents a credible and trustworthy online presence with a mature digital infrastructure. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure information, and improving accessibility compliance to further strengthen their security and compliance posture.

C

Chateaud'eau

chateaudeau.com

62

Chateaud'eau is a French company specializing in providing water fountains and hydration solutions primarily for enterprises. Positioned as a market leader with over 30 years of expertise and more than 90,000 installations, the company offers a broad range of products including bonbonne water fountains, network-connected fountains, and bottled water, complemented by installation and maintenance services. The website reflects a professional and consistent brand image, supported by certifications such as ISO 9001 and ISO 14001, and positive customer trust signals including a Trustpilot rating and notable client logos. Technically, the site is built on Drupal CMS with modern JavaScript libraries and analytics tools, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies or incident response contacts. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the overall business credibility remains high based on content and certifications.

E

Eden Springs

eden.pl

55

Eden Springs Poland operates as a leading supplier of water and coffee delivery services for businesses and households, positioning itself as a market leader in Poland. The company is part of the global Culligan group, which enhances its market credibility and operational scale. The website reflects a professional and consistent brand image, offering a broad range of water dispensers, installation services, and related products. The target audience includes corporate clients and residential customers seeking convenient water solutions. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response disclosures are absent. The lack of WHOIS data limits domain transparency but does not detract significantly from the business legitimacy given the comprehensive online presence and trust signals. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, supporting a trustworthy and professional business operation.

C

Culligan Water Spain

aguaeden.es

55

Culligan Water Spain operates as a provider of hydration and water treatment solutions, targeting both business and consumer markets within Spain. The website reflects a professional presence with multilingual support and integration of customer trust elements such as Trustpilot. The company appears to be part of a larger European network with multiple country-specific domains. Technically, the site is built on WordPress and employs modern marketing and analytics tools including Google Tag Manager and Visual Website Optimizer, indicating a mature digital marketing strategy. Security measures include HTTPS and bot protection via Google reCAPTCHA, though explicit security headers and policies are not evident in the provided content. Privacy and compliance documentation such as privacy and cookie policies are not clearly present, which may impact GDPR compliance perception. Overall, the site is functional and professional but would benefit from enhanced transparency in privacy and security policies.

E

Eden Springs

edensprings.de

58

Eden Springs Germany operates as a key provider of sustainable drinking water solutions, targeting both corporate and household customers. The company offers a range of water dispensers, including bottled and plumbed options, alongside water delivery and service solutions. The website reflects a mature business with a strong European presence, supported by multiple country-specific domains and a consistent brand identity. Technically, the site is built on Drupal CMS, leveraging modern JavaScript libraries and analytics tools such as Piwik PRO and Microsoft Clarity, with a focus on privacy compliance through a detailed cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and explicit incident response policies are absent. Overall, the site demonstrates good professionalism, user experience, and trustworthiness, making it a reliable digital presence for the Eden Springs brand in Germany.

W

Whimsical

whimsical.com

68

Whimsical is a well-established technology company founded in 1998, offering an all-in-one visual workspace designed to unite teams, tasks, and tools. Their SaaS platform integrates projects, boards, docs, and posts to facilitate collaborative planning and building for fast-moving teams. The website reflects a professional and modern design with clear navigation and mobile optimization, targeting product and project teams seeking streamlined visual collaboration tools. Technically, the site leverages a modern React and Next.js stack, hosted with Cloudflare DNS services, ensuring fast performance and good accessibility. Security posture is solid with HTTPS enabled and domain transfer protections, though there is room for improvement in DNS security and security headers. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and credible but would benefit from enhanced privacy disclosures and security transparency.

SIA Aston Baltic is an innovative and rapidly growing information technology and consulting company based in Latvia, positioning itself as a one-stop agency for IT and consulting services. The website is currently in maintenance mode, displaying minimal content and no active business information or contact details. The technical infrastructure is based on WordPress CMS with a maintenance plugin, utilizing jQuery libraries and Open Sans font. The site is accessible over HTTPS but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Overall, the website demonstrates basic digital maturity with room for improvement in security, privacy, and content richness.

R

Roboskola

roboskola.lv

58

Roboskola.lv is a Latvian STEAM education center focused on providing innovative educational programs integrating science, technology, engineering, arts, and mathematics for children aged 6 to 12 and educational institutions. The organization offers in-person and outreach classes, summer camps, technology rental, and product sales to support STEAM learning. The website is professionally designed using WordPress and WooCommerce, hosted on WordPress.com, and incorporates modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Facebook Pixel. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal privacy or cookie policies. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site presents a credible educational business with room for improvement in privacy compliance and security transparency.

H

Haus

madeinhaus.com

65

Haus is a Los Angeles-based creative agency specializing in fully integrated digital campaigns and brand development. Established in 2008, the company has built a strong market position with a 17-year history and partnerships with major global brands such as Netflix, Google, Apple, and Meta. Their services focus on pushing the boundaries of technology, strategy, design, and content to create impactful digital experiences and lasting brand-customer relationships. The website reflects a professional and modern digital presence, leveraging Next.js and Contentful CMS for content delivery and performance optimization. Mobile responsiveness and user experience are excellent, supporting their creative brand image. Security posture is moderate with HTTPS enabled and domain registrar locks in place, but lacks DNSSEC and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, Haus demonstrates strong business credibility and technical maturity but should enhance privacy and security transparency to align with best practices.

C

Cloud City Oy

cloudcity.fi

56

Cloud City Oy operates the website cloudcity.fi, providing hosting and cloud services primarily targeting Finnish businesses and individuals. Established in 2015, the company positions itself as a local provider offering a range of hosting solutions from web hosting to comprehensive cloud services. The website content is professional and well-structured, reflecting a focused business model in the technology sector. The company maintains consistent branding and transparent registration data, reinforcing its legitimacy. From a technical perspective, the website employs modern web standards including HTML5, CSS3, and JavaScript, with a responsive design optimized for mobile devices. Hosting appears to be managed internally by Cloud City Oy, with no reliance on third-party CMS or platforms detected. Performance is moderate, with good SEO and accessibility basics in place. Security is well-handled with HTTPS enforced and multiple security headers present, though DNSSEC is not implemented. Security posture is solid but could be improved by publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is currently weak due to the absence of privacy and cookie policies or consent mechanisms, which is a notable compliance gap under GDPR. No tracking or analytics services were detected, indicating minimal user data collection. Overall, the website and domain registration data indicate a trustworthy and legitimate business with a good technical foundation. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

K

Kaskipuu Oy

kaski.fi

58

Kaskipuu Oy is a well-established Finnish family-owned manufacturing company specializing in high-quality windows and doors. Founded in 1978, it has grown into the largest domestic window and door family business in Finland and operates internationally. The website reflects a professional corporate presence with clear branding and a focus on quality products. The company targets both professional customers and consumers interested in premium construction materials. Technically, the website is built on WordPress with WooCommerce, integrating modern libraries and tools such as FontAwesome, jQuery, and Cookiebot for GDPR compliance. Hosting and domain registration are managed by Cloud City Oy, a Finnish provider, ensuring local infrastructure support. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The site uses extensive tracking and advertising technologies including Google Analytics, Facebook Pixel, and LinkedIn cookies, but maintains good privacy compliance through Cookiebot. Overall, the website is trustworthy, well-maintained, and aligned with the company's business profile.

C

CEEK Marketing

ceek.co.uk

65

CEEK Marketing is a well-established digital marketing agency headquartered in London with additional offices in Brighton and Manchester. Founded in 2016, the company offers a comprehensive suite of marketing services including strategy, social media, SEO, paid media, influencer marketing, content creation, digital PR, and email marketing. The agency targets a broad range of clients from large multinational corporations to startups, positioning itself as a leading marketing partner with a strong focus on data-driven and commercially biased strategies. The website reflects a professional and consistent brand image with strong trust indicators such as client testimonials and partnerships with major global brands.

S

SUEZ

suez-asia.com

63

SUEZ in Asia operates as a regional branch of the global SUEZ Group, focusing on sustainable water and waste management solutions for authorities and industrial clients. The company leverages nearly 70 years of presence in Asia to position itself as a preferred partner in environmental sustainability. The website reflects a professional and consistent brand image with good content quality and SEO practices. However, the lack of WHOIS registration data and absence of visible privacy, cookie, and security policies on the website indicate gaps in transparency and compliance. Technically, the site uses modern web standards but lacks visible security headers and incident response information, which are important for trust and security posture. Overall, the website is functional and professional but would benefit from enhanced security and compliance disclosures.

P

DABĪGA LINEĻĻA – Painteco.com

painteco.com

69

Painteco.com is an e-commerce website specializing in natural linseed oil coatings for wood, targeting consumers and professionals interested in eco-friendly wood treatment products. The website is built on the Shopify platform, leveraging common e-commerce technologies and third-party apps such as Judge.me for customer reviews and Langify for multilingual support. The site demonstrates good design quality, mobile optimization, and a consistent brand presence, although it lacks explicit privacy and cookie policies, which impacts compliance scores. Technically, the website uses modern web standards and Shopify's infrastructure, ensuring reliable hosting and SSL encryption. However, the absence of security headers and explicit privacy mechanisms suggests room for improvement in security posture and regulatory compliance. No WAF or content blocking was detected, indicating full accessibility. From a security perspective, the site benefits from Shopify's platform security and HTTPS but should enhance its security headers and publish clear privacy and incident response policies. The lack of contact information and vulnerability disclosure reduces transparency and trustworthiness. Overall, Painteco.com is a legitimate small business with a stable domain and a focused market niche. Strategic improvements in privacy compliance, security best practices, and contact transparency would enhance its trust and security profile.

D

Doc Society

independence-project.org

47

The Independence Project is a non-profit advocacy initiative launched in 2024 by a coalition of independent documentary organizations, supported by Doc Society and The DISCO network. It aims to promote the cultural and societal importance of independent documentary filmmaking through research publications, community engagement, and collaborative platforms. The website reflects a focused mission with professional design and clear navigation, targeting independent filmmakers and cultural advocates. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, hosted on Linode, and uses Google Fonts and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though accessibility features are basic. No CMS or advanced frameworks were detected. From a security perspective, the site uses HTTPS and domain-level protections like clientDeleteProhibited status but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are published, which is a compliance gap. The domain registration uses privacy protection, which is justified for this non-profit project. Overall, the security posture is moderate but could be improved with better policy transparency and technical controls. The overall risk is low to moderate given the nature of the site and its content. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and improving GDPR compliance to enhance trust and security culture.

D

Doc Society

goodpitch.org

60

Good Pitch is a well-established non-profit initiative operated by Doc Society, focused on connecting social justice documentary filmmakers with partners and allies globally. The organization has a strong market position with over a decade of experience and a broad international footprint. Their key services include live events, workshops, impact labs, and funding facilitation, targeting filmmakers and social change advocates. Technically, the website employs modern JavaScript libraries, error monitoring, and analytics, hosted on AWS infrastructure, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS and error monitoring but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

D

Doc Society

democracystoryunit.org

60

The Democracy Story Unit is a small, non-profit cultural strategy initiative under the parent organization Doc Society, focused on supporting independent storytelling to promote civic renewal and more just societies. The website presents a professional and consistent brand image with clear messaging targeting storytellers, activists, and civil society actors. Technically, the site uses a modern but modest tech stack including jQuery, Bootstrap, and htmx, hosted on AWS infrastructure with DNS managed by AWS Route 53. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is moderate with HTTPS implied but lacking DNSSEC and explicit security headers. Privacy and cookie policies exist but lack explicit consent mechanisms, and no incident response or security policy pages are found. Contact is primarily via email, with no phone or physical address listed. WHOIS data shows privacy protection justified for this non-profit entity, with domain age consistent with the initiative's recent founding in 2023. Overall, the website is trustworthy and professionally maintained but could improve security and privacy compliance.

D

Doc Society

climatestoryunit.org

60

Climate Story Unit is a non-profit initiative under Doc Society focused on advancing climate justice and biodiversity through transformative storytelling. The organization supports artists, impact producers, and movement builders via programs such as Climate Story Labs, Climate Story Fund, and Climate Story Kitchen. The website reflects a niche positioning within the non-profit climate advocacy sector, emphasizing collaboration and impact storytelling. Technically, the website uses a modern but straightforward tech stack including jQuery, Bootstrap, and htmx, hosted on AWS infrastructure. The site is mobile optimized with good navigation and professional design, though some SEO and accessibility features are basic. No CMS is explicitly detected. Security posture is moderate with HTTPS implied but lacking DNSSEC and security headers. No incident response or security policies are published, and privacy compliance is basic with privacy and cookie policies present but no consent mechanism. Contact information is limited to email addresses, with no phone or physical address provided. Overall, the website is functional and professional with moderate trustworthiness. Strategic improvements in security headers, DNSSEC, privacy compliance, and incident response documentation would enhance the security and compliance posture significantly.

S

Synexis S.R.L.

synexis.be

44

Synexis S.R.L. is a Brussels-based web agency specializing in website creation, web design, SEO, e-commerce solutions, and digital marketing services. Established in 2010, the company serves local businesses and professionals seeking comprehensive digital presence solutions. The website reflects a professional and consistent brand image with clear service offerings and client references, positioning Synexis as a trusted local technology service provider. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and analytics tools, hosted by OVH, a reputable provider. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and credible but would benefit from enhanced privacy and security disclosures.

Too Much Media operates the TMM Identity (TMMid) platform, a unified login system designed to streamline user access across its network of products and services. The website serves as a portal for users to create and manage their TMMid accounts, emphasizing privacy and ease of use. The business targets existing and prospective users of Too Much Media's digital offerings, positioning itself as an identity management solution within the technology sector. The site content is basic but functional, focusing on key features and user login capabilities. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and jQuery, with Google Analytics integrated for user tracking. The site uses HTTPS URLs, indicating basic SSL/TLS implementation, but lacks advanced security headers and modern frameworks. The design and user experience are basic and somewhat dated, with limited mobile optimization and accessibility features. From a security perspective, the site shows moderate maturity with HTTPS and secure password input fields. However, the absence of security headers, anti-CSRF protections, and visible privacy or cookie policies indicates gaps in security best practices and compliance. The missing WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, impacting overall risk assessment. Overall, the website functions as intended but requires improvements in security posture, privacy compliance, and transparency to enhance trust and protect user data. Strategic recommendations include implementing comprehensive security headers, publishing privacy and cookie policies, improving form security, and resolving domain registration inconsistencies to strengthen legitimacy and user confidence.

T

Tesco Bank

tescobank.com

74

Tesco Bank is a UK-based financial institution offering a variety of personal banking products including credit cards, personal loans, and savings accounts. The website reflects a mature digital presence with clear navigation, comprehensive product information, and integration with social media and third-party review platforms such as Trustpilot. The bank operates under a strategic partnership with Barclays Bank UK PLC, enhancing its market position and credibility. The site is well-branded and targets UK residents seeking accessible and rewarding personal finance solutions. Technically, the website employs modern JavaScript frameworks and is hosted on Azure CDN, ensuring good performance and mobile optimization. Accessibility features and SEO best practices are evident, contributing to a positive user experience. The presence of cookie consent mechanisms and detailed privacy policies indicate a strong commitment to privacy compliance. From a security perspective, the site enforces HTTPS and uses secure forms for login and registration. However, the absence of explicit security headers and a vulnerability disclosure policy suggests areas for improvement. The lack of WHOIS registration data is a notable anomaly that warrants further investigation to confirm domain legitimacy. Overall, Tesco Bank's website demonstrates a solid digital and security posture suitable for a large financial institution, though enhancements in transparency and domain registration verification would strengthen trust and compliance.

A

AKG Canada

akgcanada.ca

57

AKG Canada is a Canadian employment services organization focused on empowering individuals and communities through partnerships with provincial governments, community organizations, employers, and job seekers. The company offers employment services, job search training, employer workforce solutions, and self-employment resources primarily in British Columbia. The website is professionally designed, bilingual, and uses modern WordPress technologies with active SEO and analytics integration. The domain is recently registered with privacy protection, consistent with a legitimate new or rebranded business. Security posture is adequate with HTTPS and domain status protections, but lacks DNSSEC and explicit security policies. Privacy compliance is partial due to absence of cookie consent mechanisms despite use of tracking scripts. Overall, the website presents a credible and professional business presence with room for improvement in security and privacy transparency.

A

AKG Italia

akgitalia.it

61

AKG Italia is a service provider specializing in employment support and corporate training services primarily in Italy. The company offers tailored support for job seekers and businesses, including free training courses, recruitment, and wellbeing programs. The website reflects a medium-sized, recently founded company with a clear market position as an accredited operator in key Italian regions. Technically, the site is built on WordPress using modern plugins and frameworks, with good SEO and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though some security headers and DNSSEC are missing. Overall, the site is professional and trustworthy, with room for improvement in explicit security policies and direct contact information.

A

AKG Singapore

akgsingapore.sg

54

AKG Singapore is a service provider specializing in employment, health, and consultancy services, partnering with governments and community organizations to empower people and communities. The company positions itself as a global leader in connecting job seekers to meaningful careers and delivering governmental services internationally. The website is professionally designed using WordPress with modern SEO and analytics tools, hosted with Cloudflare DNS and registered through a Singapore-based registrar. Security posture is good with HTTPS enabled, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact is primarily via web forms without direct emails or phone numbers. Overall, the website is trustworthy and well-structured, though domain age is recent compared to the company's claimed history, suggesting a new domain for regional presence.

L

Learn Plus Us

learnplusus.co.uk

59

Learn Plus Us is a well-established apprenticeship and diploma training provider based in the United Kingdom, operating since 2009 and part of the Angus Knight Group since 2020. The company offers a broad range of educational services including apprenticeships in childcare, business services, housing and property, employability courses, and ESOL training. Their market position is strong with over 160 national partnerships and a focus on supporting learners aged 16 and above. The website reflects a professional and trustworthy brand with clear navigation, good content quality, and multiple trust indicators such as certifications and customer reviews. Technically, the site is built on WordPress with modern libraries and plugins, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and recognized certifications, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates a mature digital presence with moderate user tracking and good privacy compliance.

I

Intuitive Thinking Skills

intuitivethinkingskills.co.uk

66

Intuitive Thinking Skills is a UK-based organization specializing in peer-led attitudinal and behaviour change programs. They offer mentoring and accredited courses designed and delivered by individuals with lived experience, targeting sectors such as criminal justice, public health, education, and social care. The company positions itself as a leader in attitude behaviour change with a strong focus on sustainable outcomes and independence for service users. Their market presence is supported by multiple accreditations and partnerships with recognized UK government and certification bodies. Technically, the website is built on WordPress with modern technologies including React and Leaflet.js for interactive maps. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. Analytics and marketing tools such as Google Analytics and Trustpilot are integrated for user insights and reputation management. However, some security headers are missing, which could be improved to enhance protection against common web vulnerabilities. From a security perspective, the site demonstrates a moderate security posture with no visible vulnerabilities or exposed sensitive data. The absence of certain HTTP security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is unavailable and flagged with an error from Nominet, which raises concerns about domain registration legitimacy despite the professional and active website presence. Overall, the website is professional, content-rich, and trustworthy from a business and user perspective, but the domain registration inconsistency and minor security header omissions suggest areas for risk mitigation and compliance enhancement.

R

RISE Ventures

riseventures.com.au

58

RISE Ventures is a purpose-driven non-profit organization focused on empowering remote Australian communities, particularly Indigenous populations, through employment, training, community projects, and small business development. The organization maintains a solid market position with strong partnerships with local councils and Aboriginal associations. Their website reflects a professional and consistent brand image with good content quality and clear navigation tailored to their target audience. Technically, the site is built on WordPress with modern SEO and page builder tools, hosted with Cloudflare DNS and secured with HTTPS. However, there is room for improvement in security headers and privacy compliance. Security posture is generally good with no critical vulnerabilities detected, but the absence of privacy and cookie policies and incident response information indicates compliance gaps. Overall, the website is trustworthy and functional but should enhance privacy and security transparency to align with best practices.

R

RN Employment Services

rnemployment.com.au

57

RN Employment Services is a joint venture between Ngurratjuta/Pmara Ntjarra Aboriginal Corporation and RISE Ventures, focused on empowering remote Australian communities through employment, training, and community development programs. The organization operates primarily in the Northern Territory, delivering government-backed initiatives such as the Community Development Programme (CDP) to support job seekers and build local capacity. The website reflects a well-structured and professional digital presence with clear navigation and relevant content tailored to its target audience of community members, job seekers, and stakeholders. Technically, the site is built on WordPress with modern tools like Google Tag Manager and Facebook Pixel, hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS and security headers, though improvements can be made in CSP implementation and incident response transparency. Privacy compliance is basic, lacking cookie consent mechanisms and GDPR indicators. Overall, the website demonstrates good business credibility and technical maturity, suitable for its community-focused mission.

N

Nyirrunggulung-RISE

nyirrunggulung-rise.com.au

58

Nyirrunggulung-RISE is an Indigenous majority owned partnership organization between the Jawoyn Association and RISE Ventures, focused on delivering employment, education, infrastructure, and wellbeing programs for Aboriginal communities in Central Arnhem Land, Australia. The organization operates with government funding and aims to create sustainable community development outcomes. The website reflects a professional and community-oriented business with clear branding and relevant content targeting Indigenous communities and stakeholders. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted with Cloudflare DNS services. Security posture is adequate with HTTPS enabled and secure forms, but lacks some advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced compliance and security transparency.

R

Real Futures

realfutures.net

58

Real Futures is a majority Aboriginal-owned and staffed non-profit organization based in Australia, dedicated to empowering Aboriginal people through employment readiness, training, and support services. The organization offers a range of programs including disability employment services, community development, and cultural competence training for employers. Their market position is strong within the Indigenous employment sector, supported by partnerships with government initiatives and a clear focus on community impact. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and Cloudflare DNS. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks some advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable gap. Overall, the security posture is moderate with room for improvement in policy transparency and technical security controls. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

J

Jobs 22 Ltd

jobs-22.co.uk

68

Jobs 22 Ltd is a UK-based employment support organization launched in 2021, focused on helping individuals find and sustain meaningful employment through government schemes such as the Restart Scheme and the National Careers Service. It operates as part of the AKG UK Group and was founded in partnership with the British Charity Catch22. The company targets job seekers, employers, and community partners, offering services including in-work support, training, and wellness programs. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and integrating marketing and analytics tools such as Google Analytics and HubSpot. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Hosting is provided via Squarespace with domain registration through Ionos SE. From a security perspective, the website enforces HTTPS with HSTS enabled, uses a cookie consent banner compliant with GDPR principles, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response information, and a privacy policy page, which are important for compliance and user trust. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, Jobs 22 Ltd demonstrates a solid digital presence and security posture appropriate for its sector, but would benefit from enhanced privacy and security documentation to improve compliance and trustworthiness.