Security Directory

M

Mise en Place

miseenplace.be

50

Mise en Place is a Belgian staffing service specializing in student jobs, flex jobs, and event personnel staffing. The website targets students, flexible workers, and event organizers primarily in Belgium. The business operates in the hospitality sector and presents itself with a professional and consistent brand image. The website is built on Drupal 10 CMS, utilizing modern web fonts and icons, and includes structured data for SEO and social media integration. Google Tag Manager is used for analytics and tracking, with a cookie consent mechanism implemented to comply with privacy regulations. Security posture is strong with HTTPS enforced and standard security headers present, although some security policy and incident response information is missing. WHOIS data is privacy protected, which is common for this business type and does not raise immediate concerns. Overall, the website is well-designed, accessible, and trustworthy, with room for improvement in transparency and contact information availability.

W

WONDERFOL bv

weresmartworld.com

53

We're Smart World is a Belgium-based non-profit organization established in 2015, dedicated to promoting excellence in vegetable-focused culinary arts globally. The organization operates a comprehensive Green Guide listing over 1300 vegetable restaurants worldwide, organizes awards, and provides consulting and educational services. Their market position is niche but authoritative within the sustainable culinary sector. Technically, the website is built on Drupal 10, hosted via Hostbasket, and uses modern analytics and cookie compliance tools. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy and cookie banner but no terms of service or incident response details. Overall, the website is professional, trustworthy, and content-rich, serving a specialized audience of culinary professionals and enthusiasts.

R

RTE - RESEAU DE TRANSPORT D' ELECTRICITE

fondation-rte.org

53

Fondation RTE pour les ruralités is a French non-profit foundation established in 2008 by RTE - RESEAU DE TRANSPORT D' ELECTRICITE, focused on supporting social cohesion and development in rural areas of metropolitan France. The foundation provides financial grants and human support to local initiatives, positioning itself as a key player in rural development with over 17 years of activity and significant funding impact. The website serves as an information hub and project submission portal for stakeholders and beneficiaries. Technically, the site is built on Drupal 10 with Bootstrap 5, integrates Matomo for analytics, and uses tarteaucitron for cookie consent management, reflecting a modern and privacy-conscious digital infrastructure. Security posture is solid with HTTPS enforcement, captcha on contact forms, and privacy compliance, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with the foundation's mission and parent organization.

B

BESIX RED

besixred.com

69

BESIX RED is a well-established real estate development company founded in 2004 and operating primarily in Belgium and other European countries. The company focuses on sustainable and ambitious real estate projects including residential, office, and mixed-use developments. Their market position is strong with a clear emphasis on ESG commitments and architectural excellence. Technically, the website is built on Drupal 10 with modern libraries and APIs, providing a responsive and accessible user experience. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though improvements can be made by enabling DNSSEC and adding more security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a credible and professional business with strong digital maturity.

B

Beroepsinstituut van Vastgoedmakelaars

ipi.be

63

The Beroepsinstituut van Vastgoedmakelaars (BIV) is the official professional institute and regulatory authority for real estate brokers in Belgium. The website serves as a comprehensive resource for brokers and the public, offering information on certification, education, complaint procedures, and sector integrity. The site is well-branded, professionally designed, and provides clear navigation and relevant content tailored to its audience. Technically, it is built on Drupal 10 with modern web technologies and includes privacy and cookie compliance mechanisms. Security posture is good with HTTPS and secure forms, though some HTTP security headers and explicit security policies are absent. WHOIS data is restricted, which is typical for .be domains, but the website content and branding strongly support legitimacy. Overall, the site is a trustworthy and authoritative source for real estate brokerage regulation in Belgium.

A

Australian Institute of Aboriginal and Torres Strait Islander Studies

aiatsis.gov.au

63

The Australian Institute of Aboriginal and Torres Strait Islander Studies (AIATSIS) is Australia's sole national institution dedicated to the history, culture, and heritage of Aboriginal and Torres Strait Islander peoples. It operates as a government-funded entity providing extensive research, educational resources, and cultural heritage services. The website reflects a strong market position as a trusted custodian and leader in Indigenous Australian studies, targeting researchers, educators, Indigenous communities, and the general public. Key services include family history research support, collection access, educational curriculum resources, and cultural heritage repatriation programs. Technically, the website is built on Drupal 10 with modern JavaScript libraries and integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Hosting details are not explicitly stated but the domain is managed by the Australian Department of Finance with DNS via netregistry.net. From a security perspective, the site enforces HTTPS with strong SSL configuration and uses Content Security Policy nonces to mitigate script injection risks. However, DNSSEC is not enabled, and there is no visible cookie consent mechanism or published vulnerability disclosure policy. The WHOIS data confirms the domain is registered to a legitimate government entity with domain status protections, enhancing trustworthiness. Overall, AIATSIS's website is professional, content-rich, and secure, with minor gaps in privacy compliance and vulnerability disclosure. It serves as a reliable digital platform for Indigenous cultural and research engagement in Australia.

The Australian Government Department of Health, Disability and Ageing operates as the national authority for health and aged care policy and services in Australia. The website serves as a comprehensive resource for public health information, government programs, and policy updates, targeting a broad audience including the general public, health professionals, and industry stakeholders. The department holds a strong market position as a government entity with authoritative content and trusted branding. Technically, the website is built on Drupal CMS with govCMS, leveraging modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a high-quality user experience. Hosting and infrastructure appear robust and aligned with government standards. From a security perspective, the site enforces HTTPS and follows best practices with secure forms and privacy policies. While explicit security headers are not visible in the HTML, it is likely they are configured server-side. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong with clear policies and a vulnerability disclosure program. Overall, the website presents a low risk profile with high trustworthiness and professionalism. It effectively supports the department's mission to provide health information and services to Australians. Strategic recommendations include verifying security headers and maintaining up-to-date CMS components to sustain security posture.

V

Vzw Martine Van Camp

martinevancamp.be

51

Vzw Martine Van Camp is a well-established non-profit organization based in Belgium, founded in 2000, providing specialized care and support services to persons with disabilities. Their service offerings include day support, guided work, residential support, short-term stays, home guidance, and directly accessible help. The organization is officially recognized and subsidized by the Flemish Agency for Persons with Disabilities, positioning it as a trusted regional care provider. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on Drupal 10 with Bootstrap and integrates Google Tag Manager for analytics, showing a moderate to good level of digital maturity and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit policies. Overall, the site is trustworthy, safe, and compliant with GDPR requirements, though it lacks some advanced security and incident response disclosures.

G

Gambling Help Online

gamblinghelponline.org.au

58

Gambling Help Online is a non-profit Australian service providing free, anonymous, and 24/7 support for individuals affected by gambling. The website offers immediate help, local support services, self-help resources, and a community forum, positioning itself as a trusted resource in the gambling support sector in Australia. The site is built on Drupal 10 CMS, leveraging modern web technologies such as Font Awesome and Google Tag Manager for analytics and tracking. The design is professional, mobile-optimized, and accessible, providing a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy compliance documentation. WHOIS data is unavailable due to query failure or privacy protection, which is common for such organizations. Overall, the site is trustworthy and serves its target audience effectively but should improve privacy and cookie policy transparency to enhance compliance and user trust.

V

Vlaams Agentschap voor Personen met een Handicap (VAPH)

vaph.be

64

VAPH (Vlaams Agentschap voor Personen met een Handicap) is a Flemish government agency dedicated to supporting persons with disabilities through funding, services, and guidance. The website serves as an official portal for citizens, caregivers, and professionals in Flanders, providing comprehensive information and access to services. The site is built on Drupal 10 and integrates Matomo analytics for user tracking, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and appropriate security headers, although some security policy and incident response information could be more explicit. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Overall, the website is professional, trustworthy, and serves its public sector mission effectively.

B

Beroepsinstituut van Vastgoedmakelaars

biv.be

65

The Beroepsinstituut van Vastgoedmakelaars (BIV) is the official professional institute and regulatory body for real estate brokers in Belgium. It focuses on ensuring integrity, professionalism, and compliance within the real estate sector by providing certification, training, complaint handling, and knowledge dissemination. The website serves as a comprehensive resource for brokers, trainees, and the public, offering detailed information on becoming a broker, ethical guidelines, and complaint procedures. The organization maintains a strong market position as the authoritative entity overseeing real estate professionals in Belgium. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrating Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation. Privacy and cookie policies are prominently available, demonstrating good compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, no advanced security headers or explicit security policies were detected, and no vulnerability disclosure or incident response contacts are published. The WHOIS data for the domain is restricted, limiting transparency about domain ownership, which slightly impacts trust but is common for .be domains. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the BIV, with minor recommendations to enhance security posture and transparency to further strengthen trust and compliance.

U

UCLL

ucll.be

74

UCLL is a large higher education institution in Belgium serving approximately 15,000 students across multiple campuses. The website presents a professional and comprehensive digital presence built on Drupal 10, integrating modern analytics and consent management tools. The institution offers a variety of educational programs including professional bachelor degrees, graduaat, postgraduaat, and student support services. Technically, the site is well-implemented with good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response information is noted. WHOIS data is restricted, which slightly reduces transparency but does not detract from the overall legitimacy of the site. The site complies with GDPR and provides clear privacy and cookie policies with consent mechanisms.

D

Dooleys Club - Lidcombe

dooleys.com

59

DOOLEYS Club - Lidcombe is a well-established social and entertainment club located in Sydney's West, Australia. The club offers a variety of services including dining, entertainment events, membership benefits, and community activities. It positions itself as a key local hospitality venue with ongoing development projects to enhance its facilities. The website is professionally designed with excellent content quality and consistent branding, targeting local community members and club patrons. Technically, the site is built on Drupal 10 with modern web technologies and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site is mobile-optimized and accessible, providing a good user experience. Security-wise, the site enforces HTTPS and uses secure forms but lacks some recommended security headers and explicit security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data for the domain is unavailable, which slightly reduces trust but the overall site professionalism and content suggest legitimate business operations. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving domain registration transparency.

The Digital Transformation Agency (DTA) is an Australian government agency dedicated to improving the delivery and experience of government digital services. It provides strategic leadership, guidance on government architecture, oversight of digital and ICT investments, and advisory services to government agencies. The website reflects a mature digital presence with comprehensive content, clear navigation, and a professional design consistent with government standards. The target audience includes government agencies and the Australian public seeking information on digital government initiatives. Technically, the site is built on Drupal 10 with GovCMS, leveraging modern analytics tools such as Google Analytics and Matomo, and employs Google Tag Manager for marketing and tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. Performance is moderate, with room for optimization in loading speed. From a security perspective, the site enforces HTTPS and publishes relevant security and privacy policies, including a vulnerability disclosure policy. While explicit security headers are not detected, no vulnerabilities or exposed sensitive data were found. The WHOIS data, though limited, aligns with official Australian government domain registration practices, supporting the site's legitimacy and trustworthiness. Overall, the DTA website presents a low-risk profile with strong business credibility and a solid security posture. Strategic recommendations include enhancing security headers, implementing a cookie consent mechanism, publishing security certifications, and providing data protection officer contact details to further strengthen compliance and trust.

The Department of Finance website serves as the official portal for the Australian Government's finance department, providing extensive resources on government financial management, procurement, grants, and governance policies. It targets government officials, businesses, and individuals interacting with government financial services, positioning itself as a primary authoritative source in the Australian public sector finance domain. The website is built on a modern Drupal 10 CMS with GovCMS framework, leveraging Bootstrap for responsive design and integrating analytics tools such as Matomo and Google Analytics with privacy-conscious configurations like IP anonymization. Security measures include HTTPS enforcement and multiple security headers, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly detailed, suggesting an area for improvement. Overall, the site is professional, trustworthy, and well-optimized for accessibility and SEO, with a high legitimacy score based on domain registration and content quality.

GovTEAMS is a government collaboration platform designed to facilitate secure communication and project work across the Australian Public Service and its external partners. It offers two main platforms, GovTEAMS OFFICIAL and GovTEAMS PROTECTED, supporting collaboration up to sensitive and protected information levels. The service leverages Microsoft Office 365 and is built on Drupal 10 with GovCMS, ensuring a modern and secure infrastructure. The website is professionally designed, mobile-optimized, and provides comprehensive content and support resources. Security posture is strong with HTTPS and anonymized analytics, though improvements can be made by adding explicit security headers and cookie consent mechanisms. WHOIS data is privacy protected but consistent with government domain norms, supporting legitimacy. Overall, GovTEAMS presents a trustworthy and authoritative government service platform.

J

Jim Beam

jimbeam.com

70

Jim Beam is a globally recognized brand specializing in American bourbon whiskey and craft spirits, with a heritage spanning over 200 years. The website positions Jim Beam as the world’s leading Kentucky bourbon, targeting adult consumers interested in premium spirits and cocktail culture. The site offers product information, cocktail recipes, merchandise, and distillery visit details, reflecting a comprehensive brand engagement strategy. Technically, the site is built on Drupal 10, leveraging modern web technologies including lazy loading, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security posture is strong with HTTPS enforcement, age verification mechanisms, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is robust, with clear links to privacy, cookie, and terms policies hosted on the parent company’s domain. Overall, the website demonstrates high professionalism, trustworthiness, and alignment with regulatory requirements for alcohol marketing.

T

The Star Entertainment Group

star.com.au

68

The Star Entertainment Group operates a leading integrated resort and entertainment business in Australia, with properties in Sydney, Brisbane, and the Gold Coast. Their website showcases luxury casino gaming, award-winning dining, and premium accommodation services targeting adult customers seeking high-end entertainment experiences. The site is professionally designed with rich content and clear navigation, reflecting a mature digital presence. Technically, the website is built on Drupal 10 and integrates multiple analytics and marketing tools, indicating a modern and data-driven infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room to improve transparency around security policies and incident response. Overall, the domain and website appear legitimate and consistent with the business's Australian hospitality sector profile, with appropriate adult content warnings and responsible gambling notices.

GovCMS is an Australian government-focused open source web content management system hosted on the public cloud, designed to enable government agencies to create and manage secure, accessible, and compliant websites cost-effectively. The platform offers SaaS and PaaS models, along with a Drupal Services Panel and training resources, positioning itself as a leading CMS solution for government entities in Australia. The website reflects a strong brand identity consistent with Australian government standards and emphasizes security, accessibility, and community engagement. Technically, the site is built on Drupal 10 with a custom GovCMS theme, leveraging modern web technologies and cloud hosting. It integrates Google Analytics and Google Tag Manager with IP anonymization to balance analytics needs with privacy. The website demonstrates excellent mobile optimization, accessibility compliance (WCAG 2.0 AA), and SEO practices, contributing to a fast and user-friendly experience. From a security perspective, the site enforces HTTPS and benefits from 24/7 monitoring and support. However, explicit security headers are not visible in the HTML content, and no incident response contacts or security.txt files are published. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is limited due to auDA policies but aligns with the official Australian government domain management, supporting the site's legitimacy. Overall, GovCMS presents a professional, trustworthy, and secure platform for government web content management. Strategic improvements include implementing explicit security headers, adding cookie consent mechanisms, and publishing incident response contacts to enhance security posture and privacy compliance.

The Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts is an official Australian government entity responsible for a broad range of public services including infrastructure policy, transport regulation, regional development, communications, arts, sport, and territories administration. The website serves as an authoritative source of information and resources for Australian citizens, government stakeholders, and industry professionals. It is positioned as a key government department with enterprise-level scale and influence. Technically, the website is built on Drupal 10 and hosted on the GovCMS platform, which is tailored for Australian government websites. It employs modern web technologies such as Bootstrap for responsive design and integrates Google Tag Manager and Google Analytics for tracking and analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. From a security perspective, the site uses HTTPS with strong SSL configuration and anonymizes IP addresses in analytics to enhance privacy. However, explicit security headers are not detected in the provided data, and there is no visible security policy or incident response information. Privacy and cookie policies are not explicitly found, indicating room for improvement in privacy compliance. Overall, the security posture is solid but could benefit from enhanced transparency and additional security controls. The domain WHOIS data is limited due to registrar privacy policies, but the use of a .gov.au domain and hosting on GovCMS strongly supports the legitimacy and trustworthiness of the site. No blocking or WAF challenges were detected, allowing full content accessibility and analysis. Strategic recommendations include publishing clear privacy and cookie policies with consent mechanisms, adding security headers, and providing incident response contact information to improve trust and compliance.

The Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts is an Australian government entity responsible for a broad range of public sector functions including infrastructure policy, transport regulation, communications, arts, sport, and regional development. The website serves as an authoritative source of information and resources for Australian citizens, industry stakeholders, and government partners. It is positioned as a key government department with enterprise-level scale and influence. Technically, the website is built on Drupal 10 and hosted on the GovCMS platform, which is tailored for Australian government websites. The use of Bootstrap 4.5.0 and accessibility features indicates a modern and responsive design approach. Google Tag Manager and Google Analytics are implemented with IP anonymization, reflecting moderate user tracking balanced with privacy considerations. Performance and SEO optimizations are good, with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit privacy and cookie policies in the analyzed content, which are areas for improvement. The WHOIS data is limited due to auDA policies but aligns with expectations for Australian government domains, supporting the site's legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site demonstrates a strong business credibility and technical foundation with room to enhance privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response and vulnerability disclosure information.

Access Hub is an Australian government website managed by the Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts. It provides information and services to assist Australians who are deaf, hard of hearing, or have speech impairments to connect via phone and online communication methods. The platform prominently features the National Relay Service and related accessible communication services. The website is built on Drupal 10 and GovCMS, indicating a government-managed content management system with a focus on accessibility and usability. The site includes multimedia content such as videos with transcripts and accessibility tools like ReadSpeaker. Security-wise, the site uses HTTPS and anonymizes IP addresses in analytics, but lacks visible security headers and explicit privacy or cookie policies on the homepage. WHOIS data is not publicly available due to auDA policies, but the domain is a gov.au domain, which is a strong legitimacy indicator. Overall, the site is trustworthy, professionally designed, and serves an essential government function.

C

Conga

conga.com

73

Conga is an established enterprise software company specializing in commercial operations automation, including Configure Price Quote (CPQ), Contract Lifecycle Management (CLM), document automation, and digital commerce solutions. Founded in 1996, Conga positions itself as a leader in delivering AI-driven business process innovations to help organizations become more connected and intelligent. The company targets businesses seeking to streamline revenue operations and improve customer experiences through automation. Technically, Conga's website is built on Drupal 10, leveraging modern web technologies and integrations such as Google Analytics, Google Tag Manager, Marketo, and ZoomInfo. The site is hosted with Cloudflare DNS services and employs strong security practices including HTTPS, security headers, and cookie consent mechanisms. The website demonstrates excellent mobile optimization, accessibility, and SEO implementation, reflecting a mature digital infrastructure. From a security perspective, Conga maintains a strong posture with enforced HTTPS, comprehensive security headers, and no detected vulnerabilities or exposed sensitive data. However, the absence of a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and readiness. The WHOIS data confirms the domain's legitimacy and long-standing presence, reinforcing trustworthiness. Overall, Conga's website reflects a professional, secure, and privacy-conscious enterprise platform with robust business credibility. Strategic recommendations include enabling DNSSEC, publishing formal security and incident response policies, and establishing a vulnerability disclosure program to enhance security transparency and stakeholder confidence.

S

Skerryvore Asset Management Ltd (formerly BennBridge Ltd)

bennbridge.com

58

BennBridge, operated by Skerryvore Asset Management Ltd, is a UK FCA-authorized boutique investment fund manager targeting European investors. The website presents a professional but minimalistic front with clear branding and regulatory trust signals. The technical infrastructure is based on Drupal 10 with modern marketing and analytics tools integrated, indicating a moderate level of digital maturity. However, the homepage content appears minimal with a loading spinner, suggesting incomplete or dynamically loaded content. Security posture is moderate with HTTPS implied but no explicit security headers detected and no public security or incident response policies. Privacy and cookie policies are present and GDPR compliant, but contact information is lacking. The domain WHOIS data is missing, raising concerns about domain registration legitimacy, though the FCA authorization supports business credibility. Overall, the site is functional but could improve transparency and security practices.

T

Touchstone Asset Management

touchstoneam.com

54

Touchstone Asset Management is a boutique Australian equities manager operating under the Bennelong Fund Management group. The company focuses on an index unaware investment approach targeting quality companies at reasonable prices. The website is professionally designed using Drupal 10, integrating modern analytics and marketing tools such as Google Analytics, Marketo, and Crazy Egg. It targets financial advisers, personal investors, and institutional investors primarily in Australia and New Zealand. The business model centers on asset management services with a clear market position as a Bennelong boutique. Technically, the website demonstrates a mature digital infrastructure with good mobile optimization, accessibility, and SEO practices. The use of multiple third-party marketing and analytics scripts indicates a moderate level of user tracking, though no explicit cookie consent mechanism was detected, which may impact privacy compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response policies suggests room for improvement. The WHOIS data is notably missing, which is unusual for a financial services domain and reduces trust slightly. However, the professional branding, clear contact information, and affiliation with Bennelong Fund Management support the legitimacy of the business. Overall, the website presents a trustworthy and professional front but should address privacy compliance and security header implementation to enhance its security posture.

S

Skerryvore Asset Management

skerryvoream.com

60

Skerryvore Asset Management is a boutique asset management firm established in 2019 in partnership with BennBridge, focusing on responsible investing in emerging markets to generate long-term absolute returns. The company operates primarily in the UK financial sector and targets investors seeking specialized emerging market exposure. The website reflects a professional and consistent brand image with clear regulatory disclosures and contact information. Technically, the site is built on Drupal 10 with modern JavaScript libraries and integrates multiple marketing and analytics tools such as Google Analytics, Marketo, and Outbrain, indicating a mature digital marketing approach. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of explicit security headers suggests room for improvement. The lack of WHOIS data is a notable anomaly but does not appear to undermine the legitimacy of the business based on website content and regulatory references. Overall, the site is well-structured, accessible, and compliant with privacy regulations, making it a credible online presence for a financial services firm.

Q

Quay Global Investors

quaygi.com

52

Quay Global Investors is a boutique asset management firm specializing in real estate securities, operating as part of the Bennelong Fund Management Group in Australia. The company targets financial advisers, personal investors, and institutional investors with a focus on wealth preservation and creation through innovative real estate investment strategies. The website reflects a professional and consistent brand image aligned with its parent company, Bennelong. Technically, the site is built on Drupal 10 with modern analytics and marketing tools integrated, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced, though lacking explicit security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. The absence of WHOIS registration data for the domain is a notable concern, impacting the domain's trustworthiness despite the professional presentation and clear contact information. Overall, the site scores well on content quality and business credibility but should address privacy compliance and domain legitimacy to improve trust and security.

C

Canopy Investors

canopyinvestors.com

62

Canopy Investors is a boutique investment management firm operating under the Bennelong Fund Management umbrella, focusing on actively managed global small and mid-cap equity funds. The website targets financial advisers, personal investors, and institutional investors primarily in Australia and the APAC region. The firm positions itself as a specialized boutique within a larger financial group, emphasizing professional fund management services. Technically, the website is built on Drupal 10 with modern JavaScript libraries and integrates multiple marketing and analytics tools such as Google Analytics, Marketo, and Outbrain. The site is mobile-optimized and demonstrates good accessibility and SEO practices. However, some security best practices like security headers and explicit cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. The absence of WHOIS registration data reduces domain trustworthiness, although the professional presentation and association with Bennelong Fund Management mitigate some concerns. No critical vulnerabilities or malware indicators were found. Overall, the website is professional and functional with moderate security posture and privacy compliance. Strategic improvements in transparency, security headers, and cookie consent would enhance trust and compliance.

B

Bennelong Long Short Equity Management

blsem.com.au

53

Bennelong Long Short Equity Management is a boutique Australian asset manager specializing in market neutral investment strategies, serving fund-of-funds and private investors. The company operates as a Bennelong boutique under the BFM Group umbrella, positioning itself as a specialized player in the financial services sector. The website reflects a professional and consistent brand image with clear business and contact information, targeting financial advisers, institutional, and personal investors. Technically, the website is built on Drupal 10 with modern JavaScript libraries and integrates marketing and analytics tools such as Google Tag Manager and Marketo Munchkin. The site is mobile optimized, accessible, and SEO friendly, though performance is moderate. Security posture is good with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms, which are recommended for enhanced compliance and protection. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure reduces transparency. The WHOIS data is privacy protected, which is typical for financial services, but limits direct verification of domain registration details. The domain and website content are consistent with a legitimate financial services business. Strategically, the company should enhance privacy compliance by implementing cookie consent and publishing security policies. Improving security headers and establishing a vulnerability disclosure process would strengthen trust and resilience. The website quality and business credibility are high, supporting a positive risk assessment with recommendations focused on compliance and transparency improvements.

4

4D Infrastructure

4dinfra.com

60

4D Infrastructure is a boutique asset management firm specializing in investments in listed infrastructure companies worldwide. Positioned as a Bennelong boutique, it leverages the parent company's resources and brand reputation to serve financial advisers, personal investors, and institutional investors. The website presents a professional and consistent brand image with clear navigation and relevant content about funds, investment rationale, and insights. Technically, the site is built on Drupal 10 with modern analytics and marketing integrations, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks published security policies and incident response contacts. The absence of WHOIS registration data reduces transparency and trust from a domain registration perspective, warranting further verification. Overall, the site is credible and professionally maintained but could improve in security transparency and domain registration clarity.

E

Embuild VZW

embuildoostvlaanderen.be

53

Embuild Oost-Vlaanderen is a regional non-profit organization dedicated to supporting companies active in the construction sector within Oost-Vlaanderen, Belgium. The organization provides tailored advice, practical support, extensive training programs, and represents the interests of the construction industry at various political and advisory levels. Their website reflects a professional and well-structured digital presence, emphasizing their key services and partnerships. Technically, the website is built on Drupal 10 and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and CookieHub for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, although some security headers appear to be missing. The cookie consent mechanism is comprehensive and GDPR compliant, indicating a mature approach to privacy. From a security perspective, the site uses HTTPS and employs cookie consent best practices but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, supporting the legitimacy of the domain and organization. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security policy transparency and header implementation. The risk level is low, and the site is trustworthy for its intended audience.

E

Embuild VZW

embuildwvl.be

52

Embuild VZW is a Belgian non-profit organization established in 2022, focused on providing advisory and support services to construction professionals in West Flanders. The website serves as a digital platform offering insights, training, and member benefits tailored to the construction sector. The company positions itself as a trusted regional partner with a comprehensive approach to business support in construction. Technically, the website is built on Drupal 10, employs modern web technologies, and integrates Google Analytics and CookieHub for analytics and cookie consent management. The site is mobile-optimized and accessible, with good SEO practices and structured data implementation. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR, though it could improve security posture by adding security headers and incident response information.

V

Vlaams Energiebedrijf (VEB)

veb.be

56

The Vlaams Energiebedrijf (VEB) is a Flemish public sector entity focused on exceeding climate goals through efficient energy management. The website presents a professional and consistent brand image, targeting public sector organizations in Flanders. The business model centers on providing energy efficiency services and climate goal support to governmental bodies. Technically, the site is built on Drupal 10, employs modern web technologies including Google Tag Manager and Cookiebot for analytics and consent management, and is well-optimized for mobile and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. WHOIS data is restricted due to DNS Belgium policies, but the domain and website content align with a legitimate public sector organization. Overall, the site is trustworthy, professional, and compliant with privacy norms, though improvements in security policy transparency and vulnerability disclosure are recommended.

B

Bennelong Funds Management

bennelongfunds.com

55

Bennelong Funds Management is a medium-sized Australian financial services company specializing in actively managed equity funds. It serves institutions, financial advisers, and direct investors, positioning itself as a partner of high performance with a network of boutique investment partners. The company is part of the Bangarra Group, indicating a broader corporate structure. The website is professionally designed, mobile-optimized, and provides comprehensive business and contact information, supporting its credibility in the finance sector. Technically, the website is built on Drupal 10 with modern JavaScript libraries and integrates multiple marketing and analytics tools such as Google Analytics, Marketo, Crazy Egg, and Outbrain. The site demonstrates good SEO and accessibility practices, though performance is moderate. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but lacks some advanced security headers and explicit security policy disclosures. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. However, the website content and business information appear consistent and professional, mitigating some risk. Privacy and cookie policies are present and GDPR compliant, with active consent mechanisms. No adult or questionable content is detected, making the site safe for general audiences. Overall, Bennelong Funds Management presents a trustworthy and professional online presence with room for improvement in security transparency and WHOIS data clarity.

W

Webwerk

webwerk.be

53

Webwerk is a Belgian digital consultancy and web development company specializing in Drupal-based websites and digital strategy. Founded in 2014, it serves organizations seeking modern, sustainable web solutions. The company positions itself as a trusted partner with a focus on long-term client relationships and quality Drupal technology implementations. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on Drupal 10, uses Google Analytics and Tag Manager for tracking with IP anonymization, and is hosted by Combell nv. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks some security headers and published security policies. Privacy compliance is partial due to absence of a cookie consent mechanism, though a comprehensive privacy policy is present. Overall, the site is trustworthy and professional with room for improvement in security and privacy transparency.

D

District09

gent.be

75

The website stad.gent is the official digital portal for the city of Ghent, Belgium, managed by the organization District09. It serves as a comprehensive platform offering a wide range of municipal services and information to residents and visitors, including citizen services, cultural activities, sports, mobility, education, business support, environmental initiatives, and local governance. The site is multilingual and designed to be accessible and user-friendly, reflecting a mature digital presence for a government entity. Technically, the site is built on Drupal 10, integrates Google Tag Manager, Google Optimize, and Cookiebot for analytics and consent management, and is hosted by Combell NV. Security posture is generally good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled, representing a minor security gap. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the provided content. Overall, the site demonstrates high professionalism and trustworthiness appropriate for a government service portal.

P

Port Oostende

portofoostende.be

52

Port Oostende operates as a maritime port authority and service provider specializing in niche markets within the blue economy, including offshore wind energy, aquaculture, and circular industry. The website reflects a medium-sized, professional organization with a clear focus on sustainable maritime economic growth and business facilitation. Their market position is strong within the Flanders coastal region, supported by specialized terminals and services. Technically, the site is built on Drupal 10 with modern front-end technologies, providing good mobile optimization and accessibility. Security posture is moderate, with room for improvement in security headers and public security policies. Privacy compliance is well addressed with cookie consent mechanisms and clear privacy and cookie policies. The lack of WHOIS data transparency is a moderate concern but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving domain registration transparency.

S

Stad Gent

klimaatstad.gent

65

Stad Gent operates an official municipal website focused on climate action, sustainability, and environmental initiatives targeting residents and local businesses. The site provides comprehensive information on climate ambitions, energy saving, green neighborhood projects, and sustainable business support. The technical infrastructure is modern, leveraging Drupal 10 CMS, with integrations for analytics, cookie consent, and live chat, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its government mandate.

S

Stad Gent

stad.gent

76

Stad Gent operates as the official municipal government portal for the city of Ghent, Belgium, providing a wide range of public services and information to residents and visitors. The website is well-structured, multilingual, and offers comprehensive access to civil affairs, cultural activities, mobility, education, business support, and social welfare services. The site leverages modern web technologies including Drupal 10, Google Tag Manager, and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the website demonstrates a mature digital presence suitable for a large government entity, with good privacy compliance and user experience.

N

nazwa.pl sp. z o.o.

inpostpay.pl

72

InPost Pay is a Polish e-commerce payment and delivery platform that integrates payment and delivery options into a single button, simplifying online shopping for users. The service targets online shoppers in Poland, offering a unified app experience to manage orders, payments, and deliveries from multiple stores. The website is built on Drupal 10 and uses modern web technologies including Google Tag Manager and OneTrust for cookie consent management. The technical infrastructure is modern and mobile-optimized, providing a good user experience. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though some security headers could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the website is professional and trustworthy, with transparent domain registration and consistent business information.

B

Bennelong Australian Equity Partners

baep.com.au

55

Bennelong Australian Equity Partners (BAEP) is a boutique Australian fund manager specializing in high-quality Australian listed equities. The company operates as part of the Bennelong/BFM Group, providing managed funds and investment services primarily targeting financial advisers, personal investors, and institutional investors. The website reflects a professional and consistent brand image with clear business and contact information, supporting its market position as a reputable boutique fund manager. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries and marketing tools such as Google Analytics, Marketo, Outbrain, and Crazy Egg. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Performance is moderate with room for optimization, and the technical stack is up-to-date. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or suspicious patterns were detected, but improvements in security transparency and vulnerability disclosure are recommended. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The absence of detailed WHOIS data is typical for Australian domains and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

M

McDonald Jones Homes

mcdonaldjoneshomes.com.au

71

McDonald Jones Homes is a prominent Australian home builder specializing in scalable modern home designs and packages primarily serving Sydney, ACT, and NSW regions. The company offers a wide variety of home designs including single storey, two storey, acreage, narrow block, and architecturally designed homes, supported by a customer portal and multiple display home locations. Their market position is strong with a large portfolio and comprehensive digital presence. Technically, the website is built on Drupal 10 with integration of modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Hotjar, and LiveChat, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced, use of reCAPTCHA, and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

V

VVSG

vvsg.be

70

VVSG is a prominent association supporting Flemish cities and municipalities by providing advice, training, advocacy, and knowledge resources to strengthen local governance. The website reflects a mature digital presence built on Drupal 10, integrating modern tracking and consent management tools while maintaining good accessibility and SEO practices. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers could be improved. The lack of WHOIS transparency is due to registry policy rather than suspicious activity, and the website's professional branding and partner affiliations reinforce its legitimacy. Overall, VVSG demonstrates a strong market position as a key government-related non-profit entity in Belgium.

F

Fevia

fevia.be

63

Fevia is a Belgian industry association focused on the food sector, providing its members with up-to-date information on legislation, trends, and innovations to support informed decision-making. The website is professionally designed using Drupal 10, featuring modern frontend technologies such as Alpine.js and integrated marketing tools like Google Tag Manager and CookieHub for cookie consent management. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not published. The domain WHOIS data is restricted, showing a 'NOT ALLOWED' status, which limits transparency but is justified for privacy reasons in this business context. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

D

Departement Werk, Economie, Wetenschap, Innovatie en Sociale Economie (WEWIS)

ewi-vlaanderen.be

41

The website represents the official Flemish government department responsible for work, economy, science, innovation, and social economy, recently merged into the new Departement WEWIS. It serves as an information portal providing news, publications, events, and departmental mission details targeted at the general public, businesses, and policymakers in Flanders. The site is professionally designed with consistent branding and clear navigation, supporting both Dutch and English languages. Technically, it is built on Drupal 10 with integration of Piwik PRO analytics and a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and secure cookie settings, though explicit security headers and policies could be improved. Overall, the site is trustworthy, safe, and compliant with basic privacy requirements, though it lacks explicit privacy and terms of service pages on the homepage.

H

HUS (Helsingin ja Uudenmaan sairaanhoitopiiri)

hus.fi

67

HUS (Helsingin ja Uudenmaan sairaanhoitopiiri) operates Finland's largest university hospital, providing comprehensive medical and dental specialty care services. The website serves multiple audiences including patients, healthcare professionals, and researchers, offering detailed information on treatments, hospital locations, research projects, and educational resources. The organization holds a strong market position as a key public healthcare provider in Finland.

W

Wallonie-Bruxelles International (WBI)

wbi.be

52

Wallonie-Bruxelles International (WBI) is a governmental organization responsible for managing international relations for the Wallonia-Brussels region in Belgium. It supports cultural, educational, and economic cooperation with over 70 countries and regions. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to government officials, international partners, and cultural stakeholders. Technically, the site is built on Drupal 10 with modern libraries and includes a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though some security headers could be improved. Overall, the site demonstrates high trustworthiness and professionalism consistent with its governmental role.

E

eps en kaas

epsenkaas.be

51

eps en kaas is a small digital agency based in Gent, Belgium, specializing in branding and custom website development. The company targets businesses and organizations seeking professional digital presence and branding services. Their market position is regional with a portfolio that includes cultural and educational projects, indicating a niche focus and trusted client relationships. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital infrastructure. The use of Drupal 10 CMS and privacy-focused analytics (Plausible) demonstrates a commitment to modern, privacy-conscious technology. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. The WHOIS data is privacy protected, which is typical for small agencies and does not raise immediate trust concerns. Overall, the website presents a credible and professional business front with room for security and compliance improvements.

K

Kunstwerkt

beeld.be

57

Beeld is a specialized online platform operated by Kunstwerkt, focused on showcasing visual artwork and supporting artists through features like open calls and artist profiles. The platform targets the visual arts community primarily in Belgium and Dutch-speaking regions. Technically, the website is built on Drupal 10, uses modern analytics tools with privacy considerations, and implements cookie consent mechanisms. The site is well-structured, mobile-optimized, and provides a good user experience. Security posture is solid with HTTPS and privacy-respecting analytics, though some security headers and explicit security policies are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, but lacks direct contact information and formal security incident response details.

Sport Integrity Australia is a government agency established in 2020 to ensure safety and fairness in Australian sport at all levels. It consolidates multiple national integrity programs to provide coordinated anti-doping, safeguarding, education, and competition manipulation services. The website serves as an authoritative resource for athletes, coaches, and the public, offering complaint reporting, educational resources, and news updates. Technically, the site is built on Drupal 10 and GovCMS, leveraging modern analytics tools like Google Analytics and Tag Manager, with good mobile optimization and accessibility. Security posture is strong with HTTPS and anonymized analytics, though it lacks a public security policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its government mandate.