Security Directory

M

Moje NEO

mojeneo.cz

48

Moje NEO is a Czech financial group offering a unique license product called the NEO licence, which provides users with a variety of financial benefits including cashback, insurance claim assistance, real estate services, business mentoring, commissions, financial products, and education. The company positions itself as a modern financial partner with 30 years of experience, targeting individuals and entrepreneurs seeking financial freedom and personalized financial solutions. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on DigitalOcean, and uses standard tracking tools like Google Tag Manager and Facebook Pixel. The site is well-designed, mobile-optimized, and SEO-friendly, but lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is good with HTTPS and security headers implemented, but incident response and security policies are not publicly disclosed. Overall, the website is professional and trustworthy but could improve transparency and compliance documentation.

B

Breathless Films s.r.o.

breathlessfilms.cz

56

Breathless Films is a small independent film production company based in Prague, Czech Republic, founded in 2018 by producer Matěj Paclík. The company specializes in producing and co-producing fiction and documentary films, with a focus on emerging directors. Their portfolio includes award-winning short films and documentaries that have premiered at prestigious festivals such as Karlovy Vary IFF and Ji.hlava IDFF. The website reflects a professional and consistent brand image, targeting film industry professionals and cinephiles. Technically, the site is built on modern frameworks like Nuxt.js and styled with Tailwind CSS, hosted with Cloudflare DNS, and optimized for mobile devices with moderate performance. However, it lacks some security headers and privacy compliance documents, which are areas for improvement. The security posture is generally good with HTTPS enabled and no exposed sensitive data, but could benefit from enhanced headers and policies. Overall, the site is trustworthy and professional, with clear contact information and a strong business credibility score.

D

Dolce e Luce Lighting Design Studio

dolceeluce.com

50

Dolce e Luce Lighting Design Studio is a small, internationally recognized independent lighting design and consultancy firm based in Rome, Italy, founded in 2018. The company offers a broad range of lighting design services including architectural, landscape, urban lighting, light art installations, and lighting controls. Their market position is strengthened by academic involvement and membership in professional lighting associations. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, with good mobile optimization and performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy, but improvements in privacy and security policies are recommended.

F

Fidurock

fidurock.com

61

Fidurock is a Czech real estate investment group specializing in residential and commercial property investments. The company positions itself as a trustworthy and transparent investment partner focusing on long-term growth and sustainability. The website reflects a professional and modern digital presence, utilizing contemporary web technologies such as Nuxt.js and Tailwind CSS, and integrates analytics tools like Google Analytics and Google Tag Manager for performance and user behavior tracking. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks explicit security policies, incident response contacts, and advanced security headers. Privacy compliance is partially addressed through a cookie consent mechanism, but no dedicated privacy policy or terms of service pages were found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

L

Livimi

livimi.com

66

Livimi is a Czech Republic-based real estate rental platform offering modern apartments in prime urban locations with a focus on digitalized rental processes. The company is part of the Fidurock investment group, leveraging over a decade of experience in property management. Their business model emphasizes direct rentals without commission, digital contract signing, and online housing management, targeting individuals seeking convenient and transparent urban living solutions. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on DigitalOcean infrastructure, and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear GDPR and cookie policies. Overall, the website presents a professional, trustworthy, and user-friendly experience with moderate tracking for analytics and marketing purposes.

F

Fidurock

nearliving.cz

44

NEAR living is a modern residential real estate development project located in the rapidly evolving Prague district of Palmovka. The project offers a range of apartments from 1+kk to 3+kk, combining urban lifestyle with tranquility and high-quality architectural design. The website is professionally designed using modern technologies such as Nuxt.js and Vue.js, with strong mobile optimization and good SEO practices. The security posture is solid with HTTPS and secure forms, though explicit security headers and a published security policy are missing. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The WHOIS data shows inconsistencies with a future domain creation date, which slightly impacts trust but does not undermine the overall legitimacy of the business. Strategic recommendations include improving security headers, publishing a security policy, and verifying WHOIS data accuracy.

Dystopia digital is a small digital-first creative collective founded in 2020, specializing in technology-driven creative services including UI/UX design, ecommerce, marketplace development, 3D and motion design, and branding. The company serves a diverse client base across sectors such as real estate, finance, lighting design, movie production, and architecture, positioning itself as a niche provider of innovative digital solutions. The website showcases a portfolio of client projects, reflecting a professional and consistent brand image. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, hosted on DigitalOcean, and optimized for fast performance and mobile responsiveness. The site lacks a CMS and does not include analytics or tracking scripts, indicating a focus on privacy and simplicity. However, accessibility features are basic, and SEO optimization is minimal. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and published security policies. There is no evidence of privacy, cookie, or terms of service policies, nor incident response or vulnerability disclosure information. Contact information is limited to email addresses without phone numbers or physical addresses. These gaps reduce the overall security and compliance posture. Overall, the website is professional and trustworthy with a moderate security posture but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

I

ICT UNIE

ictu.cz

19

ICT UNIE is a professional association representing companies in the electronic communications sector in the Czech Republic. Established in 2010, it serves as a platform to raise awareness about modern information technologies among businesses and government bodies, promoting a knowledge-based society. The association offers working groups, organizes events, and supports its members through advocacy and collaboration. The website reflects a mature digital presence with a modern tech stack based on Nuxt.js and Vue.js, optimized for performance and mobile devices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, ICT UNIE demonstrates a credible and professional online presence aligned with its business objectives.

H

HYLI

hyli.de

67

HYLI is a German-based technology company offering a secure digital platform for managing advance healthcare directives and other important personal documents. The platform targets individuals seeking reliable and GDPR-compliant digital storage solutions for their legal documents. HYLI positions itself as a niche provider with a user-friendly SaaS model, emphasizing security and privacy. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, hosted on Google Cloud infrastructure, and integrates standard marketing and analytics tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, HYLI enforces HTTPS, employs standard security headers, and uses cookie consent mechanisms to comply with GDPR. However, it lacks a publicly available security policy or incident response page, and no vulnerability disclosure or security.txt file is present. Overall, the domain registration and hosting details are consistent and trustworthy, with no suspicious patterns detected. The website content is professional, safe, and targeted at a general audience.

B

Brains Disruptive

dny.ai

61

Dny AI is a Czech national festival focused on artificial intelligence, showcasing AI's impact across various sectors and disciplines. The event targets a broad audience including companies, public institutions, academics, students, and the general public. Supported by the President of the Czech Republic and multiple ministries, it holds a strong market position as a key AI educational and networking platform in the region. Technically, the website is built on modern frameworks such as Vue.js and Nuxt.js, with integrated cookie consent and analytics tools, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks visible advanced security headers and explicit incident response contacts. Overall, the site is professional, well-branded, and trustworthy, though improvements in privacy policy visibility and security practices are recommended.

A

Abele Optik

abele-optik.de

70

Abele Optik is a well-established German retail company specializing in eyewear products including glasses, sunglasses, contact lenses, and related care products. With a strong physical presence of 75 stores across Germany and an integrated online shop, the company targets consumers seeking quality optical products and professional services. The website reflects a mature digital infrastructure built on modern web frameworks such as Nuxt.js and Vue.js, hosted on Bunny.net, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and formal security policies are absent. The presence of Trusted Shops certification and active social media channels enhance trust and credibility. Overall, the website is professional, user-friendly, and compliant with basic privacy regulations, though explicit privacy and terms of service documents were not found in the analyzed content.

D

Deutscher Akademischer Austauschdienst

daad.de

66

The Deutscher Akademischer Austauschdienst (DAAD) is the world's largest funding organization dedicated to the international exchange of students and researchers. The website serves as an official platform providing comprehensive information about scholarships, academic exchange programs, and services for universities. It targets students, academics, and educational institutions primarily in Germany but also internationally. The DAAD operates as a non-profit organization with a strong market position in the education sector. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted on Microsoft Azure infrastructure, and employs Bootstrap for responsive design. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a fast and user-friendly experience. From a security perspective, the site enforces HTTPS, implements standard security headers, and includes a cookie consent mechanism compliant with GDPR. However, it lacks a dedicated security policy or incident response contact information, which could enhance transparency and trust. Overall, the DAAD website is professional, secure, and compliant with privacy regulations, reflecting the organization's credibility and commitment to international academic cooperation. Strategic improvements could focus on publishing explicit security policies and vulnerability disclosure channels to further strengthen its security posture.

R

Rundschau Online

rundschau-online.de

63

Rundschau Online is a regional news website delivering current news content focused on Cologne and its surrounding region, covering sports, politics, celebrities, and other local interests. The site positions itself as a key regional media outlet with a broad target audience of general news consumers. The business model appears to be advertising-supported, leveraging ad networks such as Taboola for monetization. Technically, the website employs modern web technologies including Nuxt.js (a Vue.js framework) and Tailwind CSS for styling, indicating a contemporary and modular front-end architecture. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR requirements, although explicit privacy and terms of service documents are not clearly found in the provided content. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie security best practices. However, it lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The domain registration appears legitimate and consistent with the business claims, with no privacy protection or suspicious WHOIS patterns. Overall, the website presents a professional and trustworthy regional news platform with moderate technical maturity and security posture. Improvements in privacy documentation, security headers, and incident response transparency would enhance compliance and trustworthiness.

D

DEKRA

dekra.de

73

DEKRA is a globally recognized expert organization specializing in vehicle inspection, expert reports, and various technical services related to transportation. With over 47,000 employees operating in more than 50 countries, DEKRA holds a strong market position as a leading service provider in the transportation sector. The website reflects a professional and consistent brand image targeting both private and business customers. Technically, the site employs modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a responsive and user-friendly experience. Analytics are handled via Matomo, indicating a moderate level of user tracking. Security posture is adequate with HTTPS enabled and strict referrer policies, but lacks explicit security headers and published security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy and professionally maintained, suitable for its enterprise scale and industry.

S

Start Guide, s.r.o.

startguide.cz

56

Start Guide, s.r.o. is a Czech-based investment fund focused on supporting digital startups in the Central and Eastern European region. The company provides financial investments, practical mentoring, and strategic consulting to early-stage technology startups, emphasizing added value beyond capital. Their approach includes close collaboration with founders on vision, strategy, and scaling to market leadership. The website reflects a professional and consistent brand image, showcasing a dedicated team with relevant expertise and testimonials from portfolio founders. Technically, the website is built using modern JavaScript frameworks (Nuxt.js) and leverages Cloudflare for DNS and likely CDN services. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No analytics or tracking scripts were detected, indicating a privacy-conscious approach, but no formal privacy or cookie policies are published. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and published security or incident response policies. The absence of privacy and cookie policies is a compliance gap given the GDPR relevance. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's founding year and no privacy protection masking. Overall, the website presents a trustworthy and professional image with strong business credibility but would benefit from enhanced privacy compliance and security best practices to improve its security posture and regulatory adherence.

P

Platforma MM - sprawny sposób na zarządzanie szkołą, przedszkolem, poradnią i DPS

platformamm.pl

55

Platforma MM is a Polish web platform focused on providing efficient management solutions for schools, kindergartens, counseling centers, and social welfare homes. Founded in 2019, it targets educational and social care institutions within Poland, offering a SaaS model to streamline administrative tasks. The website presents a professional and consistent brand image with good content relevance and user experience. Technically, the site leverages modern web technologies such as Nuxt.js, Bootstrap 4.6, and CKEditor 5, ensuring a responsive and moderately performant platform. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the domain registration is consistent and legitimate, supporting the business credibility. The site uses marketing and tracking tools including Facebook Pixel and Salesmanago, indicating moderate user tracking.

Euroflorist is a well-established European flower delivery service specializing in online sales of fresh flowers and gifts with a strong presence in Denmark. The company offers same-day delivery services domestically and international shipping to over 140 countries through a large network of florists. The website demonstrates a mature digital infrastructure built on modern frameworks such as Nuxt.js and Vue.js, providing a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data limits domain registration trust verification.

V

VGL Publishing AG

vergleich.org

57

Vergleich.org is a German-language independent test and comparison portal operated by VGL Publishing AG, based in Berlin. The site offers consumers detailed product comparisons and tests across various categories, leveraging affiliate marketing as its primary business model. It maintains a professional and consistent brand presence with comprehensive privacy and cookie policies, including GDPR compliance and a designated data protection officer contact. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with performance optimizations and mobile responsiveness. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly available. The absence of WHOIS data due to a malformed response slightly impacts trust but does not detract significantly from the overall legitimacy and professionalism of the site.

The website aloula.sba.sa appears to be a minimal or placeholder site with very limited accessible content. It uses modern JavaScript technologies such as Nuxt.js and is hosted via Akamai CDN, with performance monitoring and analytics scripts like Boomerang and Google Tag Manager integrated. However, the site lacks visible business information, contact details, privacy or cookie policies, and any user-facing content. The absence of WHOIS data for the domain raises concerns about the legitimacy and registration status of the domain. Security posture is weak due to missing security headers and lack of visible security policies. Overall, the site is accessible but provides minimal information, resulting in a low trust and credibility score.

Regenschori.cz is a Czech online platform specializing in Christian songs and liturgical music, serving as the largest such platform in the Czech Republic. It is part of the ProScholy.cz family, indicating a focused niche in religious and liturgical content. The platform offers extensive categorization and search capabilities for songs, targeting Czech-speaking Christian communities and related audiences. Technically, the website employs modern web technologies such as Nuxt.js, Google Fonts, and FontAwesome, hosted likely by WEDOS, a Czech hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and Google Tag Manager for analytics but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. No contact information or incident response channels are publicly available, limiting transparency. Overall, the site is safe, professional, and trustworthy within its niche but would benefit from enhanced privacy compliance and security best practices.

H

HubSpot

inbound.com

69

INBOUND.com is the official website for HubSpot's annual marketing and sales conference, INBOUND, scheduled for September 3-5, 2025. The site serves as a comprehensive platform for event information, registration, and resources targeting marketing professionals and sales teams. It positions itself as a leading event in the marketing technology space, leveraging HubSpot's strong brand presence. The website demonstrates a modern technical infrastructure built on Nuxt.js and Tailwind CSS, ensuring fast performance and excellent mobile responsiveness. Security best practices are observed with HTTPS and multiple security headers, although dedicated security and incident response policies are not publicly available. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy compliance. The absence of WHOIS data is a notable gap but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the site is professional, secure, and well-optimized, serving its business purpose effectively.

I

incognito digitale lösungen

incognito.ms

55

Incognito digitale lösungen is a small German technology service provider specializing in digital solutions including conception, UI/UX design, programming, and hosting since 2006. The website is professionally designed using modern web technologies such as Nuxt.js and TailwindCSS, providing a good user experience and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy despite the active and professional web presence. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and formal privacy or cookie policies. The site uses Matomo analytics, indicating moderate user tracking but lacks clear privacy compliance indicators. Overall, the business appears credible but would benefit from improved transparency and security practices.

P

Planetum

planetum.cz

58

Planetum is a Czech educational and cultural organization operating a modern planetarium and multiple observatories. The website provides detailed program schedules, branch information, and educational offerings targeting astronomy enthusiasts and the general public interested in space. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, with integration of Google Fonts and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit privacy and security policies. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation and operational transparency of the website. Overall, Planetum demonstrates a mature digital presence suitable for its educational mission.

A

Advenir Formations (implied from content)

je-roule-en-electrique.fr

63

The website www.je-roule-en-electrique.fr serves as a comprehensive national platform dedicated to electric mobility information and training in France. It targets a broad audience including individuals, students, local authorities, and property managers, offering educational content, training programs under the Advenir Formations initiative, and guidance on financing aids. The platform is supported by reputable partners such as Avere-France, the French Ministry of Ecological Transition, and ADEME, reinforcing its authoritative position in the market. Technically, the site employs modern web technologies including Nuxt.js and Vue.js, ensuring a responsive and user-friendly experience across devices. The site demonstrates good SEO practices, accessibility, and performance, although some improvements in security headers and explicit privacy documentation are recommended. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security headers and a published vulnerability disclosure policy. The absence of WHOIS registrant data slightly impacts trust but is mitigated by the professional presentation and strong institutional partnerships. Overall, the site is a well-designed, authoritative resource for electric mobility education in France, with moderate technical and security maturity. Strategic enhancements in privacy transparency and security policies would further strengthen its trustworthiness and compliance posture.

É

École de Management des Industries Créatives (EMIC Paris)

emic-paris.com

63

EMIC Paris is a specialized educational institution focused on management training within the creative industries, including music, audiovisual, and live performance sectors. Founded in 2016, it offers master's level programs and short courses designed to prepare students for immediate professional engagement through practical and operational learning methods. The institution maintains strong industry partnerships with major players such as Mediawan, Sony Music, Deezer, and Believe, enhancing its market position and student employability. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, integrating essential marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. Cookie consent is managed comprehensively via CookieYes, ensuring GDPR compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and enforces domain status protections. However, it lacks DNSSEC and advanced security headers, and does not publish incident response or vulnerability disclosure information, which are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, EMIC Paris presents a credible, professional online presence with strong business credibility and compliance posture. Strategic enhancements in security policies and transparency could further strengthen trust and resilience.

P

Peterbilt

peterbilt.com

11

Peterbilt is a leading American manufacturer specializing in diesel and electric trucks for various applications including long-haul and local delivery. The company maintains a strong market position with a comprehensive product lineup and dealer network. The website reflects a mature digital presence with modern technologies such as Nuxt.js and integrates multiple analytics and marketing tools to optimize user experience and business insights. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, although dedicated security and incident response policies are not publicly available. The absence of WHOIS data for the www subdomain is noted but does not detract from the overall legitimacy given the professional branding and content. Strategic recommendations include publishing explicit security policies and incident response contacts to enhance trust and compliance.

A

Agence Pan !

pan-lesite.com

52

Agence Pan ! is a French digital communication agency founded in 2011, specializing in bespoke website design, digital strategy, branding, and social media management. The agency targets a broad range of clients from small to large enterprises seeking creative and personalized digital solutions. Their market position is that of a creative and experimental agency with a recognized reputation for excellence. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted by OVH sas, and integrates WordPress CMS for content management. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the site uses HTTPS with domain protections but lacks some security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained.

G

GYMIFY

gymify.app

53

GYMIFY is a fitness software platform targeting gym operators and fitness businesses, providing tools for fitness management. The website analyzed is primarily a login page with minimal content, built using modern JavaScript frameworks such as Vue.js and Nuxt.js, and styled with Vuetify. The technical infrastructure indicates a moderate level of digital maturity with good mobile optimization but lacks comprehensive SEO and accessibility features. Security posture is weak due to absence of security headers, privacy policies, and incident response information. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, the website is functional but requires improvements in security, privacy compliance, and business transparency to enhance trust and user confidence.

G

GYMIFY

gymify.cz

64

GYMIFY.cz is a Czech-based fitness software provider specializing in online reservation systems, membership management, and integrated tools for gyms and sports centers. The company offers a SaaS model with mobile applications for Android and iOS, targeting fitness centers, yoga studios, wellness centers, and other sports facilities primarily in the Czech Republic and Slovakia. The website demonstrates a professional digital presence with modern technologies such as Nuxt.js, Vue.js, and Vuetify, and integrates third-party services like Stripe for payments and Microsoft Clarity for analytics. Customer testimonials and Trustpilot reviews indicate a positive market reputation. However, the site lacks explicit privacy and cookie policies, which impacts compliance and user trust.

K

Kristamedia

kristaonline.com

41

Kristamedia operates a business matching platform under the website kristaonline.com, primarily targeting business professionals seeking connections and partnerships. The platform appears to be a small-scale operation founded around 2019, with a focus on facilitating business matching services. The website uses modern frontend technologies such as Nuxt.js and Bootstrap, hosted on Amazon AWS infrastructure, indicating a moderate level of technical maturity. However, the site lacks comprehensive privacy, cookie, and terms of service policies, and does not provide explicit contact or incident response information, which limits its compliance and trustworthiness. Security posture is basic with no detected security headers or advanced protections, and no analytics or tracking services are evident, suggesting minimal user tracking. Overall, the site is accessible without WAF or blocking mechanisms and contains safe, business-oriented content.

S

Stadia Maps, Inc.

stadiamaps.com

54

Stadia Maps, Inc. is a technology company specializing in providing location APIs including maps, geocoding, routing, and navigation services. Founded in 2016, the company targets developers and businesses requiring reliable and privacy-conscious location data solutions. Their market position is that of a niche provider offering transparent billing and strong privacy guarantees as an alternative to larger mapping providers. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on AWS infrastructure, and integrates MapLibre GL JS for mapping. The site is performant, mobile-optimized, and well-structured with good SEO and accessibility features. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism despite using Matomo analytics. Overall, the website is professional, trustworthy, and well-maintained, with clear business contact via email and active social media presence.

H

HoT Telekom und Service GmbH

hot.at

76

HoT Telekom und Service GmbH operates as a prepaid mobile telecommunications provider in Austria, offering affordable and flexible mobile and internet services without contractual obligations. The company is positioned as a leading low-cost provider, affiliated with the reputable HOFER retail brand, and has received awards for customer satisfaction and price-performance. The website is professionally designed, mobile-optimized, and provides comprehensive information about services, legal policies, and customer support. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, with strong security practices including HTTPS and Content-Security-Policy headers. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. No critical security vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy online presence.

DF1 is a German media website offering documentaries, reportages, magazines, quiz shows, weather updates, and live sports including MotoGP, PENNY DEL, Formel-E, tennis, sailing, and football. The site targets a general audience interested in diverse media content and live sports coverage. The business model appears to be content streaming and broadcasting, with a focus on entertainment and sports media. The website uses modern web technologies such as Nuxt.js and Vue.js, built on a WordPress CMS backend, indicating a moderate level of digital maturity. Performance and mobile optimization are basic but functional. From a security perspective, the site implements a cookie consent mechanism with GDPR considerations, but lacks visible privacy policies, terms of service, or security headers. SSL configuration details are not provided, and no contact or incident response information is available. Google Analytics is used for user tracking at a moderate level. The absence of critical security issues is positive, but improvements are needed in security best practices and transparency. Overall, the website is accessible and safe for general audiences, with no adult or explicit content detected. The domain WHOIS data is consistent with a legitimate German media site, though limited registrant details are available. The site scores moderately on content quality, technical implementation, security posture, privacy compliance, and business credibility, resulting in an overall AI score of 66 out of 100.

H

Henkel AG & Co. KGaA

fritz-henkel.com

66

The website https://fritz-henkel.com/ is a professionally designed microsite dedicated to celebrating the 175-year legacy of Fritz Henkel, founder of Henkel AG & Co. KGaA. It provides rich historical content, brand heritage storytelling, and corporate culture insights targeted at a general audience including brand enthusiasts and stakeholders. The site leverages modern web technologies such as Nuxt.js and Vue.js, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent managed via OneTrust, although some security headers could be improved. The domain registration is consistent with the corporate identity and appropriate for a dedicated campaign site. Overall, the site demonstrates strong compliance with GDPR and presents trustworthy business information.

L

LOUPE

loupe.at

65

LOUPE is a specialized compliance management solution provider focusing on whistleblowing, anti-corruption, integrity management, and risk assessments. The company targets businesses needing to fulfill regulatory requirements such as the Corporate Sustainability Due Diligence Directive. Their market position is niche but professional, supported by ISO 27001 certification, indicating a strong commitment to information security. The website is well-designed, mobile-optimized, and uses modern technologies like Nuxt.js and Vue.js, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism, although explicit incident response and vulnerability disclosure information are absent. Overall, the website and business present a trustworthy and professional image with moderate user tracking balanced by GDPR-compliant privacy practices.

W

Walz GmbH

babywalz.at

68

Walz GmbH operates the baby-walz.at website, a leading e-commerce platform specializing in baby equipment and articles for parents and caregivers in Austria and Germany. The website offers over 20,000 high-quality products including baby clothing, strollers, car seats, toys, and baby care items. It targets expectant mothers and families with young children, providing a comprehensive shopping experience with free returns and customer support. The company positions itself as a trusted and established retailer in the baby products market. Technically, the website is built on modern frameworks such as Nuxt.js and uses the Storyblok CMS, ensuring a responsive and well-structured user experience. The site includes structured data for SEO and contact information, enhancing discoverability and trust. Security posture is good with HTTPS and nonce usage, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable due to quota limits, limiting domain registration verification. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

E

Europcar

europcar.at

69

Europcar Austria operates as a leading car rental service provider with a strong market position in Europe and worldwide. The company offers a broad fleet including electric vehicles and tailored business solutions, targeting both general consumers and corporate clients. The website reflects a mature digital infrastructure using modern frameworks like Nuxt.js and integrates performance and monitoring tools such as Dynatrace. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response details are not prominently published. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

L

Lexus

discoverlexus.com

60

DiscoverLexus.com serves as a global lifestyle and brand marketing platform for Lexus, a premium automotive brand. The website focuses on delivering luxury and lifestyle content that aligns with Lexus's market positioning as a leader in the transportation sector. The site targets luxury vehicle enthusiasts and Lexus customers worldwide, providing brand storytelling and vehicle-related information. The business model centers on brand engagement and lifestyle marketing rather than direct sales. The domain age and WHOIS data support the legitimacy and maturity of the brand presence online. Technically, the website employs modern frontend technologies including Vue.js and Nuxt.js, with a CMS likely based on Statamic. Hosting is supported by Microsoft Azure DNS infrastructure. The site demonstrates good mobile optimization and SEO practices, with cookie consent managed by Cookiebot. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and enforces domain transfer protection. However, DNSSEC is not enabled, and security headers are not detected in the provided data. There is no visible privacy policy or terms of service, which are critical for compliance and user trust. No incident response or vulnerability disclosure mechanisms are found. The site integrates Google Tag Manager for analytics and tracking, balanced with a cookie consent mechanism. Overall, the website is professionally designed and trustworthy, with a strong brand presence. To enhance security posture and compliance, it is recommended to publish privacy and terms policies, enable DNSSEC, implement security headers, and provide clear contact information for incident response. These steps will improve user trust, regulatory compliance, and resilience against threats.

.

.LOUPE

loupe.link

65

The website loupe.link represents .LOUPE, a specialized provider of compliance management solutions focusing on whistleblowing, anti-corruption, integrity management, risk assessments, and corporate sustainability due diligence. The company targets businesses requiring turnkey compliance solutions, positioning itself as a niche player with ISO 27001 certification enhancing its credibility. The website is built on modern web technologies including Nuxt.js and Vue.js, with integrated analytics and cookie consent mechanisms reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and GDPR-compliant privacy and cookie policies, though some areas like explicit Terms of Service and vulnerability disclosure policies are missing. Overall, the site is professional, trustworthy, and safe for general audiences.

wunu webLab OG is a small Austrian digital agency specializing in tailored digital experiences that combine design, technology, and strategy. Their core services include app development, web solutions, and creative design, targeting startups and businesses seeking innovative digital products. The company maintains a professional online presence with clear branding, comprehensive privacy and cookie policies, and accessible contact information. Technically, the website leverages modern JavaScript frameworks such as Nuxt.js and Vue.js, and employs Matomo for privacy-conscious analytics. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. Overall, the website reflects a mature digital infrastructure and a trustworthy business model.

M

Museum für Gestaltung Zürich

museum-gestaltung.ch

51

Museum für Gestaltung Zürich is a leading Swiss museum specializing in design and visual communication, operating across three locations in Zurich. It is affiliated with the Zurich University of the Arts and supported by prominent cultural and corporate entities. The museum offers exhibitions, educational programs, publications, and an online shop, targeting a broad audience including groups, schools, families, and accessible audiences. The website reflects a mature digital presence with modern technologies such as Nuxt.js and Vue.js, and integrates Matomo analytics for user tracking. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance with the addition of cookie consent mechanisms and explicit security policies. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

E

EXPO EVENT – Swiss LiveCom Association

expo-event.ch

61

EXPO EVENT – Swiss LiveCom Association is a national industry association representing the Live Communication sector in Switzerland. The organization provides membership services, industry events, education, and sustainability consulting to its members. The website reflects a professional and well-established entity with a clear market position as a leading voice for LiveCom in Switzerland. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, with integration of common analytics and marketing tools such as Google Analytics and LinkedIn Insight Tag. Security posture is strong with HTTPS and security headers implemented, although cookie consent mechanisms and explicit terms of service are missing. Overall, the site is well-designed, mobile-optimized, and provides comprehensive contact and event information, supporting a high level of trust and credibility.

A

Abteilung Kultur, Präsidialdepartement des Kantons Basel-Stadt

museenbasel.ch

61

Museen Basel is a government-affiliated cultural platform representing 37 museums in Basel, Switzerland. It provides comprehensive information about museums, exhibitions, events, and educational contacts, targeting the general public, families, and cultural enthusiasts. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages with German as the primary language. The platform serves as a central hub for cultural engagement in Basel, enhancing the visibility and accessibility of local museums. Technically, the website leverages modern frameworks such as Nuxt.js and Vue.js, styled with Tailwind CSS, and integrates analytics tools like Google Tag Manager and Microsoft Clarity. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. The content is rich and relevant, supporting a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected, and the domain registration aligns well with the website's government affiliation, indicating high legitimacy. Overall, Museen Basel presents a trustworthy and professional digital presence for cultural promotion, with recommendations to enhance privacy compliance and security transparency to further strengthen user trust and regulatory adherence.

O

Optimize AG

eventlokale.ch

62

eventlokale.ch is a well-established Swiss event portal operated by Optimize AG, offering a comprehensive marketplace for event locations, service providers, and event-related job listings. The platform targets event planners and individuals in Switzerland, positioning itself as the largest event portal in the country. The website provides rich content including editorial articles, event ideas, and the Swiss Location Award information, enhancing its market presence and user engagement. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with integrations of Google Analytics, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and features good SEO practices, although accessibility could be improved. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible privacy and cookie policies, which are critical for GDPR compliance. No contact emails or phone numbers were found, which may impact user trust and compliance. Overall, the site is professional and trustworthy but should address privacy compliance and contact transparency to enhance its security posture and user confidence.

BDP is a large, internationally recognized multidisciplinary design practice specializing in architecture, engineering, urban planning, and design services. The company positions itself as a leader in creating sustainable and innovative environments, targeting clients in real estate, media, education, and other sectors. The website reflects a mature digital presence with professional branding, multimedia content, and comprehensive project showcases. Technically, the site is built on modern frameworks such as Nuxt.js and Tailwind CSS, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with clear cookie consent and privacy policies. The absence of WHOIS data limits domain trust assessment, but the overall professional presentation supports legitimacy. Strategic recommendations include publishing security and vulnerability disclosure policies and enhancing contact transparency for data protection officers.

B

Beisheim Holding

beisheim.com

61

Beisheim Holding operates as a holding and capital management company with a professional online presence focused on corporate stakeholders and investors. The website is structured using modern web technologies including Nuxt.js and integrates Cookiebot for comprehensive cookie consent management, reflecting a commitment to privacy compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and GDPR-compliant cookie practices. The site lacks explicit contact information, terms of service, and security policies, which limits transparency and user trust. Security posture is moderate with HTTPS enforced but missing key security headers and incident response information. Overall, the website is functional and compliant in privacy aspects but would benefit from enhanced transparency and security disclosures.

M

MPskin

mpskin.com

64

MPskin is a specialized technology company offering an overlay solution to enhance Matterport virtual tours with advanced features such as augmented reality, multilingual support, and virtual staging. The company targets real estate professionals and digital marketers seeking to create engaging digital twins and immersive virtual experiences. Their market position is niche but well-defined, supported by a professional website and ISO 27001 certified hosting infrastructure. Technically, the website leverages modern JavaScript frameworks like Vue.js and Nuxt.js, integrates multiple analytics and marketing tools, and demonstrates strong performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and certified hosting, though the absence of public WHOIS data and incident response contacts suggests areas for improvement. Overall, MPskin presents a trustworthy and professional digital presence with minor gaps in transparency and vulnerability disclosure.

S

SV Werder Bremen

werder.de

70

SV Werder Bremen operates a professional football club website providing fans and stakeholders with news, match schedules, ticketing, and media content. The site is built on a modern Nuxt.js framework with Tailwind CSS styling and integrates third-party services such as Cookiebot for consent management and Google Tag Manager for analytics. The website demonstrates good technical maturity with responsive design and accessibility considerations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The domain registration aligns well with the business's German origin, supporting legitimacy. Overall, the site is professional, trustworthy, and well-positioned to serve its audience effectively.

S

Digitale Themen- und Erlebniswege – smarTrails

smartrails.ch

64

The website smartrails.ch presents itself as a digital platform focused on thematic and experience trails, likely serving a niche market in Switzerland. The site uses modern web technologies such as Nuxt.js, Vue.js, and Tailwind CSS, indicating a contemporary technical infrastructure with good mobile optimization and user experience. However, the content is basic and lacks comprehensive business and contact information, which limits the depth of user engagement and trust signals. Security posture is weak due to the absence of security headers and explicit policies, and privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is functional and professionally designed but requires significant improvements in security, privacy, and business transparency to enhance trust and compliance.

S

Schweizer Milchproduzenten SMP Genossenschaft

swissmilk.ch

66

Swissmilk is the official online platform of the Schweizer Milchproduzenten SMP Genossenschaft, a Swiss dairy cooperative focused on promoting Swiss milk and milk products. The website serves as an online cookbook featuring seasonal recipes, kitchen tips, healthy nutrition information, and competitions, targeting a general audience interested in Swiss dairy products. The cooperative holds a strong market position within Switzerland as a trusted promoter of local dairy. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with integration of Cloudinary for media and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not published. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy, well-maintained, and serves its business purpose effectively.