Security Directory

C

Clúster de Movilidad y Logística de Euskadi

mlcluster.com

52

Clúster de Movilidad y Logística de Euskadi is a well-established regional business association founded in 2010, focused on enhancing competitiveness in the Basque Country's mobility and logistics sectors. The organization promotes innovation, cooperation, and sector promotion among its members, which include companies and agents in logistics, supply chain, infrastructure, and mobility. The website reflects a professional and consistent brand presence with multilingual support and active content updates including news and events. Technically, the site is built on WordPress with modern plugins and SEO tools, delivering a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS, domain transfer protection, and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is good with visible cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy and credible, supporting the cluster's business objectives effectively.

I

IT2GO s.r.o.

farnost.cz

60

The website farnost.cz represents IS OMNIA, a specialized modular information system designed for parish management in the Czech Republic. The platform offers a web module for parish websites, mobile applications for priests and parishioners, and integrated management features such as mass intentions and schedules. The business is operated by IT2GO s.r.o., a small Czech company with a domain age dating back to 2000, indicating established presence and experience in this niche market. The site is professionally designed with clear navigation and consistent branding, targeting parish communities and clergy. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Matomo analytics, hosted with WEDOS and using Cloudflare DNS services. The site is mobile-optimized and provides a good user experience, though accessibility features are basic. Performance is moderate, and SEO practices are basic but adequate for the target audience. From a security perspective, the site uses HTTPS (implied by Cloudflare DNS and modern setup), includes CAPTCHA on its contact form to prevent spam, and uses Matomo for analytics to reduce privacy concerns. However, no explicit security headers were detected in the provided data, and no cookie consent mechanism is present despite analytics usage. There is no published incident response or security policy, and no direct contact emails or phone numbers are provided, which could limit user trust and support responsiveness. Overall, the website is safe, professional, and trustworthy for its intended audience, with room for improvement in security headers, privacy compliance, and contact transparency. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic enhancements in security posture and privacy practices would further strengthen the platform's credibility and compliance.

Ing. Jiří Škoda operates a professional software development and web design service based in the Czech Republic. The website showcases a portfolio of projects and emphasizes custom software solutions, modern websites, and web applications tailored to client needs. The business targets clients seeking bespoke digital solutions with a focus on quality, clean code, and customer support. Technically, the website employs a modern tech stack including PHP, Symfony, Java, Spring, Vaadin, and front-end technologies like HTML5, CSS3, Bootstrap, and JavaScript frameworks. The site is hosted by REG-WEDOS, a Czech registrar, and uses HTTPS with Google reCAPTCHA for form security. Security posture is good but could be improved with additional HTTP security headers and explicit incident response information. Privacy compliance is addressed with GDPR consent and a cookie policy. Overall, the site is professional, well-structured, and trustworthy with minimal tracking and no advertising.

P

Primary Engineer

primaryengineer.com

56

Primary Engineer is a UK-based not-for-profit educational organization focused on bringing engineering into primary school classrooms. Established since 2005, it serves children, pupils, teachers, parents, and engineers with various educational programs, competitions, and qualifications. The website is professionally designed, well-branded, and provides comprehensive content relevant to its mission. Technically, the site is built on WordPress hosted on WPEngine, utilizing modern plugins and frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency but does not detract from the site's apparent legitimacy based on content and social presence. Overall, the site is trustworthy and well-positioned in the education sector.

E

endboss

stadtlabor-wittenberg.de

44

Stadtlabor Wittenberg is a community-focused non-profit initiative aimed at fostering participatory urban development and cultural engagement in the Lutherstadt Wittenberg area. The project provides a physical space for collaboration, events, and workshops, managed by the interdisciplinary studio endboss. The website effectively communicates its mission, event calendar, and contact information, targeting local residents and community members interested in shaping their city's future. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some security headers and formal privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

R

RNDr. Miloš Vystrčil | Senátor | Senátní obvod č. 52 – Jihlava

vystrcil.cz

47

The website www.vystrcil.cz represents Miloš Vystrčil, the chairman of the Senate of the Czech Republic and a senator for district 52 – Jihlava. It serves as a political and informational platform providing news, biography, calendar events, and press releases related to his political activities. The site targets Czech citizens, particularly voters in his senatorial district, and functions primarily as a communication channel for his political work. Technically, the website is built on WordPress, utilizing common plugins for SEO, GDPR compliance, and user interaction such as contact forms. The site is well-structured, mobile-optimized, and uses HTTPS, indicating a modern and secure infrastructure. Security posture is adequate but could be improved by implementing additional security headers and publishing a vulnerability disclosure policy. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned policies. Overall, the site is professional, trustworthy, and serves its purpose effectively as a political communication tool.

V

vedos.cz

vedos.cz

57

VEDOS.cz is a well-established Czech web hosting and domain registration provider founded in 2010. It serves over 300,000 customers, offering services including webhosting, domain registration, servers, and mailhosting. The company positions itself as a leading hosting provider in the Czech market with competitive pricing and reliable service. Technically, the website is built on WordPress using the Astra theme and integrates modern tools such as Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features. Security-wise, the website enforces HTTPS, uses reCAPTCHA, and implements cookie consent mechanisms, though it lacks a publicly available security policy or incident response information. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, VEDOS.cz demonstrates a mature digital presence with strong business credibility and a solid security posture.

W

West Virginia Radio Corporation

wvrcmedia.com

55

WVRC Media is a well-established media company serving West Virginia with a broad portfolio including radio broadcasting, statewide news and sports network, video production, and digital marketing services. The company targets businesses and audiences within West Virginia, leveraging decades of experience and multiple media platforms to grow local businesses. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with common plugins and integrations, hosted on A2 Hosting, and shows moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security headers and published security policies. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the website presents a credible and professional digital presence for WVRC Media.

Z

Zeller + Gmelin

zeller-gmelin.de

48

Zeller+Gmelin is a well-established German family-owned manufacturing company specializing in high-quality lubricants, printing inks, and process chemicals. Founded in 1866, it holds a strong market position as a leader in industrial lubricants and related chemical products, emphasizing sustainability and innovation. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support. Technically, it is built on WordPress with modern JavaScript frameworks and SEO tools, ensuring good performance and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site demonstrates high professionalism and trustworthiness, supporting the company's credibility and business operations.

C

CHARVÁT Pacovské strojírny, a.s.

pacovske.cz

54

CHARVÁT Pacovské strojírny, a.s. is a Czech engineering manufacturing company with a long tradition exceeding 140 years. The company specializes in customized design and production of complex technological units for pharmaceutical, food, chemical, energy, agricultural industries, and breweries. It holds a significant market position domestically and abroad, supported by ISO 9001 certification and a strong focus on quality. The website reflects a professional digital presence built on WordPress with multilingual support and GDPR compliance. Security posture is solid with HTTPS, CAPTCHA-protected contact forms, and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust verification, but the business content and contact information support legitimacy. Overall, the site is well-structured, mobile-optimized, and trustworthy for its industrial B2B audience.

I

ifii Institut für Innovations- und Informationsmanagement GmbH

ifii.eu

57

The ifii Institut für Innovations- und Informationsmanagement GmbH is an academic-affiliated institute linked to the Technische Hochschule Brandenburg, specializing in innovation and information management. The organization supports companies and public administration in designing future-proof business models, processes, and technologies, with a focus on targeted innovations. Their key services include innovation development, digital transformation consulting, and AI training with certification. The website is professionally designed, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and frameworks, hosted by IONOS SE, and employs HTTPS with good SSL configuration. Security posture is solid but could be improved by adding explicit security headers and incident response information. Privacy compliance is good, with clear privacy and cookie policies and GDPR adherence. Overall, the site is trustworthy and serves a specialized educational and consulting market segment.

M

Mittelstand-Digital Zentrum Berlin

digitalzentrum-berlin.de

48

Mittelstand-Digital Zentrum Berlin is a regional digitalization support center focused on assisting small and medium-sized enterprises (SMEs) in Berlin with their digital transformation efforts. The website offers information about events, workshops, digitalization offers, and informational materials, targeting the Mittelstand segment. The business model is based on providing free, neutral, and accessible support to SMEs, positioning itself as a trusted regional resource. Technically, the website is built on WordPress using Elementor as the page builder, enhanced with plugins such as Yoast SEO for search engine optimization, Events Calendar Pro for event management, and Borlabs Cookie for cookie consent management. The site is served over HTTPS with a good SSL configuration and moderate performance. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site employs HTTPS and a security plugin but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Recommendations include publishing comprehensive privacy and terms of service policies, enhancing security headers, and formalizing incident response and security policies to improve compliance and security posture.

P

ProjectNeverland

projectneverland.gr

58

ProjectNeverland is a small creative agency based in Athens, Greece, specializing in full-service graphic and web design solutions including branding, hosting, and digital media. The company showcases a professional portfolio with notable clients, emphasizing a balance between strategy and execution to deliver creative results. The website is built on Joomla CMS with modern web technologies and includes a contact form with spam protection. While the site enforces HTTPS and uses Google Analytics for tracking, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security headers are not detected, indicating room for improvement in security posture. Overall, the website presents a professional and trustworthy image consistent with a legitimate creative agency.

R

Regionální dobrovolnické centrum Pardubického kraje

dobrokraj.cz

46

The website dobrokraj.cz represents the Regionální dobrovolnické centrum Pardubického kraje, a regional volunteer center focused on coordinating and supporting volunteer activities within the Pardubický region of the Czech Republic. It provides news, advisory services, and a database of volunteer organizations, positioning itself as a key non-profit entity in the local social sector. The site is supported by governmental bodies including the Ministry of Interior and the Pardubický regional government, as well as corporate sponsors like Foxconn Česká republika. The business model is non-profit, targeting volunteers, volunteer organizations, and social service stakeholders in the region. Technically, the website is built on WordPress CMS with a modern tech stack including Bootstrap and jQuery, and uses common plugins such as Revolution Slider and MonsterInsights for analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies or incident response information. Analytics usage is moderate with anonymized IP tracking via Google Analytics. Security-wise, the site shows good practices but could improve by adding security headers, a security policy, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The domain registration is consistent with the business history and shows no suspicious patterns, enhancing trustworthiness. Overall, dobrokraj.cz is a professionally maintained, regionally focused non-profit website with good content quality and compliance with privacy regulations. Strategic improvements in security transparency and accessibility could further strengthen its posture.

D

Dobrovolnické centrum Koalice nevládek Pardubicka

dobrokonep.cz

46

Dobrovolnické centrum Koalice nevládek Pardubicka operates as a regional non-profit organization focused on recruiting and coordinating volunteers for non-profit and contributory organizations within the Pardubický region of the Czech Republic. The website serves as a platform to connect volunteers with various social and community projects, providing detailed volunteer opportunities and supporting materials. The organization is supported by notable partners including the Ministry of Interior of the Czech Republic and Foxconn Česká republika, enhancing its credibility and regional influence. Technically, the website is built on WordPress CMS, utilizing modern web technologies such as Bootstrap, jQuery, and popular plugins like Revolution Slider and Owl Carousel. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. Google Analytics is implemented with anonymized IP tracking and user consent. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks some advanced security headers such as Content-Security-Policy and X-Frame-Options. No vulnerability disclosure or security policy pages are present, indicating room for improvement in security transparency and incident response readiness. Overall, the website is professional, trustworthy, and serves its non-profit mission effectively. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen the site's security posture and compliance.

O

Obec Kamenný Přívoz

kamennyprivoz.cz

49

Obec Kamenný Přívoz operates as the official municipal government website for the village of Kamenný Přívoz in the Czech Republic. The site provides residents and visitors with local government information, community news, event calendars, and administrative documents. It serves a small population with a focus on local services and community engagement. The website is built on WordPress using a specialized municipal theme, indicating a moderate level of digital maturity suitable for local government needs. The technical infrastructure includes modern web technologies such as HTTPS, jQuery, and responsive design, ensuring accessibility and usability across devices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. The absence of WHOIS data from the CZ.NIC registry is a notable anomaly but does not detract from the apparent legitimacy of the site based on content and structure. Overall, the website is functional, trustworthy, and serves its intended audience effectively, though improvements in security and privacy compliance would enhance its posture.

H

Hvozdnice

hvozdnice.eu

42

Hvozdnice.eu is the official municipal website for the village of Hvozdnice in the Czech Republic. It serves as a community portal providing news updates, official documents, contact information, and public service announcements relevant to residents and visitors. The website is positioned as a local government informational resource with a focus on transparency and community engagement. The content is primarily in Czech and includes sections on urban planning, local governance, cultural events, and infrastructure projects. Technically, the site is built on WordPress with common plugins such as Yoast SEO and WPBakery Page Builder, indicating a moderate level of digital maturity. The site is mobile responsive and optimized for search engines, though accessibility features are basic. Security posture is good with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response information. Overall, the website is trustworthy and professionally maintained, suitable for its purpose as a municipal information portal.

Y

YMCA

ymca.cz

58

YMCA Czech Republic is a well-established non-profit organization focused on providing diverse youth and family activities, including clubs, camps, social services, and creative programs. The website reflects a mature digital presence with comprehensive content tailored to its target audience of young people, families, and volunteers. Technically, the site is built on WordPress with a modern theme and uses common libraries and Google Tag Manager for analytics. Security posture is good with HTTPS and security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for users.

S

Stadtwerke Böhmetal

swbt.de

65

Stadtwerke Böhmetal is a regional utility company based in Germany, providing essential energy services including electricity, gas, and water supply to residential and commercial customers in the Böhmetal region. The company positions itself as a reliable local energy provider with a focus on customer service and regional presence. Their website is built on the Neos CMS platform using the Flow PHP framework, indicating a modern and maintainable technical infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices and clear navigation. Security measures include HTTPS enforcement, standard security headers, and a GDPR-compliant cookie consent mechanism powered by Cookiebot. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust and transparency. Overall, the website reflects a professional and trustworthy business with moderate technical maturity and compliance with privacy regulations.

O

otris software AG

otris.de

68

otris software AG is a German-based technology company specializing in digital solutions for legal, compliance, and data protection management. With over 25 years of experience, the company offers modular software suites that enable enterprises to manage contracts, compliance workflows, risk, and data governance efficiently and securely. Their solutions are available as SaaS hosted in Germany or on-premises, integrating seamlessly with existing IT infrastructures. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting medium to large enterprises. Technically, the site is built on WordPress with modern performance and privacy tools such as WP Rocket and Borlabs Cookie for GDPR compliance. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, otris software AG presents a trustworthy and professional digital footprint aligned with its business objectives.

M

Mezinárodní hudební kurzy a společné muzicírování

hudebnikurzykrumlov.cz

40

The website hudebnikurzykrumlov.cz represents a newly established music education business focused on organizing international music courses and group music-making activities in Český Krumlov, Czechia. The business offers individual lessons and ensemble playing opportunities, targeting musicians and students interested in developing their skills in a friendly and inspiring environment. The site features detailed instructor profiles, event reports, and partner logos, reflecting a professional and regionally focused educational service. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, hosted likely by Webglobe. The site is mobile-optimized and presents a moderate performance level. However, some technical improvements are possible, including adding security headers and completing analytics configuration. The site uses HTTPS, ensuring encrypted communication. From a security perspective, the site has a good baseline with HTTPS but lacks advanced security headers and formal privacy or cookie policies, which are important for GDPR compliance. The Google Analytics plugin is present but not configured, indicating incomplete data collection setup. No vulnerability disclosures or incident response contacts are provided, which could be improved to enhance trust. Overall, the website is safe, professional, and relevant to its audience but would benefit from enhanced privacy compliance and security best practices. The domain registration is consistent with the business launch timeline, supporting legitimacy. Strategic recommendations include implementing privacy and cookie policies, configuring analytics properly, and adding security headers to improve the security posture and compliance.

W

WVRC Digital

wvrcdigital.com

51

WVRC Digital is a small digital marketing agency founded in 2021 and operating as a subsidiary of WVRC Media Company. The company specializes in a broad range of digital marketing services including consumer targeting, website development, video advertising, social media management, email marketing, SEO, pay per click, OTT media, and website chat solutions. Their target audience consists primarily of businesses seeking to establish or grow their digital presence. The website is professionally designed, consistent in branding, and provides clear service descriptions and client testimonials, positioning WVRC Digital as a credible regional player in the digital marketing sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted on A2 Hosting. It employs modern web technologies including Google Fonts, Font Awesome, Vimeo embeds, and Google Maps API. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. Cookie consent is implemented via CookieYes, and Google Analytics is used for user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain status clientTransferProhibited to prevent unauthorized domain transfers. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content, representing areas for improvement. No privacy policy or terms of service pages were found, which are important for compliance and user trust. Tracking pixels from ZoomInfo and Pearl Diver indicate moderate user tracking. Overall, WVRC Digital presents a professional and credible digital marketing service with a solid technical foundation but requires enhancements in privacy compliance and security best practices to strengthen its security posture and regulatory adherence.

O

otris software AG

otris.com

66

otris software AG is a German-based technology company specializing in digital solutions for legal, compliance, contract, and data protection management. Founded in 1998, the company offers a comprehensive suite of software products designed to help organizations act legally compliant, minimize risks, and create transparency through digital processes. Their market position is supported by a broad customer base including large corporations and SMEs across various industries. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the website is built on WordPress CMS with modern plugins and performance optimizations such as WP Rocket and Borlabs Cookie for consent management. The tech stack includes JavaScript libraries like jQuery and Slick Carousel, and the site integrates Google Tag Manager and Matomo for analytics. Mobile optimization and SEO practices are good, contributing to a fast and user-friendly experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not fully detected, and no public security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data is consistent with the company’s claims, showing a legitimate and appropriately aged domain. Overall, otris software AG demonstrates a strong business and technical foundation with good security and privacy compliance. Strategic improvements could include publishing a dedicated security policy, enhancing security headers, and providing incident response information to further strengthen trust and compliance.

A

AutoEder s.r.o.

autoeder.cz

54

AutoEder s.r.o. operates as a reputable automotive dealership specializing in Toyota and Lexus vehicles, offering new and used cars, authorized servicing, financing, leasing, and additional automotive services primarily in the Czech Republic. The company maintains a strong market position with a professional online presence, targeting car buyers and owners seeking premium automotive brands. The website demonstrates a mature digital infrastructure built on WordPress, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, alongside comprehensive cookie consent management to ensure GDPR compliance. Security measures include HTTPS enforcement, reCAPTCHA on forms, and security headers, contributing to a robust security posture. However, the absence of publicly available WHOIS data and a formal security policy page limits full trust verification. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, supporting the company's credibility and customer engagement.

P

Proemion

proemion.com

57

Proemion is a specialized technology company focused on telematics solutions for mobile machines and industrial assets. Their offerings include hardware gateways, cloud platforms, and analytics tools designed to provide real-time monitoring and predictive insights for OEMs, dealers, and equipment owners. The company positions itself as a trusted partner in the industrial telematics market with a strong international presence supported by multilingual website content and professional branding. Technically, the website is built on the Neos CMS platform using modern PHP frameworks and integrates multiple analytics and marketing tools with a strong emphasis on privacy compliance through Usercentrics consent management. Security posture is solid with HTTPS and strict Content-Security-Policy headers, though additional headers could enhance protection. The absence of WHOIS registration data is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, Proemion demonstrates a mature digital presence with good security and privacy practices, serving a B2B industrial technology market.

H

Hochschulnetzwerk NRW

hn-nrw.de

10

Hochschulnetzwerk NRW (HN NRW) is a regional network of 21 state and state-funded universities of applied sciences in North Rhine-Westphalia, Germany. The organization promotes applied research, interdisciplinary collaboration, and knowledge exchange between academia, politics, industry, and society. It is funded by the Ministry of Culture and Science of NRW and serves as a key platform for research dissemination and networking in the region. The website provides information on research projects, events, newsletters, and sustainability initiatives, targeting academic and professional audiences. Technically, the website is built on WordPress using the Avada theme and incorporates modern web technologies such as jQuery and Flexslider. It employs the Borlabs Cookie plugin for GDPR-compliant cookie management and uses HTTPS with a good security posture. The site is mobile-optimized and includes accessibility and SEO best practices, although some improvements in security headers and accessibility could be made. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, it lacks a published security policy, incident response contacts, and a security.txt file, which are recommended for enhanced transparency and vulnerability management. Overall, HN NRW's website is professional, trustworthy, and compliant with privacy regulations, serving its educational and research-focused mission effectively. Strategic recommendations include enhancing security policy transparency, implementing a security.txt file, and improving accessibility compliance to further strengthen its digital maturity and trustworthiness.

S

Soltau Therme

soltau-therme-online.de

69

Soltau Therme is a German regional wellness and leisure center offering a variety of services including sole baths, sauna, wellness treatments, swimming pools, and children's activities. The website reflects a well-structured and professionally maintained WordPress platform with modern plugins such as Yoast SEO, Events Manager, and Captcha EU, indicating a good level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content for its target audience. Security posture is solid with HTTPS enforced and captcha protection on forms, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Business credibility is supported by clear contact information and social media presence. Overall, the website is trustworthy and suitable for its hospitality sector audience.

S

SWING e.V.

karriereforum-mitteldeutschland.de

44

inovailmenau is a well-established, student-organized career forum affiliated with TU Ilmenau and operated by the non-profit SWING e.V. The website effectively communicates its mission to connect students with potential employers through career fairs, workshops, and presentations. Technically, the site is built on WordPress with a modern tech stack including jQuery, Ecwid for e-commerce, and AWS Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities, though improvements in security headers and incident response transparency are recommended. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy, professional, and serves its educational and networking purpose well.

E

EGroupware

egroupware.org

64

EGroupware is a German-based software company specializing in online collaboration and groupware solutions. Their offerings include a comprehensive suite of business applications such as calendar, contacts, tasks, project management, timesheets, and e-invoicing. The company targets businesses and organizations seeking efficient collaboration tools, providing both SaaS and on-premises deployment options. The website reflects a mature market position with a focus on privacy and German hosting standards. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile responsiveness, and SEO optimization. The use of Borlabs Cookie for consent management and WPML for multilingual support indicates a commitment to privacy and international reach. The site employs HTTPS with strong security headers, contributing to a robust security posture. Security-wise, while the site demonstrates good practices such as HTTPS enforcement and cookie consent, it lacks a publicly visible security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is privacy protected, which is typical for this business type and does not detract from legitimacy. Overall, EGroupware presents a professional, trustworthy, and secure online presence suitable for its business model. Strategic improvements could include publishing a dedicated security policy and incident response contacts to enhance transparency and trust.

O

Office des Sports de Strasbourg

ods67.com

60

Office des Sports de Strasbourg (ODS67) is a well-established non-profit organization dedicated to promoting and supporting sports activities and clubs in the Strasbourg region. Founded in 2003, it serves as a central hub for sports events, club directories, volunteer coordination, and community engagement. The website reflects a strong local presence with comprehensive resources for sports enthusiasts and residents. Technically, the website is built on WordPress using modern plugins such as Advanced Custom Fields Pro and WP Rocket for performance optimization. It employs HTTPS with a good SSL configuration and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site follows basic best practices including HTTPS enforcement and domain transfer protection. However, it lacks DNSSEC and does not publish explicit security or incident response policies, which are areas for improvement. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Overall, the website is professional, trustworthy, and serves its community effectively. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and implementing a security.txt file to improve transparency and security posture.

F

FastPixel

fastpixel.io

49

FastPixel is a cloud-based WordPress plugin focused on website speed optimization through caching, image optimization, minification, and CDN integration. Backed by the reputable ShortPixel team, it targets WordPress site owners seeking an easy-to-use, all-in-one performance solution. The website demonstrates a modern technical infrastructure leveraging WordPress, Cloudflare DNS, and Google marketing tools. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies are not explicitly published. Overall, the site is professional, trustworthy, and well-positioned in the WordPress optimization market.

A

ADOL Monitor s.r.o.

monitordrazeb.cz

53

ADOL Monitor s.r.o. is a Czech Republic based company specializing in providing monitoring services for real estate investments, focusing on distressed properties such as auctions, executions, and insolvencies. With over 10 years of market presence, the company offers unique map-based applications and daily updated data to investors and real estate professionals. Their business model includes subscription-based monitoring services and educational seminars led by industry experts. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services, team, and client testimonials, establishing a trustworthy market position. Technically, the website is built on WordPress CMS with a modern technology stack including Bootstrap, jQuery, and various plugins for enhanced functionality. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes, and employs a cookie consent mechanism ensuring GDPR compliance. The site demonstrates good SEO practices and moderate performance with room for improvement in accessibility. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent for privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and should be added to strengthen security posture. No visible vulnerabilities or exposed sensitive data were found. The WHOIS data is unavailable, which reduces transparency, but the website content and business details support legitimacy. Overall, ADOL Monitor presents a professional and secure online presence suitable for its target audience. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and documenting incident response policies to further improve trust and compliance.

M

manzelskamediace.cz

manzelskamediace.cz

39

The website manzelskamediace.cz is a small Czech service provider specializing in marital mediation, helping couples resolve conflicts and relationship crises through voluntary and confidential mediation processes. The business appears to be newly established in 2023 and targets married couples or those in relationship difficulties. The website is built on WordPress using the Astra theme and incorporates the Smart Slider 3 plugin for visual content. Hosting is provided by REG-WEBGLOBE, a Czech hosting provider, consistent with the website's local focus. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. No analytics or tracking scripts are detected, indicating minimal user tracking. Contact information includes a company email but lacks phone numbers or physical addresses in the provided content. Overall, the website is professionally designed with good user experience and navigation but requires improvements in privacy compliance and security best practices.

The website www.loretarumburk.cz serves as the official online presence for the Loreto Chapel in Rumburk, a significant Baroque cultural and religious site in northern Bohemia, Czech Republic. It provides detailed information about the chapel's history, visitor services including tours, exhibitions, and religious ceremonies, targeting families, tourists, and pilgrims. The site is managed by the Roman Catholic Parish Rumburk and offers multilingual content to accommodate international visitors. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Slider Revolution and WPBakery Page Builder. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. The site demonstrates moderate performance and good mobile optimization but lacks advanced security headers and privacy compliance mechanisms. From a security perspective, the site has a good baseline with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, it lacks privacy and cookie policies, which are critical for GDPR compliance. There is no evidence of an incident response policy or vulnerability disclosure mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is a trustworthy and professional cultural heritage portal with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

C

Centrum pro rodinu a sociální péči

familypoint.cz

44

FAMILY POINT místo pro rodinu® is a Czech non-profit organization providing family-friendly public spaces and services to support childcare and family life. Established in 2009, it operates a network of Family Points offering practical childcare facilities, information, and community events. The website reflects a well-maintained digital presence with clear branding and comprehensive content aimed at families and local communities. Technically, the site is built on WordPress with modern plugins and themes, offering good mobile responsiveness and user experience. Security posture is solid with HTTPS enforcement and cookie consent compliance, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and professionally managed.

Winhost is a specialized web hosting provider focusing on Microsoft Windows hosting environments, particularly ASP.NET and .NET Core applications. The company offers a range of hosting plans tailored to different customer needs, including shared hosting, managed WordPress hosting, and private SQL server hosting. Their market position is that of a niche provider catering to developers and businesses requiring Windows-based hosting solutions. The website demonstrates a professional and consistent brand presence with clear service offerings and customer testimonials, supported by a strong TrustPilot rating.

B

Bobyhall.cz

bobyhall.cz

43

Bobyhall.cz operates as a multifunctional sports, cultural, and entertainment complex located in Brno, Czech Republic. The website presents a professional and well-structured platform showcasing event spaces, restaurant services, and cultural programming. The business targets a general audience interested in hosting or attending events in a versatile venue. The domain age and WHOIS data align well with the business claims, supporting legitimacy. Technically, the site is built on WordPress using the Avada theme and integrates modern plugins for GDPR compliance and social media feeds. Analytics and marketing tools include Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and incident response contacts suggests room for improvement. Overall, the website is trustworthy, compliant with privacy regulations, and professionally maintained.

A

AGRION – Združenie dodávateľov pôdohospodárskej techniky v SR

agrion.sk

41

AGRION is a Slovak association representing suppliers and manufacturers of agricultural, food processing, and forestry machinery. The organization serves as a platform for domestic producers and foreign representatives, providing industry statistics, organizing events, and facilitating member networking. The website reflects an established presence with a domain registered since 2012 and active content focused on industry news and events. Technically, the site is built on WordPress with common plugins such as Contact Form 7 and Yoast SEO, hosted likely by Websupport, and uses modern technologies including Google Analytics and reCAPTCHA for security. Security posture is solid with HTTPS and DNSSEC enabled, though lacks some advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, content-rich, and trustworthy for its target audience.

Z

ZMK Kassel

zmk-kassel.com

57

ZMK Kassel is a modern dental practice located in Kassel, Germany, offering a wide range of dental services including implantology, prophylaxis, endodontics, and aesthetic dentistry. The website presents a professional image with detailed service descriptions and emphasizes prevention and high-quality care. The business targets patients in the Kassel region and operates multiple specialized departments with over 40 years of combined experience. Technically, the website is built on WordPress using WPBakery Page Builder, hosted by Hetzner Online GmbH, and employs modern web technologies including HTTPS and Google Fonts. The site is mobile optimized and SEO friendly with structured data implemented. Security posture is good with HTTPS and cookie consent mechanisms in place, though some security headers and DNSSEC are missing. Privacy compliance is partial due to the absence of a visible privacy policy page. Overall, the website is trustworthy and professional, with minor improvements recommended in privacy and security disclosures.

F

Freiwillige Feuerwehr Höchstadt

feuerwehr-hoechstadt.de

45

The website represents the Freiwillige Feuerwehr Höchstadt, a volunteer fire department in Höchstadt, Germany, providing community emergency services and information about their operations, equipment, and events. The site targets local residents and volunteers, serving as an informational portal for the fire department and its associated club. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, with several plugins supporting organizational charts, event calendars, and social media feeds. The hosting appears to be provided by a German hosting provider (1&1 IONOS), consistent with the local focus. Security posture is moderate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no dedicated privacy policy or terms of service pages found. Overall, the site is safe, professional, and well-structured but could improve in privacy and security documentation to enhance trust and compliance.

H

Hansestadt Lüneburg

hansestadt-lueneburg.de

59

Hansestadt Lüneburg operates an official municipal website providing comprehensive information and services to its citizens and visitors. The site covers a broad range of topics including local government, administration, climate protection, culture, and public services. It serves as a primary communication channel for the city, offering news, event information, and access to online administrative services via a dedicated service portal. The website targets residents, local businesses, and tourists, positioning itself as a trusted and authoritative source for city-related information. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, enhanced with modern JavaScript libraries such as jQuery, Alpine.js, and Mapbox GL for interactive maps. Accessibility is a priority, demonstrated by the integration of Eye-Able tools. The site is mobile-optimized and employs standard SEO practices including structured data (JSON-LD) and Open Graph metadata. Hosting appears stable with dedicated name servers, and HTTPS is enforced ensuring secure communications. From a security perspective, the website demonstrates good practices including HTTPS, cookie consent mechanisms, and no visible sensitive data exposure. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the provided content. Overall, the website is professional, secure, and compliant with GDPR requirements, providing a positive user experience and reliable business credibility. Strategic recommendations include publishing a security policy, incident response details, and a vulnerability disclosure framework to further strengthen security posture and user trust.

J

Jade-Weser-Park

jadeweserpark.de

42

The website jadeweserpark.de represents a small-scale business or organization based in Germany, as indicated by the domain and language usage. The site is built on WordPress using the Astra theme and Elementor page builder, reflecting a moderate level of digital maturity. The technical infrastructure is standard for small business websites, with modern technologies and a cookie consent mechanism implemented to comply with GDPR requirements. However, the site lacks explicit privacy policies, terms of service, and detailed business or contact information, which limits its transparency and user trust. Security posture is adequate with HTTPS enabled and cookie consent in place, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is functional but basic, with moderate risks related to compliance and security best practices.

S

SWING e.V.

inova-ilmenau.de

43

inovailmenau is a well-established, student-organized career forum hosted at TU Ilmenau, Germany, serving as a key platform for students and companies to connect. The website effectively communicates event details, organizational background, and partnership information, targeting students and alumni seeking career opportunities. Technically, the site is built on WordPress with a modern tech stack including jQuery, Ecwid for e-commerce, and AWS Cloudfront CDN for content delivery. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and some security headers present, but lacks advanced security policies such as CSP and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency.

Bücherei St. Lamberti Ochtrup is a small local public library in Germany offering a wide range of educational and community services including media lending, workshops, and digital catalog access. The website is well-structured, informative, and targets a broad audience including children, families, and schools. The library emphasizes media literacy and community engagement through events like robotics workshops and puzzle exchanges. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, hosted by a German provider, and employs HTTPS for secure communication. The site is mobile-optimized and provides clear navigation and contact information. Security posture is good with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. No forms or analytics scripts were detected, indicating minimal data collection. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security headers are recommended.

H

H1

h1.co

11

H1 is a leading healthcare data and analytics company focused on connecting life sciences, pharmaceutical companies, health plans, and digital health organizations with healthcare professionals globally. Their platform provides comprehensive data on over 11 million healthcare professionals, enabling clients to accelerate clinical trials, optimize medical affairs, and improve patient care. The company is positioned as a trusted partner with over 250 leading customers, including major pharma and healthcare organizations. Technically, the website is built on WordPress with integrations to HubSpot, Vimeo, and various marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though a dedicated security policy and incident response contacts are not publicly available. Overall, the site is professional, well-branded, and compliant with privacy regulations such as GDPR.

S

SunshineMD

sunshinemddata.com

53

SunshineMD operates a specialized healthcare data platform providing a near census of active US clinical trial investigators since 2013. Their service focuses on delivering documented investigator experience and enrollment performance data to pharmaceutical sponsors and CROs, enabling data-driven site selection and improved clinical trial outcomes. The company leverages authoritative data sources such as Open Payments and ClinicalTrials.gov, and validates its data accuracy through correlation with internal sponsor and CRO datasets. Technically, the website is built on WordPress with Elementor, integrating marketing and analytics tools like HubSpot and Google Analytics. The security posture is adequate with HTTPS and domain transfer protections, though improvements such as DNSSEC and security.txt publication are recommended. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website is professional, content-rich, and trustworthy, targeting clinical research professionals and sponsors.

S

Simulations Plus, Inc.

simulations-plus.com

77

Simulations Plus, Inc. is a specialized technology company focused on providing advanced biosimulation software and consulting services that support drug discovery through commercialization. Their offerings integrate AI, machine learning, pharmacokinetics, and pharmacometrics to serve pharmaceutical, biotechnology, academic, and regulatory clients. The company positions itself as a niche leader with a medium-sized business footprint, founded in 2016, and maintains a professional and content-rich website that effectively communicates its expertise and services. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Matomo Analytics, and marketing tools like Marketo and Hotjar. The site is well-optimized for SEO, mobile-friendly, and demonstrates good accessibility standards. Performance is moderate, with room for improvement in hosting and speed optimizations. From a security perspective, the site enforces HTTPS and implements basic security headers and cookie consent mechanisms. However, it lacks comprehensive security policies, incident response information, and vulnerability disclosure mechanisms. The absence of WHOIS registration data is a concern but does not negate the legitimacy of the business given the professional web presence and social media links. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security transparency and WHOIS data visibility would enhance trust and compliance posture.

T

TrialHub by FindMeCure

trialhub.com

64

TrialHub by FindMeCure is a healthcare-focused technology company specializing in providing a data-driven platform for smarter clinical trial planning. Their platform offers real-time data on feasibility, patient pathways, and site performance, targeting clinical trial planners and pharmaceutical companies. The company is positioned as a niche B2B SaaS provider in the clinical trial analytics market. Technically, the website is built on WordPress using the Astra theme and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, Intercom, and LinkedIn Insight Tag, indicating a mature digital marketing infrastructure. Security-wise, the site uses HTTPS and has domain registration protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from improved privacy disclosures and security enhancements.

Bücherei St. Lamberti Ochtrup is a local public library in Germany offering a wide range of educational and community services including media lending, robotics workshops, 3D printing, and digital media access. The library actively engages with its community through events and innovative programs such as puzzle exchanges and coding activities, positioning itself as a modern educational hub. The website is built on the Neos CMS platform using the Flow PHP framework, reflecting a modern and maintainable technical infrastructure. It is hosted on servers associated with online-now.de and uses HTTPS for secure communication. Security posture is good with no visible vulnerabilities or exposed sensitive data, though security headers are not detected and could be improved. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Contact information and social media links are clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-suited for its target audience.

S

Stadt Dorsten

schluesselposition.de

54

The website schluesselposition.de serves as the official career portal for the city of Dorsten, Germany, providing job listings and employer information for public sector positions. It targets job seekers interested in municipal and public administration roles, emphasizing the importance of each position within the city administration. The site is well-branded and consistent with the city's official identity, offering a professional and trustworthy user experience. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript libraries such as jQuery, Slick Carousel, and SweetAlert2 enhancing interactivity. Hosting is provided by Hetzner, a reputable German hosting provider. The site includes Matomo analytics for privacy-conscious user tracking but lacks a cookie consent mechanism. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the site is a reliable and professional municipal career portal with good content quality and technical implementation. Strategic improvements in privacy compliance and security best practices would further strengthen its trustworthiness and user confidence.