Low-risk security reports

C

Costa

costa.lv

79

Costa.lv is a Latvian coffee retail and hospitality business operating multiple cafes primarily in Riga. The website presents a professional and well-structured digital presence, leveraging WordPress CMS and modern JavaScript libraries. The company targets general coffee consumers and cafe visitors, offering coffee products and cafe services. The site includes comprehensive privacy and cookie policies with a consent mechanism, reflecting good GDPR compliance. Security posture is solid with HTTPS and security headers, though no explicit security policy or incident response information is published. Overall, the website is trustworthy and professionally maintained, with moderate technical performance and good user experience.

L

Leo Express Global a. s.

leoexpress.com

78

Leo Express is a transportation company specializing in train and bus ticket sales across Central Europe, offering travel to over 120 destinations. The website is professionally designed with a clear focus on user experience, mobile optimization, and accessibility. It leverages modern web technologies such as React and Next.js, ensuring a responsive and performant platform. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. Overall, the website presents a trustworthy and professional front for its business operations.

M

METRO PROPERTIES

metro-properties.de

76

METRO PROPERTIES is the real estate arm of METRO AG, specializing in the active management, development, and maintenance of wholesale and retail properties internationally. The company leverages extensive retail and real estate expertise to increase the long-term value of its portfolio. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on corporate real estate services. Technically, the site uses modern frameworks and analytics tools, hosted on a reputable CDN provider (Akamai), ensuring good performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site demonstrates high professionalism and trustworthiness, suitable for investors, partners, and real estate professionals.

M

METRO Global Solution Center Poland

metro-gsc.pl

77

METRO Global Solution Center Poland operates as a specialized accounting and finance solutions hub within the global METRO AG group, a leader in wholesale trade and owner of the MAKRO chain. The company focuses on delivering high-quality accounting services, process automation, and career development opportunities in an international environment. Their website reflects a professional and consistent brand image, targeting accounting professionals and job seekers interested in finance careers. Technically, the site uses modern frameworks such as Sitecore CMS, Google Analytics, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security headers and incident response contacts are not publicly detailed. Overall, the site is trustworthy and well-maintained, supporting METRO's global growth strategy.

M

METRO SOURCING International Limited

metro-sourcing.hk

77

METRO SOURCING International Limited is a Hong Kong headquartered wholly owned subsidiary of METRO AG, specializing in global sourcing and supply chain solutions for METRO's wholesale divisions and third-party customers. Established in 1976, it operates a broad supplier network across multiple countries, providing a wide range of products including non-food, near food, and fresh/frozen food categories. The company positions itself as a strategic buying organization within the retail sector, leveraging its international procurement expertise to serve a diverse customer base. Technically, the website is built on a modern stack including Bootstrap and Sitecore CMS, with integrated analytics tools such as Google Analytics and Siteimprove. The site demonstrates good mobile optimization, SEO practices, and a professional design consistent with corporate branding. Cookie consent mechanisms are implemented with detailed categories, reflecting compliance with GDPR and privacy best practices. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs standard security practices such as request verification tokens and cookie consent. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website reflects a mature digital presence with strong business credibility and compliance adherence. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security culture.

M

METRO AG

mpulse.de

76

MPULSE is the official online magazine of METRO AG, providing rich content focused on wholesale, gastronomy, and independent entrepreneurs. The website serves as a content marketing platform to engage METRO's target audience with industry insights, customer stories, and trends. The site is well-branded, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it leverages modern web technologies including Bootstrap, Google Tag Manager, and Akamai CDN for performance and scalability. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting METRO AG's brand integrity.

C

ConnectWise, LLC

connectwise.com

78

ConnectWise, LLC is a leading enterprise technology company specializing in IT management software and solutions tailored for Managed Service Providers (MSPs) and IT professionals. Their platform offers comprehensive tools including Remote Monitoring and Management (RMM), Unified Management and Monitoring (UMM), Security Operations Center (SOC), Network Operations Center (NOC), and cybersecurity services. Positioned as a market leader, ConnectWise supports a thriving community and ecosystem to help MSPs grow and manage their businesses effectively. The website demonstrates a mature technical infrastructure leveraging modern technologies such as Episerver CMS, AWS Cloudfront CDN, and advanced analytics and marketing tools including Google Tag Manager, Microsoft Application Insights, and OneTrust for consent management. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, ConnectWise employs strong HTTPS encryption, comprehensive security headers, and cookie consent mechanisms, indicating a robust security posture. However, the absence of a publicly available security policy, incident response information, and vulnerability disclosure program suggests areas for improvement in transparency and security communication. Overall, ConnectWise presents a professional, trustworthy, and secure online presence consistent with an established enterprise technology provider. The lack of WHOIS data is noted but does not detract significantly from the legitimacy given the company's market presence and website quality. Strategic recommendations include enhancing security transparency and providing explicit incident response contacts to further strengthen trust and compliance.

P

Purple Trading

purpletrading.cz

79

Purple Trading is an online Forex and CFD brokerage targeting retail and professional traders primarily in the Czech Republic. The website presents itself as a leading global Forex broker offering premium quality trading services, reliable technology, and a fair approach to clients. The content is professionally structured and localized in Czech, indicating a mature digital presence. The company emphasizes client success and provides extensive cookie consent and privacy mechanisms, reflecting compliance with GDPR requirements. Technically, the site uses modern JavaScript libraries and analytics tools such as Google Tag Manager, Segment, and Smartlook, integrated with a Joomla CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

E

Element Fleet Management

elementfleet.com

78

Element Fleet Management is a leading global fleet management company specializing in intelligent mobility solutions and comprehensive fleet services. The company serves a broad range of industries with a focus on optimizing fleet costs, safety, and productivity. With over 1.5 million vehicles under management and thousands of clients, Element holds a strong market position in North America and Australia/New Zealand. Their business model centers on providing end-to-end fleet lifecycle services including acquisition, management, optimization, and remarketing. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript libraries, analytics tools, and video platforms. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. The use of multiple tracking and marketing tools indicates extensive user engagement monitoring, balanced with privacy compliance through clear policies and consent mechanisms. From a security perspective, the site enforces HTTPS and employs reCAPTCHA for form security. However, it lacks visible security headers and a public incident response or vulnerability disclosure policy, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust verification but does not detract from the overall legitimacy indicated by the website content and branding. Overall, Element Fleet Management presents a professional, trustworthy, and well-structured online presence suitable for its enterprise clientele. Strategic improvements in security transparency and WHOIS data availability would further strengthen trust and compliance.

n2eyes Agencja Interaktywna is a small interactive web agency based in Gniezno, Poland, specializing in creating unique websites. Their market position is that of a local service provider with a social media presence on Facebook, where they engage with a modest audience. The business model focuses on providing web design and interactive website creation services to businesses and individuals. Technically, the company leverages the Facebook platform for its online presence, utilizing modern web technologies such as React and JavaScript, with hosting and infrastructure managed by Facebook. The page is mobile optimized and performs well, though SEO is basic due to platform constraints. Security posture benefits from Facebook's robust HTTPS and platform security, with no direct vulnerabilities observed on the page. However, the absence of privacy, cookie, and terms of service policies on the page indicates a gap in compliance and transparency. Overall, the risk is low given the platform's protections, but the company should consider linking or publishing these policies to enhance trust and compliance.

Raken, Inc. operates a professional and comprehensive cloud-based construction management software platform designed to streamline field workflows for contractors. The website demonstrates a mature digital presence with extensive features including daily reports, time tracking, safety management, and integrations. The technical infrastructure leverages modern JavaScript frameworks and marketing tools, ensuring good performance and user experience across devices. Security posture is strong with HTTPS, reCAPTCHA, and security headers, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall website professionalism and business information support legitimacy. Strategic recommendations include publishing security and incident response policies and verifying domain registration details to enhance trust.

O

Office of the Comptroller of the Currency

occ.gov

81

The Office of the Comptroller of the Currency (OCC) is a U.S. federal government agency responsible for ensuring a safe, sound, and fair federal banking system. The website serves as the official digital presence of the OCC, providing regulatory information, news, publications, and tools for bankers, consumers, and other stakeholders. It holds a strong market position as a key regulator within the U.S. banking sector, operating under the Department of the Treasury. The site targets a broad audience including banking professionals, federal institutions, and the general public seeking regulatory guidance and banking information. Technically, the website is built on the Percussion Content Management System and leverages modern web technologies including jQuery, Google Analytics, Crazy Egg, and the U.S. Web Design System (USWDS) to ensure accessibility, responsiveness, and usability. The site demonstrates good performance and SEO practices, with comprehensive metadata and structured navigation. Mobile optimization and accessibility features are well implemented, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs domain transfer protections, indicating a secure baseline. However, DNSSEC is not enabled, representing a minor security gap. The presence of a vulnerability disclosure policy is a positive indicator of security awareness, though explicit incident response contacts and security headers are not evident. Privacy compliance is moderate, with a comprehensive privacy policy but lacking a cookie consent mechanism despite the use of tracking scripts. Overall, the OCC website is a professional, trustworthy, and authoritative government resource with strong content quality and business credibility. Minor improvements in security headers, DNSSEC implementation, and privacy consent mechanisms would enhance its security posture and compliance. The site is safe for general audiences and aligns well with its role as a federal regulatory agency.

Philip Morris International (PMI) is a leading global tobacco company focused on transitioning its business towards smoke-free products that are positioned as better alternatives to traditional cigarettes. The company operates at an enterprise scale with a strong global presence and a clear vision to replace cigarettes with reduced-risk products. The website reflects this strategic direction with comprehensive corporate content, investor information, and product details aimed at a mature, global audience. Technically, the website is built on the Sitefinity CMS platform, leveraging modern technologies such as Google Tag Manager, Adobe Target, and Gigya for customer identity management. The site is well optimized for performance, mobile responsiveness, and accessibility, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, employs advanced security headers, and integrates reCAPTCHA Enterprise to protect forms, demonstrating a strong security posture. However, there is no publicly available dedicated security policy or incident response page, which could be improved to enhance transparency. The domain WHOIS data is not publicly available, likely due to privacy protection, which is justified for a multinational corporation of PMI's stature. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR, supported by clear privacy and cookie policies with consent mechanisms.

E

Engageware

engageware.com

76

Engageware is an enterprise-grade AI-powered customer engagement platform specializing in conversational and generative AI technologies to enhance sales, customer service, and employee efficiency. The company serves over 700 clients across finance, retail, and technology sectors, offering solutions such as virtual assistants, appointment scheduling, knowledge management, and digital communications. Their market position is strong, supported by trusted partnerships and a comprehensive product suite tailored for enterprise needs. Technically, Engageware leverages a modern WordPress-based infrastructure enhanced with advanced marketing and analytics tools including Google Analytics, HubSpot, and Facebook Pixel. The site is optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital presence. Hosting and DNS services are managed via Amazon Registrar, indicating reliable infrastructure. From a security perspective, the website enforces HTTPS and domain registration protections, though it lacks DNSSEC and some advanced security headers. Privacy compliance is robust with clear policies and consent mechanisms aligned with GDPR standards. However, incident response contact details and security.txt files are not explicitly provided, representing an area for improvement. Overall, Engageware presents a low-risk profile with high business credibility and technical maturity. Strategic recommendations include enhancing DNS security, publishing vulnerability disclosure mechanisms, and strengthening security headers to further improve trust and compliance.

E

Engageware

timetrade.com

76

Engageware is an established enterprise technology company founded in 2014, specializing in AI-powered customer engagement platforms. Their solutions focus on virtual and human agents, appointment scheduling, knowledge management, and digital communications, serving over 700 companies across finance, retail, and technology sectors. The company maintains a strong market position with a comprehensive product suite designed to improve sales, customer service automation, and employee efficiency. Technically, the website is built on WordPress with modern frameworks like Elementor and integrates advanced analytics and marketing tools such as Google Analytics, HubSpot, and Facebook Pixel. The site is well-optimized for performance and mobile use, reflecting a mature digital infrastructure. Security-wise, Engageware enforces HTTPS, employs domain registration protections, and provides clear privacy and security policies, though improvements like DNSSEC and enhanced security headers are recommended. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting Engageware's credibility as a leading AI engagement platform provider.

C

Coursera, Inc.

coursera.org

80

Coursera, Inc. is a leading global online education platform founded in 2012, offering a wide range of courses, professional certificates, and degree programs in partnership with top universities and industry leaders such as Google, IBM, and Meta. The platform targets students, professionals, and lifelong learners seeking to advance their careers and acquire new skills. Coursera holds a strong market position as a trusted provider of accessible, high-quality education worldwide. Technically, Coursera employs a modern web technology stack including React, Webpack, and Amazon Cloudfront for hosting and content delivery. The website demonstrates excellent performance, mobile optimization, and accessibility features, supported by comprehensive SEO and metadata implementation. Privacy and cookie policies are clearly presented with GDPR compliance and user consent mechanisms in place. From a security perspective, Coursera enforces HTTPS, implements robust security headers, and follows best practices to protect user data and maintain platform integrity. No significant vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available incident response or vulnerability disclosure policy suggests room for improvement in transparency and security communication. Overall, Coursera presents a low-risk profile with a professional, secure, and user-friendly online presence. Strategic recommendations include enhancing incident response visibility, publishing a vulnerability disclosure policy, and maintaining continuous security audits to uphold trust and compliance.

McKesson Corporation operates as a leading healthcare company specializing in wholesale distribution of medical supplies, pharmaceuticals, and healthcare technology solutions. The company holds a strong market position as a major distributor and technology provider to healthcare providers and pharmaceutical companies. The website reflects a mature enterprise with comprehensive service offerings and a clear focus on healthcare industry stakeholders. Technically, the website employs modern JavaScript libraries, analytics tools, and is hosted on Microsoft Azure, indicating a robust digital infrastructure. The site is well optimized for SEO, mobile devices, and accessibility, providing an excellent user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and vulnerability disclosures are not publicly available. WHOIS data is not accessible, likely due to privacy protection, which slightly reduces transparency but is common for large enterprises. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting McKesson's reputation as a healthcare industry leader.

S

SentiLink

sentilink.com

77

SentiLink is a technology company specializing in identity fraud prevention solutions targeted at financial institutions. Their platform combines advanced technology and expertise to detect and stop identity theft at the application stage, positioning them as a leading provider in the finance sector. The website is professionally designed using modern web technologies such as Next.js and React, hosted likely on WPEngine, and integrates multiple marketing and analytics tools including HubSpot, Google Tag Manager, and social media pixels. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, though explicit security headers and policies are not published. The absence of WHOIS registration data is a concern for domain legitimacy, but the website content and branding suggest a credible business. Privacy compliance is partial with a cookie consent mechanism but no clear privacy policy or terms of service pages found. Overall, the site is well-built and trustworthy from a user perspective but would benefit from improved transparency and domain registration clarity.

S

Suomen Terveystalo Oy

terveystalo.fi

79

Terveystalo is a prominent Finnish healthcare organization offering a wide range of health and wellbeing services through over 300 locations across Finland, including comprehensive remote services available 24/7. The website is professionally designed, mobile-optimized, and provides clear information about its services and contact options, targeting Finnish residents seeking healthcare solutions. The company leverages modern web technologies including Episerver CMS, Piwik Pro analytics, and Visual Website Optimizer for performance and user experience enhancements. Cookie consent and privacy compliance are well implemented, reflecting adherence to GDPR requirements. However, WHOIS data for the domain is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy given the professional presentation and detailed privacy disclosures. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information could be improved. Overall, Terveystalo's digital presence is robust, trustworthy, and aligned with industry best practices.

S

Supplier.io

supplierone.co

76

SupplierOne is a supplier registration portal operated by Supplier.io, a leading supplier intelligence platform serving over 1,000 corporate buyers. The platform enables suppliers to create profiles, showcase capabilities, and connect with procurement teams seeking diverse and small business suppliers. The website is professionally designed with a clear business focus and good user experience. Technically, it leverages modern JavaScript libraries, Bootstrap, and integrates marketing and analytics tools such as HubSpot and Clicky. Security posture is solid with HTTPS, anti-CSRF tokens, and Cloudflare protection, though some security headers and DNSSEC are missing. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its market niche.

T

TOPdesk

topdesk.com

79

TOPdesk is a technology company specializing in service management software, offering an easy-to-use ticketing system complemented by consulting and support services. With over 600 specialists across 10 countries and more than 4000 customers, TOPdesk positions itself as a significant player in the service management SaaS market. The website reflects a professional and consistent brand image, targeting organizations seeking to improve their service management capabilities. Technically, the site is built on WordPress with Bootstrap and uses modern marketing and analytics tools such as Google Tag Manager, Cookiebot, and Visual Website Optimizer. The site is mobile-optimized and SEO-friendly, though accessibility features are basic.

A

A-LIGN

a-lign.com

78

A-LIGN is a professional compliance, cybersecurity, cyber risk, and privacy service provider specializing in audits and certifications such as SOC 1, SOC 2, ISO 27001, HITRUST, FedRAMP, and more. The company targets organizations requiring high-quality, efficient compliance and security assessments. Their market position is strong, with a broad portfolio of certifications and services tailored to technology, healthcare, and government sectors. Technically, the website is built on WordPress with modern technologies like React and optimized with WP Rocket, delivering excellent performance and mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy, but WHOIS data absence slightly reduces domain trust. Strategic recommendations include enhancing privacy disclosures, security headers, and incident response transparency.

O

Owlet US

owletcare.com

76

Owlet US operates a well-established e-commerce platform specializing in FDA-cleared smart baby monitors, including the Dream Sock®, Dream Duo 2, and Owlet Cam 2. The company targets parents and caregivers seeking advanced infant monitoring solutions that provide live health readings and HD video for peace of mind. Owlet holds a strong market position as an innovator in infant healthcare technology with a focus on safety and reliability. The website is professionally designed, mobile-optimized, and leverages Shopify's robust platform and third-party marketing tools such as Klaviyo and Bazaarvoice to enhance customer engagement and sales. Technically, the website is built on Shopify with modern web technologies including jQuery and video media elements. It uses Cloudflare DNS and Shopify CDN for hosting, ensuring fast performance and good availability. SEO and accessibility features are well implemented, and the site includes structured data for enhanced search engine understanding. Privacy and cookie policies are present with consent mechanisms, reflecting good compliance with GDPR and related regulations. From a security perspective, the site enforces HTTPS with strong domain registration protections and no visible vulnerabilities or exposed sensitive data. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information, which could be improved. The domain registration is consistent with the business claims, showing a mature and legitimate online presence. Overall, Owlet US presents a low-risk profile with a strong security posture, good privacy compliance, and a professional e-commerce presence. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding vulnerability disclosure information to further enhance trust and security transparency.

O

Outreach

outreach.io

77

Outreach is an enterprise-level SaaS company specializing in AI-powered revenue workflow and sales engagement platforms. Their website clearly targets sales, marketing, revenue operations, and go-to-market teams, positioning themselves as a leader in the sales engagement technology space. The platform offers AI-driven workflows to optimize revenue success, supported by a professional and well-branded digital presence. The technical infrastructure is modern, leveraging React and Next.js frameworks, with extensive use of analytics and consent management tools, indicating a mature digital strategy. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, reflecting a credible and established business.

D

DSV

dsv.com

78

DSV is a leading global transport and logistics company specializing in road, air, sea, and rail freight as well as warehousing services. The company operates at an enterprise scale with a strong international presence, targeting businesses requiring comprehensive logistics solutions. The website reflects a mature digital infrastructure with modern technologies such as Azure CDN, Google Tag Manager, and a robust cookie consent mechanism, indicating a high level of digital maturity and compliance with privacy regulations including GDPR. Security posture is strong with HTTPS enforced and Content Security Policy implemented, although additional security headers could enhance protection. The absence of WHOIS data is noted but does not detract significantly from the overall trustworthiness given the company's established market position and certifications. Overall, DSV's website is professional, secure, and compliant, supporting its role as a major player in the transportation sector.

P

ProRail

prorail.nl

78

ProRail is the Dutch government agency responsible for managing and maintaining the national railway infrastructure. The website clearly communicates its mission to ensure safe, timely, and sustainable rail transport for passengers and freight. The site targets a broad audience including travelers, freight operators, and government stakeholders. Technically, the site uses modern web technologies including JavaScript modules, consent management via Cookiebot, push notifications with OneSignal, and analytics tools such as Google Analytics and Hotjar. The site is hosted securely with HTTPS and employs multiple security headers, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, with a strong alignment between domain registration data and business identity.

A

ASN Bank

devolksbank.nl

79

ASN Bank is a well-established Dutch financial institution focused on sustainable and socially responsible banking. The website clearly communicates its mission to contribute to a sustainable and just future, targeting a general audience interested in ethical banking solutions. The bank maintains a strong market position within the Netherlands, supported by its parent company De Volksbank. Key services include banking and investor relations with a focus on sustainability. Technically, the website is built on modern technologies including Craft CMS, uses Google Tag Manager for analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Bath Iron Works

gdbiw.com

78

Bath Iron Works is a full-service shipyard specializing in the design, construction, and support of complex surface combatants for the U.S. Navy. As a subsidiary of General Dynamics Marine Systems, it holds a significant position in the defense and transportation sectors, serving government and military clients. The website reflects a professional corporate presence with consistent branding and a focus on its core shipbuilding services. Technically, the site is built on WordPress with modern JavaScript frameworks and includes SEO and cookie consent tools, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. The absence of WHOIS registration data is a notable concern, though the website content and social media presence strongly support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

N

Northeastern University

northeastern.edu

83

Northeastern University is a well-established global research and experiential learning institution founded in 1898, serving a broad academic audience including students and researchers. The website reflects a mature digital presence with modern technologies such as React and WordPress CMS, enhanced by SEO tools like Yoast SEO Premium and analytics via Google Analytics. The site is professionally designed, mobile-optimized, and accessible, providing a high-quality user experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are absent in the provided content. WHOIS data for the subdomain 'www.northeastern.edu' was not found, which is likely due to querying a subdomain rather than the root domain, but this limits domain registration trust analysis. Overall, the site is credible and trustworthy, representing a major educational institution with strong branding and social media presence.

F

Flatlogic LLC

flatlogic.com

76

Flatlogic LLC is a technology company specializing in AI-powered software development for startups and businesses. Their platform enables rapid generation and deployment of full-stack web applications including SaaS, CRM, and ERP solutions. The company emphasizes ownership of the generated code, allowing clients full customization and control. The website demonstrates a strong market position with notable clients and positive reviews, positioning Flatlogic as an innovative player in AI-driven software development. Technically, the website is built on a modern stack including Next.js, React, Node.js, and PostgreSQL, hosted on Cloudflare infrastructure. The site is well-optimized for performance, mobile responsiveness, and SEO. It integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, with appropriate cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and benefits from Cloudflare DNS protection. However, DNSSEC is not enabled, and some security headers are not explicitly visible in the HTML. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, Flatlogic's website reflects a mature, professional, and trustworthy business with a solid technical foundation and good security posture. Minor improvements in DNS security and explicit security policy publication are recommended to further enhance trust and compliance.

G

Gensler

gensler.com

78

Gensler is a globally recognized architecture, design, and planning firm with a significant international footprint, operating 57 offices and employing over 6,000 professionals. The company offers a broad range of services including architecture, urban design, brand design, sustainability consulting, and interior design, targeting corporate clients, real estate developers, and urban planners. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation, supporting its market leadership position. Technically, the website employs modern web technologies such as JavaScript frameworks, Matomo analytics, and Sentry for error tracking. It is well-optimized for mobile devices and accessibility, with good SEO practices and performance. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates a high level of professionalism and trustworthiness, with privacy and cookie policies implemented in compliance with GDPR. The absence of WHOIS data suggests domain privacy protection, which is common for large enterprises. No critical vulnerabilities or suspicious content were detected, indicating a low risk profile. Strategic recommendations include publishing detailed security and incident response policies, adding a vulnerability disclosure program, and enhancing transparency around data protection officer contacts and certifications to further strengthen trust and compliance.

R

Raiola Networks

raiolanetworks.com

78

Raiola Networks is a Spanish web hosting and domain registration company established in 2014, offering high-quality SSD hosting, VPS, dedicated servers, and specialized WordPress hosting. The company targets Spanish-speaking customers seeking reliable and fast hosting solutions with 24/7 technical support. Their market position is solid within Spain, supported by a consistent brand presence and active social media engagement. Technically, the website is modern, fast, and mobile-optimized, leveraging technologies such as Livewire, Cookiebot, and multiple tracking pixels for analytics and marketing. Security posture is good with HTTPS enforced and CSRF protections, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and a detailed privacy/legal notice. Overall, Raiola Networks demonstrates a professional and trustworthy online presence with room for enhanced security policies and incident response transparency.

G

Google LLC

scheibo.com

79

YouTube, owned by Google LLC, is the world's leading online video sharing and streaming platform, serving a global audience with diverse content ranging from entertainment to education. The platform operates on a robust advertising-based business model supplemented by premium subscription services. It holds a dominant market position in the technology and media sectors, supported by its parent company Alphabet Inc. The website demonstrates a high level of digital maturity with modern web technologies, fast performance, and excellent mobile optimization. Security measures are strong, including HTTPS enforcement and comprehensive security headers, ensuring user data protection and platform integrity. Privacy policies are comprehensive and GDPR compliant, reflecting a commitment to regulatory adherence. Overall, YouTube presents a trustworthy, professional, and secure online presence with extensive user engagement and business credibility.

P

Pentagram

pentagram.com

76

Pentagram is the world’s largest independent design consultancy, operating as a partnership of 24 leaders in their fields. The company offers a broad range of design services including brand identity, strategy, campaigns, digital experiences, and product design. The website reflects a mature, professional brand with excellent design quality and user experience, targeting businesses and organizations seeking high-end design consultancy. Technically, the site uses modern web technologies and analytics tools like Microsoft Clarity, with good mobile optimization and accessibility. Security posture is strong with HTTPS and security headers, though some compliance aspects like cookie consent and terms of service could be improved. The absence of WHOIS data reduces domain trustworthiness, but the overall digital presence and content quality support legitimacy. Strategic recommendations include enhancing privacy compliance and publishing security policies to strengthen trust and compliance.

B

Better Impact

betterimpact.com

76

Better Impact is a technology company specializing in SaaS solutions for volunteer, donor, client, and member management primarily targeting non-profit organizations. The company has a strong market presence with over 25,000 organizations using its software globally. Their website is professionally designed, mobile-optimized, and rich in relevant content including testimonials, case studies, and detailed product descriptions. The technical infrastructure leverages HubSpot CMS and integrates modern analytics and marketing tools such as Google Analytics, LinkedIn Insight, and Intercom, with appropriate cookie consent mechanisms in place. From a security perspective, the website enforces HTTPS, employs standard security headers, and uses secure forms integrated with HubSpot. However, there is no dedicated security policy or incident response page publicly available, which could be improved to enhance transparency and trust. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR compliance indicators. Overall, the website demonstrates a mature digital presence with good security posture and privacy practices. The business credibility is high, supported by consistent WHOIS data and strong trust signals. Strategic recommendations include publishing a dedicated security policy, providing incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen security transparency.

T

Ticket Tailor

buytickets.at

76

Ticket Tailor operates as a comprehensive ticketing platform enabling event creators to build, promote, and manage live events with ease. The platform supports a wide range of event types and offers features such as event page building, payment processing, email automation, and analytics. The website demonstrates a mature digital presence with modern technologies like Next.js and React, and integrates marketing and analytics tools such as Google Tag Manager and Intercom. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly visible. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the professional website and compliance with privacy regulations support a trustworthy business profile.

R

Rebrandly

rbnd.ly

80

Rebrandly is a leading technology company specializing in branded URL shortening and link management services. Their platform offers secure, customizable short links with advanced tracking and analytics, targeting businesses and teams seeking to enhance their digital marketing and brand visibility. The company holds a strong market position with millions of users and notable enterprise clients, supported by a professional and well-designed website that reflects their brand consistency and trustworthiness. Technically, Rebrandly leverages modern web technologies including React and Astro, hosted on AWS, ensuring fast performance and mobile optimization. Security posture is robust, with HTTPS enforced, SOC2 Type 2 certification, GDPR compliance, and use of Google reCAPTCHA for bot protection. Privacy and cookie policies are comprehensive, and contact information is clearly provided, enhancing user trust. However, WHOIS data is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy based on website content and trust signals.

M

Meetup

meetu.ps

77

Meetup is a well-established online platform that facilitates local and online community events, enabling people to connect over shared interests. The website presents a professional and user-friendly interface, showcasing a wide range of events and groups, targeting individuals seeking social, hobby, and professional networking opportunities. The platform leverages modern web technologies including React and Next.js, ensuring fast performance and mobile optimization. Security practices are robust with HTTPS enforcement and comprehensive security headers, although no explicit vulnerability disclosure or incident response contacts are publicly visible. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. However, the absence of WHOIS domain registration data limits the ability to fully verify domain legitimacy, though the website's content and branding strongly indicate a trustworthy and reputable business.

R

Rackspace Technology

rackspace.com

82

Rackspace Technology is a leading enterprise cloud services provider specializing in multicloud solutions, application modernization, data management, AI, and cybersecurity. The company targets large organizations seeking to adopt and optimize cloud infrastructure and services. Their website demonstrates a mature digital presence with comprehensive content, clear navigation, and strong branding. Technically, the site uses modern analytics, marketing, and consent management tools, hosted on a robust infrastructure with excellent performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details could be enhanced. WHOIS data is unavailable, likely due to privacy protections, but the overall trustworthiness remains high based on content and external references.

D

Dovetail Research Pty Ltd

dovetail.com

77

Dovetail Research Pty Ltd operates a sophisticated AI-native Customer Insights Hub designed to help teams and businesses rapidly convert customer data into actionable insights. Positioned strongly in the technology sector, the company offers a SaaS platform that supports research analysis, qualitative data analysis, thematic analysis, and user research, targeting product managers, UX researchers, and customer experience professionals. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The company is based in Australia and has been established since 1994, indicating a well-rooted market presence. Technically, the website leverages modern frameworks such as React and Gatsby, hosted on Amazon AWS infrastructure, and integrates analytics via Segment. The site is optimized for performance, mobile responsiveness, and SEO, demonstrating a high level of digital maturity. Structured data and metadata are well implemented, enhancing search visibility and business transparency. From a security perspective, the site enforces HTTPS, employs standard security headers, and maintains domain registration protections that prevent unauthorized changes. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a low-risk profile with strong business credibility and technical robustness. Strategic recommendations include enabling DNSSEC, publishing a formal security policy and vulnerability disclosure program, and continuing to monitor third-party scripts for security compliance.

Y

Yoti

yoti.com

78

Yoti is a technology company specializing in digital identity verification and related services such as age verification, eSignatures, and fraud prevention. The company positions itself as a market leader and pioneer in reusable digital ID wallets and automated verification technologies. Their platform targets both businesses needing compliance and individuals seeking secure identity solutions. The website is professionally designed, content-rich, and optimized for modern web standards, indicating a mature digital infrastructure. The technical stack includes WordPress CMS, WPBakery page builder, Video.js for media, and Google Tag Manager for analytics, complemented by OneTrust for cookie consent management. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are not visible in the provided content. The absence of WHOIS data is a notable anomaly, potentially due to privacy protection or registry issues, but the website's professional presentation and business focus support its legitimacy. Overall, the site demonstrates a good balance of usability, compliance, and security, with room for improvement in transparency of security policies and domain registration details.

S

Search Engine Journal

searchenginejournal.com

79

Search Engine Journal is a leading online media publication specializing in SEO, search marketing news, and tutorials. It serves a professional audience of SEO specialists, digital marketers, and content creators by providing up-to-date industry news, comprehensive guides, webinars, and podcasts. The website maintains a strong market position as a trusted resource in the digital marketing space, supported by a professional design and consistent branding. Technically, the site is built on WordPress with a modern tech stack including Google Tag Manager, HubSpot forms, and Amazon Ads, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, consent management for GDPR compliance, and no detected vulnerabilities, although explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the site demonstrates high professionalism, extensive analytics usage, and good advertising transparency, making it a credible and trustworthy platform in its industry.

H

Human Rights Watch

humanrightswatch.org

77

Human Rights Watch is a globally recognized non-profit organization dedicated to defending human rights in over 100 countries. The website serves as a comprehensive platform for advocacy, research, and public mobilization, featuring news, reports, videos, and multilingual support. The organization maintains a strong market position as a leading human rights watchdog with a large global audience. Technically, the site is built on Drupal 10, employs modern analytics and tracking tools, and demonstrates excellent performance and mobile optimization. Security posture is robust with HTTPS, security headers, and consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain appears legitimate despite privacy-protected WHOIS data, consistent with a non-profit's need for privacy. The site is safe, professional, and trustworthy.

D

Discogs

discogs.com

76

Discogs operates as the world's largest online music database and marketplace, founded in 2000. It serves music collectors and enthusiasts by providing a comprehensive platform to discover, buy, and sell music in various physical formats such as vinyl and CDs. The website demonstrates a mature digital presence with modern technologies including React, Google Analytics, and Cloudflare services, ensuring a responsive and performant user experience. Privacy compliance is well addressed through visible cookie consent mechanisms and a comprehensive privacy policy. Security posture is strong with HTTPS enforced and CAPTCHA protections on forms, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data for the domain introduces some uncertainty in domain legitimacy, but the professional presentation and consistent branding support a high trust level overall.

M

Monks

media-monks.com

82

Monks is a global content, data, media, and technology powerhouse focused on accelerating growth through marketing and technology solutions. The company offers a broad range of services including brand marketing, digital advertising, creative content production, and technology services. Their market position is that of a large, professional service provider targeting businesses seeking integrated marketing and technology solutions. Technically, the website is built on Drupal CMS and employs modern web technologies such as Lottie animations and multiple analytics platforms including Google Tag Manager, mParticle, and Zaius. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements cookie consent via OneTrust, but lacks explicit security headers and published privacy or terms of service pages, which are important for compliance and trust. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the website is professional and functional but would benefit from improved transparency and security practices.

B

Bitwarden, Inc.

bitwarden.com

85

Bitwarden, Inc. operates a leading open source password management platform trusted by millions globally, serving individuals, families, businesses, and enterprises. Their product suite includes password management, secrets management, passwordless authentication, and developer tools, positioning them strongly in the cybersecurity technology market. The company emphasizes transparency, security, and compliance, supported by certifications such as SOC 2 and ISO 27001. Their business model is primarily SaaS with free and paid tiers, including self-hosting options for enterprises. Technically, Bitwarden employs a modern React-based web platform, leveraging Cloudflare for hosting and CDN services, and integrates analytics tools like Google Tag Manager and Plausible Analytics. The website demonstrates excellent performance, mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. Security posture is robust, with enforced HTTPS, comprehensive security headers, a bug bounty program, and regular compliance audits. However, DNSSEC is not enabled, and a security.txt file is absent, representing areas for improvement. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is available primarily via contact forms, with no explicit phone numbers or emails disclosed. Overall, Bitwarden presents a high-trust, professional, and secure online presence with minimal risk. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing incident response transparency to further strengthen their security and compliance posture.

P

Pacific Health Ltd

inhousepharmacy.vu

77

Inhouse Pharmacy, operated by Pacific Health Ltd, is a reputable online pharmacy established since 1996, specializing in shipping authentic prescription medications worldwide from a South Pacific facility. The company emphasizes affordable pricing, authentic sourcing from government-registered and FDA-approved manufacturers, and excellent customer service supported by licensed pharmacists. Their market position is strong within the online pharmacy sector, targeting individuals seeking safe and affordable medications globally. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries such as jQuery and integrates multiple analytics and tracking tools including Microsoft Clarity, Google Tag Manager, and Facebook SDK. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in security headers and accessibility compliance. Security posture is solid with HTTPS enforced and use of Trustwave security seals, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and user-friendly platform with moderate technical sophistication and a good security baseline. The absence of WHOIS data reduces transparency but is common in this sector. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving accessibility standards.

The website www.queensland.com serves as the official tourism portal for Queensland, Australia, managed by Tourism & Events Queensland. It provides comprehensive information on destinations, experiences, events, and holiday planning tools aimed at both international and domestic tourists. The site is well-branded, professionally designed, and offers a rich user experience with clear navigation and mobile optimization. Technically, it leverages modern technologies including Adobe Experience Manager CMS, React framework, and integrates with various Adobe marketing and analytics tools, as well as Google Maps and Azure B2C for authentication. Security posture is generally good with HTTPS enforced and use of recaptcha, but lacks visible security headers and published privacy or cookie policies. The WHOIS data is missing or inaccessible, which raises concerns about domain registration transparency, though the website content and social media presence strongly support legitimacy. Overall, the site is a high-quality, trustworthy resource for tourism information but would benefit from improved transparency in privacy and security disclosures.

Y

Yubico

yubico.com

87

Yubico is a recognized industry leader specializing in hardware security keys, notably the YubiKey, which provides strong two-factor authentication solutions for enterprises and individual users. The company positions itself as a trusted provider of phishing-resistant multi-factor authentication, supporting a wide range of platforms and applications. The website reflects a mature digital presence with professional design, SEO optimization, and mobile responsiveness, leveraging WordPress CMS and various marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. Security-wise, the site enforces HTTPS and promotes a security product that enhances organizational security posture. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not evident, which could be improved to enhance trust and compliance. WHOIS data is unavailable from the provided raw output, limiting domain registration trust analysis. Overall, the website demonstrates a strong business and technical foundation with room for improvement in transparency and privacy compliance.

Y

Yubico

yubikey.com

88

Yubico is a leading technology company specializing in hardware-based authentication solutions, primarily through its flagship product, the YubiKey. The company holds a strong market position as an industry leader in multi-factor authentication, serving enterprises and security-conscious users globally. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to their target audience of IT professionals and enterprises. Technically, the site is built on WordPress with modern JavaScript integrations, optimized for mobile and SEO, and employs trusted third-party services for analytics and video content delivery. Security-wise, Yubico demonstrates a robust posture with HTTPS enforcement, security headers, phishing-resistant MFA promotion, and certifications such as FIDO and ISO 27001. The absence of public WHOIS data is consistent with privacy protection practices common in security-focused companies. Overall, the website is trustworthy, professional, and well-aligned with the company's business objectives.