Security Directory

I

Interreg Österreich - Bayern

interreg-bayaut.net

55

Interreg Österreich - Bayern operates an official EU co-funded cross-border cooperation program between Bavaria and Austria for the period 2021-2027. The website provides comprehensive information about the funding program, project submission, and contact points for applicants and participants. The organization targets public administrations, project partners, and regional coordination offices, positioning itself as a key facilitator for regional development projects. Technically, the website is built on WordPress with modern plugins and libraries, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The absence of WHOIS domain registration data raises concerns about domain legitimacy, though the website content and structure suggest an official and trustworthy program presence. Overall, the site is professional, informative, and safe for general audiences.

The Deutsche Diabetes Stiftung is a German non-profit foundation dedicated to diabetes research, prevention, education, and support. The website serves as an information hub for people affected by diabetes, healthcare professionals, and donors. It offers resources such as health checks, prevention tips, and news about foundation activities. The foundation maintains a transparent and professional online presence with clear contact details and donation options. Technically, the site is built on Drupal 7 with modern JavaScript libraries, providing a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

Vesuvius is a well-established global leader in metal flow engineering, primarily serving the steel and foundry industries. The company offers a comprehensive range of engineering services and solutions aimed at improving operational efficiency for industrial customers worldwide. The website reflects a mature enterprise with a strong emphasis on investor relations, sustainability, and corporate governance. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and tracking tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in explicit security headers and incident response transparency. Overall, the domain registration and WHOIS data align well with the company's identity, supporting high legitimacy and trustworthiness.

Robolution GmbH is a German-based small manufacturing company specializing in robotic automation and welding system integration. Their website presents a professional image with clear descriptions of their services, certifications, and business focus on delivering tailored robotic solutions for industrial clients. The technical infrastructure is based on a commercial CMS platform with standard web technologies like jQuery and Modernizr, providing moderate performance and basic mobile optimization. Security posture is limited with no visible security headers or published security policies, and privacy compliance is minimal with no privacy policy or terms of service pages detected. Overall, the website is trustworthy and business credible but could improve in security and privacy transparency.

C

CHEFS CULINAR

chefsculinar.at

56

CHEFS CULINAR operates as a large-scale food wholesale business focused on serving gastronomy, hotel, and communal catering sectors primarily in Austria. The company offers a broad product range including fresh produce, meat, kitchenware, and cleaning supplies, supported by digital tools such as a webshop and specialized software solutions. Their market position is that of an established regional wholesaler with a professional online presence and compliance focus. Technically, the website employs modern JavaScript libraries, a cookie consent management platform (Usercentrics), and analytics (eTracker) with respect for privacy and GDPR compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, well-branded, and trustworthy, with good content quality and user experience.

C

CHEFS CULINAR

chefsculinar.nl

53

CHEFS CULINAR is a well-established wholesale supplier specializing in fresh and total supply products for professional kitchens, primarily serving the hospitality sector in the Netherlands and Europe. The company boasts over 90 years of history and positions itself as one of the largest foodservice wholesalers in Europe. Their services include a broad product assortment, fresh product processing, and an integrated webshop platform for easy ordering. The website reflects a mature digital presence with good content quality and consistent branding.

C

CHEFS CULINAR

chefsculinar.pl

52

CHEFS CULINAR is a leading Polish national distributor specializing in food and non-food products for the HoReCa sector, including restaurants, hotels, and catering companies. The company offers a broad portfolio of approximately 12,000 products, including proprietary brands and a webshop platform. Their website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and rich content aimed at culinary professionals. Technically, the site uses modern web technologies such as jQuery, Modernizr, and Usercentrics for privacy management, alongside eTracker for analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit HTTP security headers and a published security policy are absent. WHOIS data is unavailable from the registry, which slightly impacts trust but is mitigated by the professional branding and presence of trust badges. Overall, the site is well-structured, privacy-conscious, and business-focused, serving a large enterprise in the hospitality distribution sector.

D

DECHEMA Gesellschaft für Chemische Technik und Biotechnologie e.V.

dechema.de

61

DECHEMA Gesellschaft für Chemische Technik und Biotechnologie e.V. is a well-established non-profit professional association in Germany focused on chemical technology and biotechnology. The organization serves as a key network for professionals in science, industry, politics, and society, promoting knowledge exchange, research funding, and event organization. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to its target audience. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and FontAwesome, hosted on webdiscount.net, and employs Google Tag Manager and Analytics for user tracking with appropriate cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and formal security policies. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting DECHEMA's market position as a leading network in its sector.

C

CHEFS CULINAR

chefsculinar.com

54

CHEFS CULINAR is a well-established European foodservice distributor with a strong presence across multiple countries. The company offers a broad range of food and non-food products, kitchen technology, and consulting services tailored to professional customers in hospitality, gastronomy, and communal catering. Their website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses a traditional tech stack including jQuery, Bootstrap, and Google reCAPTCHA, with moderate performance and mobile optimization. Security measures include bot protection and cookie consent, but lack visible security headers and advanced policies. The absence of WHOIS data reduces domain transparency and trust, though the business appears legitimate based on content and related domains. Overall, the website scores well but could improve in security posture and domain registration transparency.

S

Indikatori za Ciljeve održivog razvoja

sdgmontenegro.me

62

The website www.sdgmontenegro.me serves as an official or semi-official platform providing data and indicators related to the United Nations Sustainable Development Goals (SDGs) specifically for Montenegro. It offers users access to indicator data, downloadable datasets, news, and publications related to SDG progress. The target audience includes government agencies, researchers, policymakers, and the general public interested in sustainable development metrics. The platform is built on the Open SDG framework, leveraging modern web technologies such as Bootstrap, jQuery, Chart.js, and Leaflet for interactive data visualization and mapping.

The website www.supportandgo.com operates as a service platform for multiple well-known luggage brands including Samsonite, American Tourister, Tumi, Lipault, Gregory, and Hartmann. It provides users with tools to find service support, parts delivery, pick-up services, and dispute resolution. The site targets both consumers and dealers, positioning itself as a key service facilitator within the luggage retail sector. The branding is consistent and professional, reflecting the established reputation of the Samsonite group. Technically, the website is built on ASP.NET MVC framework and utilizes common libraries such as jQuery, Modernizr, and Bootstrap. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Security measures include the use of anti-forgery tokens in forms, but there is a lack of explicit security headers and cookie consent mechanisms, which are areas for improvement. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), but lacks important HTTP security headers such as Content Security Policy and HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data for the domain is a significant concern, as it raises questions about domain legitimacy despite the professional appearance and brand alignment of the website. Overall, the website presents a moderate risk profile with good business credibility but technical and security gaps that should be addressed. Strategic recommendations include verifying domain registration, implementing comprehensive security headers, adding cookie consent mechanisms, and publishing clear security and incident response policies to enhance trust and compliance.

E

ENORM Design

enorm.design

44

ENORM Design is a specialized design agency based in Cologne, Germany, focusing on corporate and brand design, editorial design, and cultural and corporate communication. The company serves a diverse clientele including museums, medium-sized enterprises, publishers, associations, savings banks, and publicly listed corporations, primarily in the art, culture, and finance sectors. The website demonstrates a strong market position with notable awards and a comprehensive portfolio showcasing their expertise. Technically, the website is built on TYPO3 CMS and employs modern JavaScript libraries and frameworks, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain registration trust but does not detract significantly from the overall legitimacy given the professional content and legal disclosures. Overall, ENORM Design presents a credible and professional digital presence aligned with its business objectives.

E

ENORM Agentur für Design und Kommunikation Köln

enorm.net

47

ENORM Agentur für Design und Kommunikation Köln is a small regional agency specializing in design, digital communication, and media services. Their website presents a professional and consistent brand image targeting businesses seeking tailored solutions in corporate design, digital projects, and online advertising. The technical infrastructure is based on TYPO3 CMS with a modern JavaScript stack and Google Analytics for user tracking. While the website is accessible and well-structured, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is provided on the homepage. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and technical setup appear legitimate. Security posture is moderate with HTTPS enabled but missing advanced security headers and policies.

vhs Karlsruhe is a regional adult education institution based in Germany, offering a wide range of courses including languages, health, culture, professional development, and family education. The website is built on TYPO3 CMS with a modern and responsive design, providing good user experience and clear navigation. The technical infrastructure is solid, leveraging modern web technologies and asynchronous script loading for performance. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. No signs of malicious content or blocking mechanisms were detected, indicating full accessibility. Overall, the site is trustworthy and professionally maintained, serving its educational mission effectively.

E

ENORM Digital GmbH

enorm.digital

54

ENORM Digital GmbH is a Cologne-based internet agency specializing in digital communication projects such as websites, landing pages, one-pagers, banners, and online advertising. The company serves a diverse clientele including museums, medium-sized enterprises, publishers, associations, and financial institutions, positioning itself as a trusted partner in the cultural and financial sectors. Their website demonstrates a professional and consistent brand presence with a comprehensive portfolio and client references. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. The company provides detailed legal disclosures and privacy policies compliant with GDPR, enhancing trust and transparency.

S

Smarketer GmbH

smarketer.ch

69

Smarketer GmbH is a specialized full-service Google Ads agency operating primarily in the D-A-CH region, recognized as a market leader with over 900 clients. The company offers a comprehensive suite of digital advertising services including Google Ads, Microsoft Advertising, Google Shopping, YouTube advertising, and related coaching and consulting services. Their strong partnerships with Google and Microsoft, along with certifications and client testimonials, reinforce their market position. Technically, the website is built on WordPress with modern performance optimizations such as lazy loading, consent management for GDPR compliance, and integration of Google Tag Manager. The site is mobile-optimized, SEO-friendly, and uses trusted third-party services for consent and analytics. Security posture is good with HTTPS and basic security headers, though there is room for improvement in advanced security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Contact information is comprehensive and transparent, supporting business credibility. Overall, Smarketer demonstrates a mature digital presence with strong business credibility and a solid security foundation, suitable for its role as a trusted digital marketing partner.

S

Smarketer GmbH

smarketer.at

61

Smarketer GmbH is a specialized full-service Google Ads agency operating primarily in the D-A-CH region, recognized as a market leader with over 900 clients. Their core offerings include Google Ads management, Microsoft Advertising, Google Shopping CSS, and conversion optimization services. The company emphasizes performance-based billing and personalized coaching, supported by strong partnerships with Google and Microsoft. Technically, the website is built on WordPress with modern optimizations such as WP Rocket, consent management, and Google Tag Manager integration, ensuring fast performance and good SEO. Security posture is solid with HTTPS and consent mechanisms, though additional security headers and published policies could enhance trust. The absence of WHOIS data limits domain transparency but does not detract from the professional presentation and trust signals on the site.

Spanish Market d.o.o. is a small manufacturing company based in Bosnia and Herzegovina specializing in the production of packaged bakery products with long shelf life. The website presents a professional and consistent brand image with clear navigation and multilingual support, targeting general consumers and business clients interested in bakery products. The business model focuses on manufacturing and distribution within the local market, supported by downloadable product catalogs and social media presence on LinkedIn and Facebook. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Google Analytics for tracking. It is served over HTTPS, ensuring secure communication, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of security policies and incident response information suggests limited maturity in security governance. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

I

Ideas Business Lab d.o.o.

ibl.ba

52

Ideas Business Lab d.o.o. is a Bosnian marketing and communications agency focused on helping clients achieve business success through creative and strategic services. Their offerings include strategy, creative design, digital marketing, media planning, events, social media management, and public relations. The company targets businesses seeking comprehensive marketing solutions in Bosnia and Herzegovina. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, reflecting a mature digital presence. Technically, the website uses modern web technologies including Bootstrap for responsive design, Google Analytics and Tag Manager for tracking, and Modernizr for feature detection. The site loads with moderate performance and has basic accessibility features. However, there is no detected CMS or hosting provider information. SEO is adequately addressed with meta tags and Open Graph data. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no published privacy policy, cookie policy, or incident response information, which are gaps in compliance and security transparency. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional marketing agency but should improve privacy compliance and security practices to enhance trust and meet regulatory requirements.

M

Megamix d.o.o.

megamix.ba

46

Megamix d.o.o. is a well-established foodservice distribution and logistics company based in Bosnia-Herzegovina, with over 30 years of experience. The company serves a broad B2B audience in the hospitality and foodservice sectors, maintaining partnerships with numerous reputable brands. Their website reflects a professional and consistent brand image, targeting businesses seeking distribution and logistics solutions. Technically, the site uses modern web technologies including Bootstrap and Google Analytics, and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security features.

N

NapravioBiH d.o.o.

napraviobih.ba

52

NapravioBiH d.o.o. is a Bosnian company focused on promoting and distributing products made in Bosnia and Herzegovina, targeting both local artisans and international markets. The company collaborates with sister companies across Europe to facilitate market access and employment opportunities, including for handicapped individuals. Their website reflects a small but professional business with a clear mission to improve the image and economy of Bosnia and Herzegovina through product promotion and distribution. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates social media and video content. However, it lacks advanced CMS or modern frameworks and shows only basic mobile optimization and SEO. Security posture is moderate with HTTPS usage but missing key security headers and no visible security or incident response policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

onlinevhs@BW is a regional online education platform serving the Volkshochschulen (adult education centers) in Baden-Württemberg, Germany. It offers a wide variety of online courses spanning languages, professional development, fitness, finance, pedagogy, and societal topics. The platform targets a broad general audience interested in personal and professional growth through accessible online learning. The business model revolves around providing digital access to Volkshochschulen courses, positioning itself as a key regional educational resource. Technically, the website is built on TYPO3 CMS with Bootstrap and modern JavaScript libraries, ensuring a responsive and accessible user experience. Analytics are implemented via Matomo and Google Tag Manager with some privacy-conscious configurations such as cookie disabling and consent checks. Security posture is strong with HTTPS and some best practices, but the absence of publicly linked privacy and cookie policies, terms of service, and contact information reduces compliance and trust levels. No vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business purpose and location. Overall, the site is professional and functional but would benefit from enhanced privacy and compliance disclosures to improve user trust and regulatory adherence.

L

Lampa Studio d.o.o.

lampa.ba

61

Lampa Studio d.o.o. is a Bosnia and Herzegovina-based technology service provider specializing in web design, custom web development, eCommerce solutions, and mobile applications. Founded in 2011, the company targets businesses and organizations seeking modern, user-friendly digital solutions with a focus on usability and contemporary design. Their market position is supported by a strong portfolio of regional clients and active social media presence. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations for Google Analytics and Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and explicit security policies. Privacy compliance is limited, with no visible privacy or cookie policies, which is an area for improvement. Overall, the website is professional, trustworthy, and well-maintained, reflecting a credible business entity.

S

Stadtentwässerungsbetriebe Köln, AöR

steb-koeln.de

58

Stadtentwässerungsbetriebe Köln, AöR is a municipal water management and wastewater service provider operating in Cologne, Germany. The organization focuses on wastewater treatment, flood protection, and environmental water body maintenance, serving a broad audience including residents, property owners, and job seekers. Their market position is that of a key public service entity with a medium-sized operational scale. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target groups. Technically, the website employs modern web technologies including React, jQuery, and Matomo analytics, complemented by a robust consent management platform (Usercentrics) ensuring GDPR compliance. Hosting appears stable with reputable nameservers. The site is mobile-optimized and uses HTTPS with good security practices, although some security headers could be improved. From a security perspective, the site demonstrates a solid posture with encrypted connections, privacy-focused analytics, and cookie consent mechanisms. However, it lacks explicit security policies and incident response contacts, which could enhance trust and preparedness. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports the organization's mission and public service role, with recommendations to enhance security headers and publish formal security policies for further maturity.

M

MACH AG

mach.de

68

MACH AG is a specialized software provider focused on digital transformation solutions for public administration and municipalities in Germany. Their offerings include ERP systems, financial management software, online services, and process management platforms tailored to the needs of government entities. The company positions itself as a trusted partner for digitalization in the public sector, serving both larger and smaller institutions. The website is professionally designed, well-structured, and provides comprehensive information about their products, services, and events such as training and webinars. Technically, the site uses modern web technologies including JavaScript, SVG graphics, lazy loading, and integrates Cookiebot for cookie consent and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, MACH AG demonstrates a mature digital presence with a high level of professionalism and trustworthiness.

E

Engagiert am See

engagiert-am-see.de

56

Engagiert am See operates as a regional non-profit volunteer platform serving the Bodenseekreis and the city of Friedrichshafen. The website facilitates volunteer engagement by providing a marketplace for volunteer opportunities and resources for both volunteers and organizations. The platform is positioned as a trusted community resource with a clear focus on social impact and local engagement. Technically, the site is built on Drupal CMS, uses Matomo for privacy-conscious analytics, and incorporates modern web technologies such as Font Awesome and Slick Carousel. The site is mobile optimized and accessible, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Privacy compliance is good, with GDPR-aligned cookie management and a comprehensive privacy policy. Business credibility is supported by consistent branding and trust signals, though direct contact emails and phone numbers are not explicitly published, relying instead on contact forms. Overall, the site presents a trustworthy, well-maintained digital presence for a small non-profit organization.

H

Hirsch & Wölfl GmbH

hirsch-woelfl.de

60

Hirsch & Wölfl GmbH is a well-established digital agency based in Germany, specializing in creating professional websites, mobile apps, and print media primarily for municipalities, cities, counties, and companies. With over 23 years of experience and more than 1,400 completed projects, the company holds a strong market position in the technology sector, focusing on digital transformation and compliance with regulations such as the Onlinezugangsgesetz (OZG) and GDPR. Their services include web development, citizen apps, online shops, and digital marketing materials, targeting a broad audience from small communities to global enterprises. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries and frameworks such as LightGallery and Swiper for enhanced user experience. The site is hosted behind Cloudflare, ensuring performance and security benefits. The website is mobile-optimized, accessible, and SEO-friendly, with a comprehensive cookie consent mechanism and GDPR-compliant privacy policy. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses cookie consent to manage tracking technologies like Google Analytics. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which could be areas for improvement. Overall, Hirsch & Wölfl GmbH presents a professional and trustworthy digital presence with strong compliance and technical maturity. Strategic enhancements in security transparency and incident response readiness would further strengthen their security posture and trustworthiness.

L

Landkreis Cham

landkreis-cham.de

61

Landkreis Cham operates as the official local government authority for the largest district in the Upper Palatinate region of Germany. The website serves as a comprehensive portal offering administrative services, social and health information, cultural and tourism resources, economic development support, and environmental data. It targets residents, businesses, tourists, and families within the district. The site is well-positioned as a trusted government resource with a clear focus on public service delivery. Technically, the website is built on the Umbraco CMS platform, leveraging modern JavaScript libraries such as jQuery and Bootstrap for responsive design and user interaction. It integrates Matomo analytics for privacy-conscious visitor tracking and employs HTTPS with secure cookie consent mechanisms. The site demonstrates good accessibility and SEO practices, ensuring usability across devices and audiences. From a security perspective, the site enforces HTTPS and uses anti-CSRF tokens in forms, with a robust cookie consent framework. However, it lacks explicit security headers and a published security or incident response policy, which are recommended for enhanced protection and transparency. No vulnerabilities or suspicious content were detected. Overall, Landkreis Cham's website is a professional, secure, and privacy-compliant government portal. It effectively balances user experience with regulatory compliance, though it could benefit from additional security policy disclosures and header implementations to further strengthen its security posture.

LINUS WITTICH Medien KG operates the website LW-flyerdruck.de, a well-established online printing service provider in Germany with over 50 years of experience, 13 locations, and more than 900 employees. The company offers a broad range of printing products including flyers, brochures, business stationery, posters, and textile printing, targeting a general audience seeking affordable and reliable print solutions. The website is professionally designed with clear navigation and comprehensive product listings, supported by structured data enhancing SEO and business transparency. Technically, the website employs modern web technologies such as JavaScript, CSS, JSON-LD structured data, and integrates third-party services like Google Tag Manager and Cookiefirst for consent management. The platform appears to be custom-built or uses a proprietary CMS, hosted on servers associated with bw-networx.net. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS (implied though not explicitly confirmed), includes a cookie consent mechanism, and secures user login forms via POST. However, no explicit security headers or published security policies were detected, and no incident response or vulnerability disclosure information is available. No vulnerabilities or suspicious content were found in the provided data. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements include enhancing security headers, publishing a security policy, and expanding incident response information to further strengthen trust and security posture.

The Town of Superior, Colorado's official municipal website serves as a comprehensive portal for residents, businesses, and visitors, offering extensive information on community events, government services, public safety, and recreational activities. The site positions itself as a trusted local government resource with a clear focus on transparency and community engagement. The presence of multiple language options and social media integration enhances accessibility and outreach. Technically, the website employs a modern technology stack including jQuery, Google Maps API, and the OpenCities CMS platform by Granicus, built on ASP.NET WebForms. The site demonstrates good mobile optimization, accessibility features, and moderate performance. Analytics and user experience tools such as Monsido and Google Tag Manager are utilized for monitoring and improvement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some recommended security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data is incomplete, likely due to .gov domain policies, but the domain's legitimacy is supported by its official government status and consistent branding. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in privacy compliance and security best practices. Strategic enhancements in security headers and privacy mechanisms would further strengthen its posture.

M

Margin Media Ltd.

readlagom.com

55

Lagom is an independent media publication operated by Margin Media Ltd., focusing on lifestyle, travel, and thoughtful design. The website offers digital content including magazine issues, journal articles, and an online shop. The target audience is general consumers interested in balanced living and cultural inspiration. The business model centers on content publication and magazine sales, positioning itself as a niche player in the media industry since its founding in 2014. Technically, the website employs a modern JavaScript stack including jQuery, Modernizr, and integrates analytics tools such as Google Analytics and Hotjar. Hosting and DNS services are provided by Cloudflare, ensuring reliable performance and HTTPS security. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. No incident response or security policy information is publicly available, and no cookie consent mechanism was detected, which may affect privacy compliance. The WHOIS data indicates a legitimate and stable domain registration consistent with the business history. Overall, the website demonstrates good professionalism and trustworthiness with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

C

Creditstar Czech, s.r.o

creditstar.cz

54

Creditstar Czech, s.r.o is a fintech company specializing in consumer lending, offering flexible installment loans primarily in the Czech Republic and across eight European countries. The company emphasizes simplicity, speed, and online accessibility, targeting consumers seeking personal loans up to 120,000 CZK with repayment terms up to 24 months. Their market position is strong with over one million customers and 15+ years of operation, supported by a parent group, Creditstar Group. The website reflects a professional and consistent brand image with clear business information and customer contact details. Technically, the website is built on WordPress with modern JavaScript libraries and frameworks such as jQuery, Modernizr, and Foundation. It integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Amplitude, Hotjar, and Intercom, indicating a mature digital marketing and user engagement strategy. The site is mobile optimized and SEO friendly, though accessibility features could be improved. From a security perspective, the site uses HTTPS with good SSL configuration and no visible sensitive data exposure. However, it lacks explicit security headers and published security policies or incident response contacts. The absence of WHOIS data limits domain trust verification, though the business information and licensing claims support legitimacy. Privacy and cookie policies are not clearly presented on the main page, which may impact GDPR compliance perception. Overall, Creditstar Czech presents a credible and professional online presence with a solid business model and technical foundation. To enhance trust and compliance, it is recommended to publish comprehensive privacy and security policies, improve accessibility, and verify domain registration details publicly.

F

Federal News Network

federalnewsnetwork.com

73

Federal News Network is a specialized media outlet providing breaking news and in-depth analysis focused on federal government policies, workforce, defense, and technology. Established in 2008, it serves federal employees, agency managers, policy makers, and contractors with non-partisan content designed to support federal missions. The website demonstrates a mature digital presence with a comprehensive content offering including news articles, podcasts, and events. Technically, the site is built on WordPress and leverages a broad set of modern web technologies and analytics tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and domain protections, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

M

mySociety / UKCOD

alaveteli.org

55

Alaveteli is an open-source Freedom of Information platform developed and maintained by mySociety, a UK-based non-profit organization. The platform enables citizens worldwide to make public information requests to government bodies, promoting transparency and accountability. With over 1,000,000 requests made across 25+ jurisdictions, Alaveteli holds a strong market position as a trusted tool for civic engagement and government openness. The website provides comprehensive documentation, community support, and access to the open-source codebase on GitHub, reflecting a collaborative and transparent business model. Technically, the website employs modern JavaScript libraries such as jQuery and Modernizr, integrates Google services for analytics and search, and features a responsive design optimized for multiple devices. While the site performs moderately well and offers good mobile optimization, it lacks some advanced security configurations such as DNSSEC and security HTTP headers. The absence of explicit privacy and cookie policies indicates room for improvement in privacy compliance. From a security perspective, the domain registration is consistent and legitimate, with no suspicious patterns detected. However, the lack of DNSSEC and security headers reduces the overall security posture. No critical vulnerabilities or WAF blocks were detected, and the site is fully accessible. The use of Google Analytics implies moderate user tracking, but no explicit data retention or privacy compliance details are provided. Overall, Alaveteli presents a professional, trustworthy, and well-established platform with a clear mission and community focus. Strategic improvements in privacy policy publication, security header implementation, and DNS security would enhance its security and compliance standing, further strengthening user trust and regulatory alignment.

Expolibre.org is a website operated by APRIL, a French non-profit organization dedicated to promoting free and open-source software. The site hosts LibreExpo, a travelling exhibit designed to educate the general public about free software philosophy and its social implications. The business model is educational and non-commercial, focusing on awareness and advocacy through downloadable and rentable exhibit panels. The website targets a general audience interested in technology and free software, positioning itself as a niche educational resource within the free software community. Technically, the website uses a modern but simple tech stack including jQuery, Foundation CSS framework, and Modernizr, likely running on the SPIP CMS platform. The site is mobile-optimized with good navigation and content structure, though performance is moderate and accessibility is basic. No advanced analytics or tracking scripts are present, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (inferred from domain and common practice though not explicitly stated), but lacks security headers and DNSSEC is not enabled. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. The WHOIS data is consistent and trustworthy, with the domain registered to APRIL since 2006, supporting legitimacy. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is a trustworthy, well-maintained educational resource with room for improvement in privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and considering a vulnerability disclosure policy to enhance trust and compliance.

T

Take Back The Tech!

takebackthetech.net

38

Take Back The Tech! is a well-established non-profit campaign founded in 2006, dedicated to empowering women and girls to take control of technology to end gender-based violence. The website serves as an educational and advocacy platform offering resources, campaigns, and community engagement tools. It targets activists, women, and communities concerned with technology-facilitated violence. Technically, the site is built on Drupal 9 with modern web technologies, providing a responsive and accessible user experience. However, some technical aspects such as DNSSEC and security headers could be improved to enhance security. The security posture is moderate with domain management practices that prevent unauthorized changes but lacks published security policies or incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is credible and trustworthy, with a clear mission and consistent branding, but could benefit from enhanced security and privacy practices.

T

Technische Universität Hamburg (TU Hamburg)

stuhhdium.de

11

Technische Universität Hamburg (TU Hamburg) is a reputable public university specializing in engineering and technology education with a strong emphasis on addressing climate change challenges. The website provides comprehensive information about their Bachelor and Master programs, dual study options, research focus, and student life. It targets prospective students, including international candidates, offering detailed program descriptions and support resources. The university maintains an active presence on major social media platforms and integrates modern web technologies to deliver a professional and engaging user experience. The site is GDPR compliant with a clear cookie consent mechanism and privacy policy. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website reflects a trustworthy and well-established educational institution with a strong digital presence.

H

High Value Biorenewables Network

highvaluebiorenewables.net

62

The High Value Biorenewables Network (HVB) is a UK-based academic and industry collaboration network focused on industrial biotechnology and bioenergy, supported by the BBSRC. The website serves as a hub for promoting bio-based chemical development, facilitating partnerships, and providing leadership within the UK biotechnology community. The site is professionally designed, mobile-optimized, and uses modern web technologies including SeeCMS, jQuery, and Google Analytics for user tracking. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website's affiliations with reputable institutions like the University of York and BBSRC lend credibility. Privacy and cookie policies are present but basic, and no direct contact emails or phone numbers are provided on the site, limiting direct communication channels. Security posture is moderate with no visible security headers or incident response information, suggesting room for improvement in security transparency and best practices.

I

IT- NUM

it-num.com

44

IT- NUM is a small digital services company specializing in custom web development, cloud infrastructure, IT consulting, hosting, domain registration, and training services. The company positions itself as a digital partner focused on delivering tailored IT solutions primarily targeting businesses seeking digital transformation. The website content is professionally presented with modern front-end technologies, indicating a moderate level of digital maturity. However, the absence of privacy policies, cookie consent mechanisms, and contact information suggests gaps in compliance and user engagement. Security posture is weak due to lack of HTTPS enforcement and missing security headers, exposing potential risks. Overall, the website is functional and informative but requires significant improvements in security and compliance to enhance trust and protect user data.

M

Marinemuseum

marinemuseum.nl

64

Marinemuseum is a well-established maritime museum located in Den Helder, Netherlands, dedicated to showcasing the history and world of the Royal Netherlands Navy. The website offers rich content including exhibitions, educational programs, and visitor information, targeting families, education sectors, and maritime enthusiasts. It holds a strong market position as a leading cultural institution in the maritime domain. Technically, the website is built on WordPress with modern technologies such as Algolia search, Google Tag Manager, and Microsoft Clarity, ensuring good performance, SEO, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and headers. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

T

The Document Foundation

libreoffice.org

53

The Document Foundation operates LibreOffice, a leading free and open source office suite that serves a broad audience including individual users, businesses, and the open source community. The website reflects a mature, well-established project with a strong community focus and non-profit backing. Key services include software distribution, community support, professional support, and extensive documentation. The project positions itself as a successor to OpenOffice with compatibility for Microsoft Office formats. Technically, the website is built on the SilverStripe CMS platform, utilizing modern frontend frameworks such as Bootstrap and Font Awesome, with privacy-conscious analytics via Piwik/Matomo. The site is mobile optimized and well-structured, though some accessibility features could be improved. Performance is moderate with room for optimization. Security posture is generally good with HTTPS usage and no visible sensitive data exposure. However, the absence of explicit security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, which is common for open source projects but limits domain trust verification. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, publishing vulnerability disclosure policies, and improving accessibility and performance.

N

Nationaal Militair Museum

nmm.nl

66

The Nationaal Militair Museum is a prominent Dutch national museum dedicated to military history, offering a wide range of exhibitions, educational programs, and events. It serves a broad audience including families, schools, veterans, and military enthusiasts. The museum holds a strong market position as the largest military collection in the Netherlands and operates as a non-profit cultural institution. Technically, the website is built on WordPress with modern technologies such as Algolia Search, Google Tag Manager, and Bing Ads, ensuring fast performance, mobile optimization, and excellent SEO. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, providing clear contact and legal information. The domain registration aligns well with the museum's identity, supporting legitimacy.

A

ACLU of Oregon

aclu-or.org

69

The ACLU of Oregon is a well-established non-profit organization dedicated to protecting civil rights and liberties within the state of Oregon. As an affiliate of the national ACLU, it focuses on legal advocacy, policy reform, public education, and community engagement. The website reflects a professional and consistent brand image, targeting residents, activists, and donors interested in social justice and civil liberties. Technically, the site is built on Drupal 7 with modern JavaScript libraries and analytics tools, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and anti-spam measures, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's legitimacy given its affiliation and content quality. Overall, the site is trustworthy, safe, and well-positioned to serve its audience.

G

galledia group ag

galledia-group.ch

48

The galledia group ag is the largest independent media company in Eastern Switzerland, offering regional and thematic information across print, digital, and online media channels. Their business model focuses on media publishing and advertising, serving a regional audience with a portfolio of newspapers and online portals. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site is built on Drupal 9 with modern JavaScript libraries, providing good mobile optimization and accessibility. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms are areas for improvement. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

ABX Music, operated by FAST ČR, a.s., is a Czech Republic-based retailer specializing in musical instruments such as electric guitars, bass guitars, cymbals, and accessories. The company targets musicians ranging from beginners to advanced players, offering quality products at affordable prices. The website reflects a small retail business with a focus on product presentation and partner collaborations. Technically, the site uses legacy JavaScript libraries like jQuery 1.7.2 and Modernizr, with Google Analytics for visitor tracking. The site lacks modern CMS indicators and advanced frameworks, suggesting a basic technical infrastructure. Security posture is limited, with no visible HTTPS enforcement or security headers in the provided data, and outdated libraries that may pose risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information is limited to phone and physical address, with no email or social media presence detected. WHOIS data is unavailable, reducing domain legitimacy verification and trust. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

L

La Vie Claire

lavieclaire.com

38

La Vie Claire is a well-established French retail company specializing in organic food and products, with a history dating back to 1948. It operates over 340 stores across France and offers a broad range of organic groceries, cosmetics, and household items. The company emphasizes sustainability, local sourcing, and environmental responsibility, positioning itself as the second largest specialized organic distribution chain in France. The website reflects a mature digital presence with comprehensive content, strong branding, and active social media engagement. Technically, the website is built on WordPress with modern libraries such as Gravity Forms, Swiper.js, and jQuery. It employs SEO best practices, accessibility features, and performance optimizations including WP Rocket. Cookie consent and privacy compliance mechanisms are implemented effectively. However, the WHOIS data for the domain is unavailable, which is unusual for a large retail brand and slightly reduces trust. Security posture is generally good with HTTPS enforced and CAPTCHA protections on forms, but lacks published security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie management are comprehensive and GDPR compliant. Overall, the website is professional, secure, and user-friendly, serving its target audience well. Strategic improvements in transparency around domain registration and security policies would enhance trust and compliance further.

Wohngemeinschaft Falkennest is a Swiss non-profit organization providing protected living spaces and social rehabilitation services for young adults aged 18 to 30 facing social difficulties. It operates under the oversight of the Basel-Landschaft canton government and is part of the Stiftung Jugendsozialwerk Blaues Kreuz BL. The website is professionally designed, content-rich, and targets clients, volunteers, and stakeholders in social services. Technically, the site uses a modern JavaScript stack with frameworks such as webIQ and Bootstrap, ensuring good mobile optimization and user experience. Security posture is moderate with room for improvement in HTTP security headers and explicit security policies. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, the domain and website present a trustworthy and legitimate entity with strong Swiss social service credentials.

F

Flight Safety Foundation

flightsafety.org

55

Flight Safety Foundation is a well-established, independent non-profit organization dedicated to advancing aviation safety globally through research, education, advocacy, and publishing. With over 80 years of history, it holds a strong market position as a trusted leader in the aviation safety sector, serving aviation professionals and stakeholders worldwide. The website reflects this professionalism with comprehensive content, clear navigation, and a consistent brand presence supported by partnerships with major aviation and aerospace companies. Technically, the website is built on WordPress using modern plugins and frameworks such as Elementor and Yoast SEO. It leverages Amazon AWS for hosting and integrates Google Analytics and Tag Manager for user tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is secure, professional, and trustworthy, with minor improvements recommended in security headers, DNS security, and privacy consent mechanisms to further strengthen its posture.

A

ASM Global

asmglobal.com

74

ASM Global is a leading global venue and event management company specializing in managing stadiums, arenas, convention centers, theaters, and unique venues worldwide. The company operates over 450 premier venues across five continents, delivering live experiences in sports, music, entertainment, and business sectors. ASM Global's business model focuses on best-in-class management, diversified revenue streams, advisory and investing services, and innovative hospitality solutions. The website reflects a mature digital presence with comprehensive content, clear branding, and a professional user experience. Technically, the website employs a modern technology stack including AngularJS, jQuery, Google Tag Manager, and various performance and accessibility tools. It uses HTTPS with good SSL configuration and integrates cookie consent management via Osano, demonstrating attention to privacy compliance. Analytics tools such as Google Analytics and Microsoft Clarity are used for user behavior insights, with moderate user tracking levels and GDPR compliance indicators. Security posture is solid with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and incident response information suggests room for improvement. The WHOIS data for the domain is unavailable for the 'www' subdomain, which is a minor concern but likely due to querying the wrong domain variant. Overall, the website is trustworthy, professional, and compliant with privacy standards. Strategic recommendations include enhancing security headers, publishing explicit security policies and incident response contacts, auditing third-party scripts regularly, and improving accessibility features. These steps will strengthen the security posture and trustworthiness of ASM Global's digital presence.

T

Týdeník Euro

tydenikeuro.cz

48

Týdeník Euro is a Czech media company operating a professional news and magazine website focused on economic, political, and cultural topics. The site offers subscription services, podcasts, and events, targeting a general Czech audience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Stripe for payments, and Google Analytics for tracking. The site is mobile optimized and uses cookie consent mechanisms to comply with GDPR. Security posture is good with HTTPS enforced and secure login forms, though some security headers are missing and WHOIS data is unavailable, limiting domain trust verification. Overall, the website is professional, content-rich, and compliant with privacy regulations, but could improve transparency by publishing security policies and contact details.