Security Directory

U

Univention GmbH

univention.com

59

Univention GmbH is a German-based company specializing in open source Identity and Access Management (IAM) solutions primarily targeting the education sector and public administration. With over 20 years of experience and managing 35 million identities, Univention offers scalable, secure, and user-friendly IAM products such as Nubus, UCS@school, and UCS. Their business model focuses on providing software solutions, integration packages, and support services to organizations seeking digital sovereignty and efficient IT management. The company maintains a strong market position with a medium-sized footprint and a clear focus on open source transparency and reliability. Technically, the website is built on WordPress CMS with modern plugins like WPBakery Page Builder, Matomo Analytics for privacy-respecting tracking, and Borlabs Cookie for consent management. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security best practices are observed with HTTPS enforcement, security headers, and no visible vulnerabilities. However, explicit security policies and incident response information are not publicly disclosed. The security posture is strong with good SSL configuration and privacy compliance, including GDPR-aligned privacy and cookie policies. Contact information is available via phone and contact forms, enhancing business credibility. The absence of WHOIS data for the domain reduces trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and consistent branding. Overall, Univention GmbH presents a trustworthy and professional online presence with a focus on secure, open source IAM solutions for institutional clients. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure mechanisms to further enhance trust and compliance.

Centrum psychologické pomoci (CEPP) is a Czech non-profit organization providing psychological and social support services, including foster care assistance and counseling. The organization is regionally funded and collaborates with various social and educational partners, positioning itself as a trusted regional social service provider. The website reflects a mature digital presence built on WordPress, with modern plugins supporting galleries, testimonials, and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is professional, compliant, and trustworthy, serving a general audience seeking social and psychological assistance.

R

Renarkon

renarkon.cz

47

Renarkon is a well-established Czech non-profit organization specializing in the prevention and treatment of addiction. Operating since 2003, it serves primarily the Moravian-Silesian region, offering a range of services including addiction treatment, accredited education for professionals, and participation in European projects. The organization maintains a transparent funding model with visible donation options and certifications, positioning itself as a trusted regional leader in healthcare services related to addiction. Technically, the website is built on WordPress with modern plugins such as Spectra Pro and Complianz GDPR for cookie management, ensuring compliance with European privacy laws. The site demonstrates good performance, mobile optimization, and basic accessibility features. Hosting appears to leverage Redis caching for enhanced speed. The technical infrastructure supports a professional online presence with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, reflecting a good security posture. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for further strengthening. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, Renarkon’s website reflects a credible, professional, and compliant organization with a strong focus on user privacy and content quality. Strategic improvements in security transparency and incident response readiness would enhance trust and resilience against emerging threats.

A

Association for Comprehensive NeuroTherapy

latitudes.org

47

The Association for Comprehensive NeuroTherapy operates a well-established website focused on natural and integrative approaches to neurological and behavioral problems. The organization targets parents, teachers, and individuals seeking educational resources, offering memberships, digital products, and community forums. The website is positioned as a niche non-profit with a strong content offering and active social media presence. Technically, the site is built on WordPress with a modern theme and plugins, including Bootstrap and jQuery. It is mobile-optimized and SEO-friendly, employing structured data for enhanced search visibility. The hosting provider is not explicitly identified, but the domain is registered with GoDaddy and has a long history dating back to 1997. From a security perspective, the site uses HTTPS and reCAPTCHA, but lacks DNSSEC and explicit security headers, which are recommended for improved protection. No privacy or cookie policies were found, indicating a gap in compliance with privacy regulations such as GDPR. User tracking is moderate via Google Analytics and social sharing tools. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security hardening to better protect users and improve trustworthiness.

C

Culligan Storkök AB

3s.nu

55

Culligan Storkök AB operates as a leading Swedish provider of commercial kitchen solutions, offering comprehensive services from planning and design to installation and maintenance. With over 30 years of industry experience and a nationwide service network, the company targets professional kitchens including restaurants, cafes, and schools. The website reflects a mature digital presence with professional branding, clear service offerings, and strong customer engagement channels. Technically, the site is built on WordPress with modern frameworks and integrates advanced analytics and marketing tools while maintaining GDPR compliance. Security posture is solid with HTTPS and CAPTCHA protections, though there is room for improvement in HTTP security headers and formal security policies. Overall, the site demonstrates high professionalism and trustworthiness, supporting Culligan Storkök's market position as a reliable B2B partner in the hospitality sector.

I

ISTRABENZ PLINI d.o.o.

istrabenzplini.hr

11

Istrabenz plini d.o.o. is a Croatian energy company specializing in the supply of technical gases, LPG in bottles and tanks, natural gas, and innovative energy solutions. As part of the international SIAD Group, it holds a strong market position in Croatia, serving households, industrial clients, and public institutions. The company emphasizes sustainability and modern energy technologies. The website reflects a mature digital presence built on WordPress with modern SEO and user experience practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Contact and business information is transparent and comprehensive, supporting trust and credibility.

K

korientation e.V.

korientation.de

41

korientation e.V. is a small non-profit organization based in Germany, dedicated to serving the Asian-German and Asian diasporic communities with a focus on cultural, political, and social issues. The organization operates as a self-organization and network, providing community events, political education, publications, and collaborative projects against racism. Their market position is niche but well-established within their community, with a history dating back to 2008. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern plugins and libraries, hosted likely by a German hosting provider, and implements HTTPS with cookie consent mechanisms. Security posture is good but could be improved by adding explicit security headers and incident response policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy and well-maintained, with moderate user tracking via analytics and a clear privacy policy compliant with GDPR.

Y

Young Entrepreneurs in Science

youngentrepreneursinscience.com

10

Young Entrepreneurs in Science (YES) is a well-established non-profit educational program based in Germany, focused on equipping master’s students, doctoral candidates, and postdocs with entrepreneurial skills through free workshops and training programs. Supported by government ministries and business partners, YES aims to foster a cultural shift in science towards entrepreneurship and innovation. The website reflects a professional and consistent brand presence with clear messaging and a strong partnership ecosystem, including the Falling Walls Foundation as a parent organization. Technically, the site is built on WordPress with modern technologies and integrates multiple analytics and marketing tools, though it lacks a cookie consent mechanism and some security headers. Security posture is generally good with HTTPS and no exposed sensitive data, but could be improved by adding security policies and incident response contacts. Overall, the website is trustworthy, well-designed, and serves its target audience effectively.

A

Analitsko središče

zakakovost.si

51

The website zakakovost.si serves as a centralized, accessible platform dedicated to quality assurance and self-evaluation in Slovenian education institutions, including kindergartens and schools. It provides key resources such as legislative documents, strategic policies, national reports, and international studies to support school leaders, quality teams, and policymakers. The site is positioned as a national educational resource supported by the Slovenian government and the European Union. Technically, the site is built on WordPress with a modern tech stack including Matomo analytics configured for privacy, accessibility plugins, and a cookie consent mechanism, hosted by the Slovenian academic network (ARNES). Security posture is good with HTTPS enforced and privacy-conscious analytics, though some security headers could be improved. The WHOIS data shows a suspicious future domain creation date, likely a data error, but the registrar and hosting align with the site's educational purpose. Overall, the site is professional, trustworthy, and well-optimized for accessibility and mobile use, with no detected security or content safety issues.

I

IRDO – Institute for the Development of Social Responsibility

horus.si

41

The website www.horus.si represents the Slovenian Award for Social Responsibility HORUS, managed by IRDO, a non-profit institute focused on promoting social responsibility and sustainable development. The site serves as an information hub for award calls, laureates, workshops, and news updates, targeting organizations and individuals interested in social responsibility within Slovenia. The business model is non-profit, centered on recognition and promotion rather than commercial sales. The domain age and content history support a credible and established presence in this niche. Technically, the site is built on WordPress with popular plugins like Slider Revolution and WPBakery Page Builder, ensuring a modern and responsive design. The site loads moderately fast and is mobile-optimized, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with a good SSL configuration. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No vulnerabilities or malicious content were detected, and contact information is clearly provided, enhancing credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security hardening. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure policy to enhance user trust and regulatory compliance.

T

Toimintakykyinen Suomi

toimintakykyinensuomi.fi

67

Toimintakykyinen Suomi is a Finnish non-profit initiative focused on promoting physical activity and improving functional capacity among the Finnish population. The website serves as a platform for campaigns, partner engagement, and public awareness, coordinated by the Finnish Olympic Committee (Suomen olympiakomitea). It targets a broad audience including individuals, workplaces, educational institutions, and organizations to foster healthier lifestyles and societal resilience. The initiative leverages partnerships with national organizations and integrates social media to amplify its message. Technically, the website is built on WordPress with modern JavaScript libraries and integrates third-party services such as Google Tag Manager, CookieHub for cookie consent, and Juicer for social media feeds. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy linked from the parent organization’s domain. Contact information is limited to email addresses and partner site links, with no direct phone numbers found. Overall, the website presents a trustworthy and professional front for a national health campaign. It demonstrates good digital maturity and compliance with privacy regulations, though it could improve security header implementation and provide clearer direct contact options.

S

SofDestroy.com

sofdestroy.com

59

SofDestroy.com is a small Bulgarian company specializing in demolition, cleaning, and construction waste removal services primarily in Sofia. The website presents a professional image with detailed service descriptions, pricing, and customer testimonials, positioning the company as a reliable local service provider. Technically, the site is built on WordPress using the Astra theme and Rank Math SEO plugin, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and privacy compliance policies. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the site is trustworthy and well-structured but would benefit from enhanced privacy and security measures.

А

Акаунт Консулт КО

acc-consultco.com

55

Акаунт Консулт КО is a professional accounting firm based in Sofia, Bulgaria, offering comprehensive accounting, tax, and payroll services tailored to various business sectors including transport, retail, healthcare, hospitality, and non-profit organizations. The company emphasizes personalized service, over 20 years of experience, and flexible solutions including remote service options. Their market position is strong within the Bulgarian accounting services sector, targeting small to medium-sized enterprises. Technically, the website is built on WordPress with standard plugins and demonstrates good SEO and mobile optimization, though some improvements in security headers and privacy compliance are recommended. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks explicit security policies and headers. Overall, the website is professional, trustworthy, and content-rich, though it lacks formal privacy and cookie policies which impacts compliance scoring.

C

Crafthemes

crafthemes.com

9

Crafthemes is a small technology business specializing in the development and sale of free and premium WordPress themes, primarily targeting bloggers and small businesses. Their website showcases a variety of themes with a focus on simplicity, SEO optimization, and customization. The company emphasizes customer support and documentation to enhance user experience. Technically, the website is built on WordPress using modern tools such as Elementor, Easy Digital Downloads, and Google reCAPTCHA, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, with good SEO practices in place. Security posture is reasonable with HTTPS enforced and CAPTCHA on forms, but lacks advanced security headers and published security policies. The absence of privacy and cookie policies is a notable compliance gap. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website presence. Overall, the site is functional and trustworthy from a user perspective but would benefit from improved transparency and security documentation.

А

Адвокат Атанас Панчев

atanas-panchev.com

49

Адвокат Атанас Панчев is a Bulgarian legal professional offering specialized legal services primarily in civil law and related legal areas such as administrative, property, insurance, commercial, and tax law. The business operates as a small legal practice based in Sofia, Bulgaria, targeting both individual and corporate clients. The website presents a professional image with clear service descriptions and contact options, including a contact form protected by Google reCAPTCHA. The technical infrastructure is based on WordPress with Elementor and Rank Math SEO, indicating a moderate level of digital maturity. Security measures include HTTPS and cookie consent, but lack advanced security headers and explicit security policies. Overall, the site is trustworthy and well-positioned for its local market niche.

W

winebg.info

winebg.info

50

winebg.info is a Bulgarian media website dedicated to wine culture, events, wineries, and wine tourism in Bulgaria. The site targets wine enthusiasts and consumers in Bulgaria, providing content such as event coverage, tasting notes, winery profiles, and cultural articles. The website uses WordPress CMS with a variety of plugins to enhance user experience, including age verification to restrict underage access to alcohol-related content. The site demonstrates moderate digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. Overall, the site appears legitimate and focused on its niche audience with room for security and compliance improvements.

S

SuperHosting.BG Ltd.

obemnibukvi.eu

43

The website obemnibukvi.eu represents a Bulgarian company specializing in the design, manufacturing, and installation of volumetric letters and advertising signage. With over 26 years of experience, the company serves clients across Bulgaria with offices in Sofia, Varna, and Veliko Tarnovo. The business is positioned as an established local player offering comprehensive services including design, production, and installation of advertising letters and related signage products. The website content is primarily in Bulgarian and targets a general audience interested in advertising and signage solutions. Technically, the website is built on WordPress CMS and utilizes common web technologies such as PHP, jQuery, FancyBox for image galleries, Google Fonts, and FontAwesome icons. The hosting provider is SuperHosting.BG Ltd., a reputable Bulgarian hosting company. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. External integrations include Google Translate and StatCounter for analytics. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks advanced security headers and formal security policies. There is no privacy or cookie policy present, which indicates compliance gaps with GDPR and related privacy regulations. The contact form is present and appears to have validation, but no explicit security or incident response policies are disclosed. The domain WHOIS data is transparent and consistent with the hosting provider, with no suspicious patterns detected. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, improved security headers, and formalized security policies to strengthen trust and regulatory adherence.

Insert Moin is a German-language podcast website specializing in video game content, including free and premium podcast episodes, reviews, and industry news. The site targets German-speaking gaming enthusiasts and operates a business model supported by community platforms such as Patreon and Steady, alongside merchandise sales. The website is built on WordPress with a professional design and consistent branding, offering good content quality and user experience. Technically, the site uses a modern WordPress CMS with common web technologies like jQuery and Google Fonts. Performance is moderate with good mobile optimization. However, there is room for improvement in accessibility and SEO. Security posture is decent with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and a formal security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and legitimate, with consistent WHOIS data and no signs of malicious or adult content. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and improving privacy compliance to strengthen user trust and regulatory adherence.

C

Carxpert Automotive

carxpert.ch

67

Carxpert Automotive operates a network of independent quality garages in Switzerland, offering comprehensive automotive services including consultation, diagnosis, maintenance, and repair for all vehicle brands. The website positions itself as a trusted network with ongoing partner additions and a focus on quality service. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, integrating modern tools such as Google Tag Manager and Usercentrics for analytics and consent management. The site is multilingual and mobile-optimized, providing a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website is trustworthy, compliant with GDPR, and well-positioned in its market niche.

E

easyvote

easyvote.ch

63

easyvote.ch is a Swiss non-profit educational platform focused on providing neutral, easily understandable political information and voting guidance to Swiss citizens, students, and educators. The website offers a variety of resources including voting recommendations, educational materials, explainer videos, and a dedicated app to assist voters. It maintains a strong market position as a trusted source for political education in Switzerland, supported by partnerships such as with the Swiss Youth Parliament Association (DSJ). The platform targets a broad audience including the general public and schools, emphasizing accessibility and neutrality in political content. Technically, the site is built on the Neos CMS and Flow PHP framework, leveraging modern web technologies with moderate performance and good mobile optimization. The site implements privacy and cookie policies with consent mechanisms, uses plausible analytics for minimal tracking, and integrates newsletter services via CleverReach. Security posture is solid with HTTPS enforced and mail obfuscation to protect contact information, though additional security headers could enhance protection. Overall, easyvote.ch presents a professional, trustworthy, and user-friendly digital presence aligned with its educational mission.

W

Wasserverband Nettelnburg

nettelnburg.com

63

Wasserverband Nettelnburg is a public law entity responsible for maintaining the drainage ditches in the Nettelnburg district of Hamburg, Germany. The website serves as an official information portal providing details about the association's tasks, legal framework, events, and member responsibilities. It targets local residents and members of the water association, focusing on community engagement and regulatory compliance. The business operates in the government sector with a small organizational size and a history dating back to the 1920s. Technically, the website is built on WordPress using the Avada theme and employs the Complianz GDPR plugin for cookie consent management. The site is moderately optimized for performance and mobile devices, with basic accessibility and good SEO practices. No advanced analytics or marketing tools are detected, indicating a focus on privacy and minimal user tracking. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were found in the content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content itself appears professional and trustworthy. Overall, the website presents a solid digital presence for a local government entity with good content quality and privacy compliance. The main risk lies in the missing WHOIS data, which should be investigated further to confirm domain ownership and registration legitimacy.

L

Landeswasserverbandstag Brandenburg e.V.

lwt-brandenburg.de

47

The Landeswasserverbandstag Brandenburg e.V. (LWT) is a regional non-profit organization serving as the umbrella association for public water management entities in Brandenburg, Germany. The website provides information about the organization's mission, events, and member services, targeting stakeholders in water supply, wastewater management, and water body maintenance. The site is built on Joomla CMS with Yootheme and UIkit frameworks, offering a responsive and well-structured user experience. Technical infrastructure is modern and adequate for the organization's needs, hosted on a regional provider with secure HTTPS connections. Security posture is solid with HTTPS and CSRF protections, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Overall, the website is professional, trustworthy, and safe, with no signs of malicious content or blocking mechanisms.

S

SYNVIA media

synvia.de

52

SYNVIA media operates as a German telecommunications provider offering bundled services including highspeed internet, telephone, and HDTV primarily via fiber optic technology. The website targets end customers in Germany seeking integrated telecommunications solutions. The business appears to be a small regional player with a clear focus on bundled digital communication services. Technically, the website is built on WordPress using modern plugins such as Elementor, Yoast SEO, and CleanTalk anti-spam, indicating a moderate level of digital maturity. Performance and mobile optimization are good, with proper SEO and accessibility features in place. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented via Cookiebot, although explicit security headers and incident response information are lacking. Overall, the website is professional and trustworthy, with no signs of blocking or WAF interference, and no adult or explicit content detected.

W

Wirtschaftskammer Liechtenstein

wirtschaftskammer.li

56

Wirtschaftskammer Liechtenstein serves as the official chamber of commerce for Liechtenstein, providing advocacy, support, and services to local businesses and entrepreneurs. The organization holds a strong market position as the primary business representative body in the country, focusing on business development, training, and member services. The website reflects a professional and consistent brand image targeting business stakeholders within Liechtenstein. Technically, the website is built on WordPress with a modern technology stack including Bootstrap, FontAwesome, and privacy-focused Matomo analytics. The site demonstrates good mobile optimization and moderate performance, with standard SEO and accessibility features. Security posture is solid with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the security posture is mature with no critical vulnerabilities detected. Privacy compliance is strong, with comprehensive GDPR-aligned privacy and cookie policies and a consent mechanism in place. Contact information is transparent and complete, enhancing trustworthiness. The site is free from adult or questionable content, making it safe for general audiences. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure mechanisms, enhancing accessibility, and maintaining up-to-date software to mitigate risks. These steps will further strengthen the organization's digital trust and security culture.

B

Bundesverband Personal Training

bundesverband-pt.de

55

The Bundesverband Personal Training is a German association dedicated to promoting excellence and integrity within the personal training industry. It offers high-quality continuing education and fosters a strong professional network for personal fitness trainers. The organization positions itself as a key industry body supporting professional standards and development. Technically, the website is built on WordPress using the Avada theme, hosted by Schlund Technologies, and incorporates modern web technologies with a cookie consent mechanism to comply with GDPR. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though additional security headers could enhance protection. Privacy compliance is well addressed with comprehensive policies and consent management. Overall, the website reflects a professional and trustworthy business presence with a clear focus on its target audience.

D

digicube AG

bienenzeitung.ch

67

The Schweizerische Bienen-Zeitung is a specialized Swiss magazine focused on beekeeping, targeting hobbyist and professional beekeepers, as well as related agricultural and health professionals. It operates on a subscription-based model with a monthly publication cycle and a circulation of approximately 13,500 copies. The website is professionally designed and maintained by digicube AG, a digital agency, and provides a rich content experience including articles, archives, and subscription management. The site is well positioned within its niche market in Switzerland, supported by partnerships with related beekeeping organizations and shops. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including jQuery, Google Maps API, and caching via WP Rocket. It uses a child theme of GeneratePress and integrates social media and analytics tools such as Plausible Analytics. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and security.txt files. No security headers were detected, which could improve protection against common web attacks. The privacy policy is comprehensive and GDPR compliant, but no cookie consent banner was found, which is a compliance gap. The WHOIS data confirms a legitimate registration consistent with the business claims, enhancing trust. Overall, the website presents a low risk profile with good business credibility and content quality. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance compliance and security posture, further strengthening user trust and regulatory adherence.

A

ActionAid International Kenya

actionaid-kenya.org

52

ActionAid International Kenya is a medium-sized non-profit organization established in 2022, focused on social justice and community empowerment in Kenya. The website serves as a platform for advocacy, fundraising, and information dissemination, leveraging WordPress with plugins such as GiveWP and WooCommerce for donation management. The technical infrastructure is modern and includes integrations with JamboPay for payment processing and Google Analytics for visitor tracking. Security posture is adequate with HTTPS enforced and domain registration protections in place, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service policies found. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security documentation.

D

DDr. med. univ. Jurij Kocmut

augenarzt-salzburg.at

47

The website represents a specialized ophthalmology practice located in Salzburg, Austria, led by DDr. Jurij Kocmut. It offers a range of eye care services including modern eye examinations, laser eye surgery, contact lens fittings, and other ophthalmic treatments. The practice emphasizes personalized care, high-quality standards, and accessibility including online appointment booking and wheelchair access. The target audience is local patients seeking professional eye care services. The website is well-structured, professionally designed, and provides clear contact information and patient testimonials, enhancing trust and credibility. Technically, the site is built on WordPress with common plugins such as WPBakery Page Builder and Contact Form 7, using Bootstrap for responsive design. It employs modern JavaScript libraries like jQuery and Owl Carousel for UI elements. The site is mobile-optimized and performs moderately well, with good SEO practices and basic accessibility features. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented, but some security headers are missing and no explicit security or incident response policies are published. Overall, the security posture is solid but could be improved by adding security headers, a security.txt file, and more explicit privacy and security policies. No critical vulnerabilities or WAF blocking were detected. The domain registration data aligns well with the business claims, supporting legitimacy. The site does not use advertising or tracking services, indicating a privacy-conscious approach. Strategically, the practice should focus on enhancing security policies and transparency to further build patient trust and comply with evolving regulations. Technical modernization and regular updates will maintain performance and security. The website effectively supports the business model of a local specialized healthcare provider with a strong digital presence.

F

Ferienhof Gassner

ferienhof-gassner.at

37

Ferienhof Gassner is a small family-run organic farm located in Mondsee, Austria, offering modern holiday apartments with scenic lake views and recreational amenities such as a heated pool and playground. The website targets families, singles, and seniors seeking a nature-oriented vacation in the Salzkammergut region. Technically, the site is built on WordPress with popular plugins like WPBakery and Slider Revolution, and it supports multiple languages via Google Translate. The site is moderately optimized for performance and mobile devices, with good SEO practices. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and formal security policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and suitable for its hospitality business purpose.

Z

Zahntechnik Kainhofer

zahntechnik-kainhofer.com

49

Zahntechnik Kainhofer is a small dental technology laboratory based in Oberwang, Austria, specializing in the production of high-quality dental prosthetics in close collaboration with regional dentists. The company emphasizes careful material selection and precise craftsmanship to ensure aesthetic, durable, and functional dental replacements. The website is professionally designed using WordPress with modern plugins and provides clear contact information and GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS registration data limits the ability to fully verify domain legitimacy. Security posture is generally good with HTTPS enforced, but lacks advanced security headers and incident response information. Overall, the website presents a trustworthy and professional image suitable for its regional healthcare audience.

E

EDZS | Enddarmzentrum Salzburg | FA Darie Schneider

edzs.at

44

EDZS | Enddarmzentrum Salzburg is a specialized medical practice led by Facharzt Darie Schneider, focusing on proctological diseases and colorectal surgery. The practice operates primarily from the Privatklinik Wehrle-Diakonissen in Salzburg, Austria, serving patients with a range of anorectal conditions. The website presents a professional image with clear service offerings and contact information, targeting patients seeking expert proctological care in the region. Technically, the site is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, indicating a moderate level of digital maturity. The site is mobile-optimized and includes a cookie consent mechanism, reflecting some GDPR compliance awareness. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal vulnerability disclosure mechanisms. Overall, the website is trustworthy and functional but could improve privacy and security transparency.

K

Kustom Schweiz AG

kustom.ch

60

Kustom Schweiz AG is a Swiss-based company specializing in corporate clothing, custom-made products, club equipment, event dressing, and promotional materials. Positioned as a regional leader in the Ostschweiz area, the company offers a broad range of services including textile printing, embroidery, and digital shop solutions. Their business model focuses on B2B clients such as companies, clubs, and event organizers, supported by partnerships with international brands and a parent company, Swiss Kustom Group AG. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and integrates modern plugins for chat, multilingual support, and event management. Security posture is strong with HTTPS, security headers, and captcha protections, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels. Strategic recommendations include adding a dedicated security policy, incident response information, and enhancing accessibility features to further strengthen compliance and user experience.

D

DENALI

denali-marketing.at

43

DENALI is a small, established marketing and web agency based in Austria, specializing in full-service digital marketing, web design, and e-commerce solutions primarily for small and medium-sized enterprises in the Salzburg, Tirol, and Oberösterreich regions. The company emphasizes comprehensive client support including marketing strategy, web development, and funding assistance. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning them as a trusted regional partner. Technically, the site is built on WordPress using modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and security headers in place, though some improvements in privacy compliance such as cookie consent and explicit security policies are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

BAQUE-Internetservice

baque-internetservice.de

45

BAQUE-Internetservice is a small, established web agency based in Kaiserslautern, Germany, with over 20 years of experience in professional web design, webshops, SEO, and website maintenance. The company targets local businesses and organizations seeking effective and user-friendly websites optimized for search engines. Their business model focuses on providing tailored web solutions using popular CMS and shop systems such as WordPress, Typo3, Joomla, and Shopware. The website reflects a consistent brand image and professional content that supports their market position as a reliable local web agency. Technically, the website is built on WordPress with modern plugins including Yoast SEO and Complianz GDPR for compliance. It uses Google Tag Manager for analytics and tracking. Hosting is provided by kasserver.com, indicated by the nameservers. The site is mobile-optimized and performs moderately well, with good SEO practices in place. However, some security headers are missing, which could be improved to enhance security posture. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. The absence of a dedicated security policy or incident response contact is noted but not uncommon for small businesses. Overall, the security posture is solid but could benefit from additional headers and explicit security documentation. The domain WHOIS data is consistent with the website's claims, showing no privacy protection and a domain age that matches the company's stated history. Contact information is clear and verified, including email, phone, and physical address. The site contains no adult or questionable content, making it safe for general audiences. The AI overall score reflects a well-maintained, professional, and trustworthy website with minor areas for improvement.

Z

Zuckerbusch Bakery

zuckerbusch.ch

52

Zuckerbusch Bakery is a small Swiss bakery specializing in cupcakes and other sweet treats, offering direct ordering and popup bakery events. The website is professionally designed using WordPress and Elementor, providing a good user experience with clear navigation and mobile optimization. The business targets general consumers interested in bakery products within Switzerland. Technically, the site uses modern web technologies and includes Google Analytics for tracking. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and policies could enhance protection. The domain registration is consistent with the business location and nature, indicating legitimacy. Overall, the website is trustworthy and well-maintained, suitable for a small local retail bakery.

H

Hotel Château Gütsch

chateau-guetsch.ch

64

Hotel Château Gütsch is a boutique hotel located in Luzern, Switzerland, offering scenic views over the city and Lake Lucerne. The website presents a professional and well-structured digital presence built on WordPress, integrating booking functionalities and analytics tools. The business targets travelers seeking a unique and tranquil hotel experience. Technically, the site uses modern web technologies and plugins to enhance user experience and SEO. Security measures include HTTPS and cookie consent mechanisms, though explicit privacy and terms policies are not found in the provided content. Overall, the site demonstrates a solid security posture with room for improvement in privacy transparency and contact information availability.

M

Missionswerk MSD

msd-online.ch

52

Missionswerk MSD is a Swiss-based non-profit organization dedicated to mission work and charitable activities. The website serves as an informational platform to present their mission, projects, and ways to support their cause. The organization targets individuals interested in religious outreach and charitable giving. The business model is donation-based, focusing on small to medium scale operations within the non-profit sector. Technically, the website is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and PHP. The site is multilingual, supporting German, French, and English, enhancing accessibility for a broader audience. Performance and mobile optimization are moderate to good, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and formal security policies. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security maturity. Privacy compliance is weak, with no visible privacy or cookie policies and no consent mechanisms. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security policies, and explicit contact information to improve trust and regulatory adherence.

T

TOP-Ausflugsziele Niederösterreich in Zusammenarbeit mit Niederösterreich-Card GmbH

top-ausflug.at

48

The website www.top-ausflug.at serves as a comprehensive regional tourism platform promoting 54 certified top excursion destinations in Niederösterreich, Austria. It targets families and tourists seeking quality leisure experiences, offering detailed information on attractions, events, and mobility options. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, it is built on WordPress with modern plugins and frameworks, including Bootstrap and Borlabs Cookie for privacy compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The site integrates Google Analytics and social media channels for marketing and user engagement. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its niche.

Z

Zumo

zumo.tech

56

Zumo is a UK-based specialist company providing modular, API-first digital asset infrastructure and enablement services tailored for banks, fintechs, exchanges, and crypto businesses aiming to enter or scale in the UK crypto market. Their platform covers custody, trading, onboarding, AML, financial promotions, and fiat integration, complemented by Zumo+, a premium enablement service layer offering regulatory compliance and go-to-market support. The company holds FCA registration and has a strong UK market presence since its founding in 2017. Technically, the website is built on WordPress with modern plugins and hosted on AWS infrastructure. It features good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security.txt or vulnerability disclosure pages were found. Cookie consent and privacy policies are comprehensive and GDPR compliant. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility. No critical security issues or content safety concerns were detected. The domain WHOIS data aligns well with the business claims, supporting legitimacy. The site effectively targets financial and technology sectors within the UK, serving a medium-sized enterprise audience. Strategic recommendations include enabling DNSSEC, adding explicit security policies and incident response information, and implementing Content Security Policy headers to further enhance security posture.

I

Iftra GmbH

iftra.de

33

Iftra GmbH operates as a specialized service provider focused on enhancing the quality of life for seniors in Germany. The company offers multiple senior-oriented portals and marketing services, including Deutsches Seniorenportal, Deutscher Seniorenlotse, and recruiting services for the care sector. Their market position is that of a niche leader providing valuable information and marketing solutions tailored to the senior demographic. The website is professionally designed using WordPress and Elementor, reflecting a moderate to good level of digital maturity and technical infrastructure. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy and compliant with GDPR, but lacks a cookie consent mechanism and explicit security policies. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response information to strengthen compliance and trust.

K

KaraFun Group

karafun-group.com

67

KaraFun Group is a French-based company specializing in the production and distribution of multi-track instrumental music and karaoke-related technologies. They operate a diverse ecosystem including consumer karaoke applications, business solutions for karaoke bars, private karaoke box venues, and applications for musicians. The company positions itself as a leader in the karaoke and instrumental music market with a strong international presence and a rich catalog of exclusive music content. Technically, the website and associated services leverage a modern and diverse technology stack including PHP, C++, Kotlin, Swift, and Node.js, supporting multiple platforms such as Android, iOS, Mac, WebAssembly, and Windows. The website is well-designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, though the absence of security headers and explicit incident response policies suggests room for improvement. The WHOIS data is missing or inaccessible, which reduces domain trustworthiness despite the professional appearance and consistent branding of the website. Overall, KaraFun Group presents a credible and professional business with a solid technical foundation but should improve transparency in domain registration and privacy compliance mechanisms.

F

FLOWii

flowii.com

69

FLOWii is a Slovak-based business software provider specializing in ERP, CRM, invoicing, project management, and related business solutions. The company targets small and medium-sized enterprises seeking modular and scalable SaaS solutions to streamline operations and improve customer relationships. With over 4100 customers and more than 13 years of development, FLOWii holds a solid regional market position. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages WordPress with modern performance optimizations and SEO best practices. Security posture is good with HTTPS, cookie consent, and reCAPTCHA, though explicit security policies and incident response contacts are absent. WHOIS data is missing, which slightly impacts trust but the overall site and business appear legitimate and professional.

E

Embed Private YouTube Video

embedprivatevideo.com

49

Embed Private YouTube Video is a small technology-focused business founded in 2017 that provides a specialized service and WordPress plugin enabling website owners to securely embed private YouTube videos. The company targets website owners and businesses requiring private video sharing solutions, positioning itself as a niche provider in this space. The website content is well-structured, professional, and consistent with the business model, offering clear service descriptions and customer testimonials that enhance trust. Technically, the website is built on WordPress and leverages common web technologies including jQuery, YouTube iframe API, and Google Fonts. The site is hosted under a domain registered with GoDaddy.com, LLC, with a stable registration status and no privacy protection, indicating transparency. Performance and mobile optimization are good, though accessibility is basic. SEO practices are adequately implemented with proper metadata and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. There is no visible security policy or incident response information, and no cookie consent mechanism is present, which may impact privacy compliance. The use of Facebook Pixel indicates moderate user tracking. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with room for improvement in security best practices and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response policies to enhance trust and compliance.

S

Stiftung für Begabtenförderung der Deutschen Landwirtschaft

stiftung-begabtenfoerderung-agrar.de

64

The Stiftung für Begabtenförderung der Deutschen Landwirtschaft is a German non-profit foundation dedicated to supporting talented individuals in the agricultural sector through funding and scholarships for professional development courses, seminars, and internships. The website clearly targets individuals working in or connected to agriculture who seek educational advancement. The foundation positions itself as a niche player focused on agricultural education and talent promotion within Germany. Technically, the website is built on WordPress using the Divi theme, with common plugins such as Complianz for GDPR cookie consent and Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies or incident response information. Overall, the website is trustworthy and professional, though it could improve transparency around privacy policies and security disclosures.

F

Founders Foundation gGmbH

foundersfoundation.de

66

Founders Foundation gGmbH is a non-profit organization based in Germany focused on educating the next generation of successful entrepreneurs and building a sustainable B2B startup ecosystem in the Ostwestfalen-Lippe region. Their offerings include startup education programs such as Startup School, Lab, and Accelerator, as well as workshops, meetups, and events like the Hinterland of Things tech conference. The organization positions itself as a regional leader in startup ecosystem development without taking equity in startups, emphasizing a mission to empower entrepreneurs and foster innovation in the German Mittelstand. Technically, the website is built on WordPress using Elementor and several modern plugins including Borlabs Cookie for consent management and Rank Math for SEO. The site demonstrates good SEO practices, mobile optimization, and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. No blocking or WAF mechanisms were detected, allowing full content access. However, the site lacks explicit privacy and terms of service pages, as well as published incident response or vulnerability disclosure policies, which are recommended for improved compliance and trust. Overall, the website reflects a professional and credible organization with a clear mission and good technical implementation, but could enhance privacy compliance and security transparency to further strengthen trust and regulatory adherence.

The Feminist Leadership Hub website serves as a platform focused on feminist leadership topics, likely providing resources and community engagement for individuals interested in social justice and leadership from a feminist perspective. The site is built on WordPress and uses standard web technologies such as JavaScript and Google Fonts. While the site is accessible and content is safe for a general audience, it lacks critical business and compliance information such as privacy policies, contact details, and WHOIS registration data. This absence raises concerns about the legitimacy and trustworthiness of the domain. Technically, the site shows moderate performance and basic mobile optimization but lacks advanced security headers and visible security best practices. Overall, the security posture is weak, and privacy compliance is minimal, which could expose the site to risks and reduce user trust.

S

stadt wien marketing gmbh

wien-event.at

56

Stadt Wien Marketing GmbH operates as a city marketing and event management company focused on Vienna, Austria. The company provides a range of services including event management, event consulting, communication, graphic design, production, and digital information systems. The website reflects a regional government-related entity with a clear market position as a leader in organizing and promoting city events. The target audience is broad, encompassing residents and visitors to Vienna. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, integrating privacy-conscious analytics (Matomo) and Google reCAPTCHA for form security. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Security posture is moderate with HTTPS enforced and form protection, but lacks advanced security headers and explicit security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy with room for security and compliance improvements.

K

Kloster Leiden Christi

klosterleidenchristi.ch

42

Kloster Leiden Christi is a small, non-profit religious institution located in Jakobsbad, Switzerland, operating a Kapuzinerinnenkloster with a long tradition. The website serves to inform visitors about religious services, community events, and the Klosterladen retail shop offering handmade and natural products. The target audience includes local community members, religious visitors, and women interested in religious life. The business model combines spiritual services with retail sales, supported by an online presence and event announcements. Technically, the site is built on WordPress with common plugins and uses HTTPS, but lacks some advanced security headers and privacy compliance features. Security posture is moderate with room for improvement in headers and policies. Overall, the website is professional, trustworthy, and content-rich but should enhance privacy and security compliance to meet modern standards.

C

Culligan Italiana S.p.A.

culligan.it

62

Culligan Italiana S.p.A. is a medium-sized Italian company specializing in providing safe and sustainable water solutions for residential, office, and Ho.Re.Ca sectors. The company offers a range of products including water filtration systems, softeners, and dispensers, positioning itself as a trusted provider in the Italian market with a consistent brand presence and international affiliations. The website reflects a professional and user-friendly digital presence, leveraging WordPress CMS with modern technologies such as Bootstrap, jQuery, and multiple analytics and marketing tools integrated with user consent mechanisms. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive policies and cookie consent. Overall, the website and business information indicate a legitimate, trustworthy, and well-managed online presence.

Z

Zimmer MedizinSysteme GmbH

zimmer.de

48

Zimmer MedizinSysteme GmbH is a well-established German medical technology company with over 50 years of experience, specializing in physical therapy, diagnostics, and aesthetic medical devices. The company serves healthcare professionals worldwide, offering innovative products such as therapy devices, diagnostic systems, and cryotherapy solutions. Their market position is strong, supported by a professional website, active participation in industry events, and partnerships with educational institutions. Technically, the website is built on WordPress with modern JavaScript libraries and includes consent management for GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations.