Low-risk security reports

NRW.Global Business is a government-affiliated trading agency focused on promoting North Rhine-Westphalia as Germany's premier investment location. The website targets foreign companies seeking to establish or expand their presence in the region, offering consulting and market entry support services. The site is built on TYPO3 CMS and integrates advanced analytics and marketing tools such as Matomo, Google Analytics, Facebook Pixel, and Cookiebot for consent management. Accessibility features are also implemented via the eyeAble tool. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of a security.txt and incident response information is noted. The lack of WHOIS data raises some concerns about domain registration transparency, but the overall digital presence and content quality suggest a legitimate and professional operation. Strategic recommendations include publishing explicit security and incident response policies and verifying domain registration details.

O

OpenDrives

opendrives.com

76

OpenDrives is a technology company specializing in high-performance, scalable NAS and data storage solutions tailored for businesses managing unstructured data and media workflows. The company positions itself as a reliable B2B provider with a focus on optimizing data management and storage efficiency. Their website reflects a professional and consistent brand image, targeting business customers in the technology sector primarily within the United States. Founded in 2013, OpenDrives has established a medium-sized presence with clear contact information and active social media channels. Technically, the website is built on WordPress and leverages modern web technologies including Google Analytics, Hotjar, Cookiebot for consent management, and various frontend libraries like Swiper.js and AOS for enhanced user experience. The site is hosted with GoDaddy as registrar and uses Sucuri DNS servers, indicating attention to security and performance. The website is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and some security headers are not explicitly detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contact is noted. Overall, OpenDrives presents a trustworthy and professional online presence with solid business credibility and privacy compliance. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen their security posture and trustworthiness.

M

Mattermost

mattermost.com

80

Mattermost is a technology company specializing in secure collaboration platforms designed for mission-critical workflows. Their platform integrates people, processes, tools, and AI infrastructure to provide a resilient and adaptable environment for enterprise communication and workflow management. Positioned as a trusted and flexible solution, Mattermost targets medium to large enterprises requiring secure and customizable collaboration tools. The company was founded in 2012 and operates primarily from the United States, with a strong emphasis on security and compliance.

A

Amazon Web Services, Inc.

aws.com

77

Amazon Web Services, Inc. (AWS) is a leading global cloud computing services provider offering a broad set of reliable, scalable, and inexpensive cloud infrastructure services. AWS serves a wide range of customers including developers, enterprises, startups, and government agencies, providing services such as compute, storage, databases, networking, machine learning, and analytics. As a subsidiary of Amazon.com, Inc., AWS holds a dominant market position in the cloud industry with a pay-as-you-go business model and extensive global infrastructure. The website demonstrates a mature technical infrastructure leveraging modern technologies such as React and AWS CloudFront for hosting and content delivery. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. Security is robust with HTTPS enforcement, strong Content Security Policy headers, and adherence to multiple compliance frameworks including ISO 27001, SOC reports, PCI DSS, and FedRAMP. AWS maintains a strong security posture with no detected vulnerabilities or exposed sensitive data. The company provides clear privacy policies, cookie consent mechanisms, and incident response contacts, indicating a commitment to privacy and regulatory compliance. The domain's WHOIS data for the subdomain is unavailable as expected, but the overall trustworthiness is high given the brand reputation and security practices. Overall, AWS's website and digital presence reflect a highly professional, secure, and trustworthy cloud services provider with excellent compliance and security standards.

J

JobRouter AG

jobrouter-workflow.com

77

JobRouter AG operates a sophisticated low-code digital process automation platform designed to help enterprises automate and optimize complex business workflows. With over 20 years of experience and a broad international customer base, JobRouter offers modular, scalable solutions including workflow automation, document management, and cloud services. The company maintains a strong partner network and integrates with major enterprise systems such as SAP and Microsoft Office. Technically, the website is built on TYPO3 CMS and employs Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies with user consent mechanisms. Security posture is solid with HTTPS and vulnerability disclosure policies, though explicit security headers are not evident in the provided data. The absence of WHOIS registration data is a notable gap, warranting further verification. Overall, JobRouter presents as a credible and professional technology provider with a mature digital presence.

The Facebook page 'dizen' represents a small graphic design studio based in Jihlava, Czech Republic, specializing in creative design services. The business leverages the Facebook platform to showcase its portfolio and engage with a local audience, maintaining a modest but active follower base. The page content is professional and clearly communicates the studio's niche within the Bohemian-Moravian Highlands region. Technically, the page benefits from Facebook's robust infrastructure, ensuring fast loading times, mobile optimization, and secure HTTPS delivery. However, the page lacks direct privacy and cookie policies, which is typical for Facebook pages but may impact compliance perceptions. Security posture is strong due to Facebook's platform controls, though explicit security headers and incident response information are absent. Overall, the business presents a trustworthy and professional front with room for enhanced privacy transparency.

V

Vipps MobilePay AS

vippsmobilepay.com

76

Vipps MobilePay AS operates a modern, well-branded payment platform targeting businesses in Finland and the Nordic region. The website presents a professional and user-friendly interface, emphasizing seamless payment solutions both online and in physical stores. The company leverages a modern technology stack including Next.js and Azure hosting, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer locks, though DNSSEC is not enabled and explicit incident response contacts are not published. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism aligned with GDPR requirements. Overall, the site reflects a mature fintech business with a clear market position and trustworthy digital presence.

C

Clifford Chance

cliffordchance.com

77

Clifford Chance is a leading international law firm with a significant global presence across five continents. The firm offers a broad range of legal services including corporate law, financial regulation, risk management, real estate, tax, and dispute resolution. Their website reflects a mature digital infrastructure with comprehensive content tailored to corporate clients and legal professionals. The firm leverages modern technologies such as Adobe Experience Manager for content management, Okta for authentication, and OneTrust for cookie consent, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced, use of trusted authentication mechanisms, and privacy compliance measures in place, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website and digital presence project a professional, trustworthy, and well-established business entity.

A

A&O Shearman

allenovery.com

81

A&O Shearman is a global law firm specializing in U.S. and English law, targeting international corporate clients and legal professionals. The website presents a professional and well-branded digital presence, leveraging modern web technologies such as React, Next.js, and Sitecore CMS. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, although the absence of security headers suggests room for improvement. Privacy compliance is limited as no explicit privacy or cookie policies were detected in the provided content. The WHOIS data is notably missing or inaccessible, raising concerns about domain registration legitimacy. Overall, the website is professional and trustworthy in appearance but requires verification of domain registration and enhancement of privacy and security policies.

K

Kirkon Keskusrahasto

evl.fi

77

The website evl.fi serves as the official online presence of the Evangelical Lutheran Church of Finland, operated by Kirkon Keskusrahasto. It provides information and services related to the church's activities, targeting Finnish residents interested in religious and community engagement. The domain is well-established, dating back to 1991, reflecting the long-standing nature of the organization. The website employs a modern WordPress CMS with SEO optimization and a GDPR-compliant cookie consent mechanism, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS with good SSL configuration and standard security headers, though DNSSEC is not implemented. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is partially met with cookie consent but lacks explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and aligned with the organization's mission.

B

Bizzdesign

bizzdesign.com

76

Bizzdesign is a well-established enterprise architecture software company, founded in 1999, offering a powerful SaaS platform designed to support organizations in their digital transformation journeys. The company holds a strong market position as a leader in the Gartner Magic Quadrant for EA tools for nine consecutive years, serving enterprise clients across various industries. Their key services include enterprise architecture management, business architecture, application portfolio management, and risk security management, targeting roles such as CIOs, enterprise architects, and business leaders. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, Hotjar, Pardot, and other marketing and analytics tools. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting is provided by Hosting Concepts B.V., and the domain is long-established and consistent with the business history. From a security perspective, the site enforces HTTPS with good SSL configuration and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy and X-Content-Type-Options are missing. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy and cookie policy and consent mechanism in place, though no explicit security policy or incident response contacts are published. Overall, the website presents a low risk profile with strong business credibility and digital maturity. Strategic recommendations include enabling DNSSEC, adding missing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to enhance trust and security posture.

I

iSpring Solutions, Inc.

ispring.eu

80

iSpring Solutions, Inc. is a well-established company founded in 2001, specializing in eLearning authoring tools and learning management systems designed to help organizations create effective online training programs. The company serves a global audience with over 61,000 clients in 173 countries and supports 1.75 million users daily. Their product suite includes iSpring Suite, iSpring Learn LMS, and other eLearning solutions, targeting training organizations and professionals. The website is professionally designed, mobile-optimized, and provides comprehensive content including customer testimonials and certifications, reflecting a strong market position in the education technology sector. Technically, the website employs modern JavaScript libraries such as Tiny-slider and MicroModal, integrates marketing automation tools like Diffuser and Prism, and uses Sentry for error tracking. The site is hosted with CDN support, ensuring fast performance and excellent mobile responsiveness. SEO and accessibility practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with a good SSL configuration and uses reputable third-party scripts. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present, and there is no visible security policy or vulnerability disclosure page. No vulnerabilities or exposed sensitive data were detected, indicating a mature security posture but with room for improvement in formal security documentation. Overall, the website is trustworthy and professional, with strong business credibility and compliance indicators. The absence of WHOIS data is a notable gap but does not significantly detract from the overall legitimacy given the comprehensive business information and social proof available. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

W

Wisenetwork Oy

wisenetwork.fi

76

Wisenetwork Oy is a Finnish technology company specializing in software solutions for access control, membership management, and event registration. Established in 2012, the company serves business clients primarily in Finland, offering integrated systems that include CRM, invoicing, and e-commerce functionalities. The website reflects a mature business with a niche focus, supported by a custom CMS and hosted on Google Cloud infrastructure. The technical stack includes legacy jQuery and Bootstrap, with modern integrations such as Google reCAPTCHA and Cookiebot for privacy compliance. Security measures are basic, with room for improvement in security headers and updated libraries. The absence of explicit privacy and terms of service pages suggests an area for compliance enhancement. Overall, the domain registration data aligns well with the website content, indicating a legitimate and stable business presence.

D

Datadog

datadog.com

82

Datadog is a leading enterprise SaaS provider specializing in cloud monitoring and security services. Founded in 2010 and headquartered in New York, it offers a comprehensive platform that integrates infrastructure monitoring, application performance monitoring, log management, security monitoring, and AI observability. The company targets IT, DevOps, and security teams in large enterprises, positioning itself as a market leader with strong industry recognition such as Gartner Magic Quadrant and Forrester Wave leadership. The website reflects a mature digital presence with professional design, clear navigation, and extensive product information. Technically, the site is built using modern web technologies including the Hugo static site generator, Alpine.js, and integrates advanced analytics and consent management tools. It is optimized for performance, mobile responsiveness, and SEO, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response details are not publicly disclosed. Overall, Datadog's website and business presence demonstrate a robust security and compliance posture suitable for an enterprise SaaS provider. The absence of WHOIS data is a notable anomaly but does not detract significantly from the legitimacy given the company's established market position and transparent business information. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection officer contacts and data retention policies to further strengthen trust and compliance.

A

Austral Locks

ausloc.com

76

Austral Locks is a well-established Australian manufacturer and market leader in premium door and window locking hardware. The company operates under the global security leader Allegion and offers a range of locking solutions for windows, security screen doors, and sliding patio doors. The website reflects a mature business with a clear market position and professional branding. Technically, the site is built on WordPress with WooCommerce and uses modern monitoring and consent tools such as New Relic and OneTrust. Security posture is good with HTTPS enforced and domain protections in place, though some security headers and DNSSEC could be improved. Privacy compliance is well addressed with cookie consent and a comprehensive privacy policy. Overall, the website is professional, secure, and trustworthy, supporting the company's business credibility.

B

BMI Group

bmigroup.com

77

BMI Group is a prominent supplier of roofing and waterproofing solutions, serving the construction industry primarily in the UK and Europe. The company offers a comprehensive range of products and technical support services, positioning itself as a market leader with a strong brand presence. The website reflects a mature digital infrastructure built on modern technologies such as React and Gatsby, with a CMS backend powered by Payload CMS. The site is well-optimized for mobile and SEO, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforcement and appropriate security headers, though the absence of a public security policy and incident response contact suggests room for improvement. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the lack of WHOIS data raises concerns about domain registration legitimacy, which should be investigated further. Overall, BMI Group's digital presence is professional and trustworthy, supporting its business credibility in the construction sector.

3

3CX Ltd

3cx.cz

78

3CX Ltd is a technology company specializing in software-based VoIP IP PBX systems that integrate voice, video, live chat, and social media messaging into a unified communications platform. The company positions itself as a global provider with a strong market presence and a comprehensive suite of communication tools tailored for businesses. The website reflects a mature digital infrastructure with professional design, SEO optimization, and extensive marketing and analytics integration. Security posture is solid with HTTPS and no evident vulnerabilities, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency, but the overall brand presence and content quality support legitimacy. Strategic recommendations include enhancing security header implementation and publishing clear security and incident response policies to bolster trust.

A

Allegion

allegion.com

77

Allegion is a large enterprise specializing in security and access control solutions for homes, businesses, schools, and institutions. The company maintains a professional and comprehensive website that reflects its market position as a publicly traded manufacturer listed on the NYSE. The site provides extensive corporate information, including ESG priorities, investor relations, and product offerings, targeting business customers and institutional clients. Technically, the website leverages modern web technologies such as Adobe Experience Manager, jQuery, Bootstrap, and integrates analytics and consent management tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS, Content-Security-Policy headers, and reCAPTCHA protections, though explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high professionalism and trustworthiness, though the absence of WHOIS data is a notable anomaly likely due to registry or query limitations rather than privacy concerns.

L

Luxinnovation

luxinnovation.lu

79

Luxinnovation is Luxembourg's national innovation agency dedicated to empowering companies to innovate and fostering a sustainable and digital economy. The website reflects a mature digital presence with comprehensive content targeting startups, businesses, and research organizations. The technical infrastructure leverages modern web technologies, including Tailwind CSS, Alpine.js, Kentico CMS, and integrates multiple analytics and marketing tools such as Matomo, Google Tag Manager, Facebook Pixel, and LinkedIn Insight. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is partial, with cookie consent implemented but lacking a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

Ramboll Group is a leading international design and consultancy firm specializing in sustainable solutions across private and public sectors worldwide. With over 18,000 experts, Ramboll delivers engineering, environmental, and construction consulting services focused on creating positive societal impact. The website reflects a mature digital presence with modern technologies such as Next.js, React, and Chakra UI, supported by advanced analytics and consent management tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although the absence of a public security policy and incident response contact is noted. The missing WHOIS data is unusual but does not detract significantly from the overall trustworthiness given the professional branding and comprehensive content. Strategic recommendations include publishing explicit security and incident response policies and verifying domain registration details for completeness.

S

Synology Inc.

sy.to

76

Synology Inc. is a well-established technology company specializing in data management, storage, backup, and cloud solutions. The company offers a broad portfolio of products including NAS and SAN storage systems, backup and recovery solutions, surveillance systems, networking devices, and productivity software. Positioned as a global leader in the data storage industry, Synology targets both business and individual users seeking scalable and secure data management platforms. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its market position. Technically, the website employs modern web technologies such as Vue.js and jQuery, integrates Google Tag Manager and LiveChat for analytics and customer engagement, and demonstrates good performance and mobile optimization. The site is well-structured with proper SEO and accessibility considerations, indicating a high level of digital maturity. From a security perspective, Synology demonstrates strong commitment through HTTPS enforcement, detailed security policies, a secure development lifecycle, supply chain risk management, and a public bounty program. Cookie consent mechanisms and privacy policies align with GDPR compliance, enhancing user trust. No critical vulnerabilities or security issues were detected in the analysis. Overall, the website presents a low-risk profile with strong business credibility, technical robustness, and privacy compliance. Strategic recommendations include publishing a security.txt file to facilitate vulnerability reporting and explicitly listing a Data Protection Officer contact to further enhance compliance transparency.

S

Seravo

seravo.com

78

Seravo is a Finnish company specializing in premium managed WordPress hosting services, focusing on site speed, security, and automatic updates with continuous 24/7 monitoring. The company positions itself as a niche provider targeting WordPress site owners and agencies seeking reliable and secure hosting solutions. Their business model is subscription-based, emphasizing high-quality service and compliance with industry standards such as ISO 27001 and GDPR. The website reflects a professional and consistent brand image with comprehensive business and security information.

V

Visit Finland

visitfinland.com

77

Visit Finland operates as the official travel guide and tourism promotion platform for Finland, providing comprehensive information about the country's nature, culture, and travel opportunities. The website serves as a key resource for tourists planning trips to Finland, offering detailed guides, event information, and cultural highlights. It is positioned as an authoritative source backed by Business Finland, the parent organization responsible for promoting Finnish business and tourism internationally. The site targets a broad audience of international travelers and tourism stakeholders. Technically, the website is built on modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good accessibility. Integration with Google Tag Manager and Cookiebot indicates a mature approach to analytics and privacy compliance. The site employs HTTPS with strong security headers, reflecting a solid security posture. However, there is a lack of publicly available security policies or incident response information, which could be improved to enhance transparency. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall trustworthiness given the official branding and content quality. Strategic recommendations include publishing explicit security policies, adding vulnerability disclosure mechanisms, and verifying domain registration details for completeness. Overall, Visit Finland presents a professional, secure, and user-friendly platform that effectively supports Finland's tourism promotion objectives while maintaining good privacy and security standards.

S

Synology Inc.

synology.com

76

Synology Inc. is a prominent technology company specializing in network-attached storage (NAS), data management, backup, surveillance, networking, and cloud solutions. The company positions itself as a leader in providing scalable and secure data management platforms for both business and individual users. Their website reflects a mature digital presence with comprehensive product offerings, customer resources, and a strong emphasis on data security and privacy. Technically, the site employs modern JavaScript frameworks such as Vue.js and jQuery, integrates Google Tag Manager for analytics, and uses LiveChat for customer engagement. The site is well-optimized for mobile devices and provides clear navigation and professional design. From a security perspective, Synology demonstrates good practices including HTTPS enforcement, detailed privacy and cookie policies with consent mechanisms, and public disclosure of security programs such as a bounty program. No critical vulnerabilities or exposed sensitive data were detected in the website content. WHOIS data for the domain is unavailable or restricted, which is common for privacy-conscious enterprises, but the website content and external trust signals strongly support the legitimacy of the domain. Overall, Synology's website reflects a robust security posture, strong privacy compliance, and a high level of business credibility. The company effectively communicates its value proposition and maintains transparency in security and data protection matters, making it a trustworthy technology provider in its market segment.

U

Ubiquiti Inc.

ui.com

77

Ubiquiti Inc. is a well-established enterprise technology company specializing in networking hardware and software solutions, particularly under the UniFi brand. The company targets enterprise customers and IT professionals with a comprehensive portfolio of products designed to unify networking and security management through an advanced software interface. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting a strong market position in the technology and telecommunications sectors. Technically, the website leverages modern web technologies including React and JavaScript, hosted on Amazon AWS infrastructure, ensuring fast performance and scalability. The site employs best practices in SEO, accessibility, and user experience, with comprehensive metadata and structured data supporting search engine visibility. Analytics and marketing tools are integrated responsibly with user consent mechanisms in place. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, DNSSEC is not enabled, which is a recommended enhancement for DNS security. The absence of a public security policy or incident response contact is noted as an area for improvement. Overall, the security posture is strong with no critical vulnerabilities detected. The domain WHOIS data confirms the legitimacy of the website, showing a long registration history consistent with the company's founding date and no use of privacy protection, which aligns with the public nature of the business. The website is free from WAF or blocking mechanisms, allowing full content access and analysis. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

A

Allegion

isonas.com

84

Allegion, through its ISONAS brand, offers advanced IP-to-the-door access control solutions targeting commercial security markets. The website reflects a mature enterprise presence with a focus on simplifying access control technology for integrators and facility managers. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries, and integrates marketing and analytics tools such as Adobe Analytics and Marketo, indicating a digitally mature platform. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA, though explicit incident response and vulnerability disclosure information are absent. Overall, the website is professional, secure, and compliant with privacy regulations, supporting Allegion's market position as a leading access control provider.

F

Finnair

finnair.fi

77

Finnair is a well-established Finnish airline providing passenger flights and travel services to over 80 destinations worldwide. The company holds a strong market position in Northern Europe and operates with a large-scale business model supported by subsidiaries such as Norra and Finnair Cargo. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to a general audience of travelers. The technical infrastructure leverages modern web technologies including Angular, Google Tag Manager, and Akamai CDN, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although public incident response and vulnerability disclosure information are limited. Privacy compliance is well addressed with detailed policies and consent mechanisms aligned with GDPR requirements. Overall, the website and business demonstrate high professionalism and trustworthiness, despite the absence of WHOIS domain registration details which may be due to registry restrictions.

P

Plava Laguna

plavalaguna.com

76

Plava Laguna is a hospitality company specializing in providing accommodation services including hotels, villas, and apartments primarily in the Istria region of Croatia, focusing on destinations such as Porec and Umag. The company targets tourists seeking quality lodging options in this popular travel area. The website demonstrates a solid digital presence with a modern technical infrastructure built on Next.js and React, integrating advanced analytics and marketing tools such as Google Tag Manager and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly available. The website is well-optimized for SEO and mobile devices, providing a good user experience. However, the WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency. Overall, the site appears professional and trustworthy, with room for improvement in publishing security and compliance documentation.

L

Liikenne- ja viestintävirasto Traficom

traficom.fi

76

Liikenne- ja viestintävirasto Traficom is the Finnish government agency responsible for ensuring smooth, safe, and sustainable transport and communication services. The agency also promotes national cybersecurity and acts as a licensing, registry, and supervisory authority. The website reflects a mature digital presence with comprehensive content tailored to Finnish residents and businesses involved in transportation and communications. It offers regulatory information, news, and access to various services. Technically, the website employs modern web technologies including React and Apollo GraphQL, with a focus on performance, accessibility, and SEO. The presence of HTTPS, DNSSEC, and Matomo analytics indicates a strong commitment to security and privacy. The site is mobile-optimized and well-structured, providing a professional user experience. Security posture is robust with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear cookie and privacy policies, including consent mechanisms aligned with GDPR. Incident response and vulnerability disclosure channels are available, though explicit security policies could be enhanced. Overall, the website is trustworthy, professionally maintained, and aligns well with the official government identity. Strategic recommendations include publishing detailed security policies, implementing security.txt, and enhancing visible security headers to further strengthen trust and compliance.

The website is a LinkedIn public profile for Alexander W., representing a small local tutoring business named Bloomington Tutors based in Bloomington, Indiana, USA. The profile highlights educational services and includes links to related tutoring websites. The digital infrastructure relies on LinkedIn's proprietary platform with secure authentication mechanisms including Google OAuth. Privacy and cookie policies are clearly presented, indicating compliance with GDPR and other regulations. The site is professionally designed with good content quality and user experience, optimized for mobile and accessibility. Security posture is strong with HTTPS, secure forms, and standard security headers, though WHOIS data is privacy protected and unavailable for detailed domain registration analysis. Overall, the site is trustworthy and suitable for its educational purpose.

F

Fintraffic

fintraffic.fi

76

Fintraffic is a Finnish public sector entity specializing in providing and developing traffic control and management services across all transportation modes, including rail, road, maritime, and air traffic. The organization positions itself as a key national operator ensuring traffic safety and efficiency in Finland. The website reflects a mature digital presence built on Drupal 10, leveraging cloud hosting platforms such as AWS and Microsoft Azure, and integrates reputable analytics and monitoring tools like Piwik Pro, Matomo, and New Relic. The site demonstrates good mobile optimization, accessibility, and SEO practices, supporting a positive user experience for its target audience of general public and transportation stakeholders. Security posture is strong with HTTPS enforcement and a comprehensive cookie consent mechanism, although explicit security policies and incident response information are not found in the provided content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no signs of blocking or WAF interference.

F

Fintraffic

tmfg.fi

76

Fintraffic is a Finnish public service organization specializing in traffic management and safety across all transportation modes. The website reflects a mature digital presence with a modern Drupal 10 CMS infrastructure, integrated with advanced cookie consent management and analytics tools such as Matomo and Piwik Pro. The site demonstrates strong compliance with GDPR and privacy regulations, providing detailed cookie policies and user consent mechanisms. Security posture is robust with HTTPS enforcement and multiple security headers, though explicit security and incident response policies are not publicly detailed. Overall, the website is professional, trustworthy, and well-optimized for user experience and accessibility.

Accenture is a global professional services company specializing in consulting, technology, and digital transformation services. The website analyzed represents a service page under the Accenture Song brand, showcasing their capabilities to help clients meet evolving customer needs. The site is well-branded, professionally designed, and targets business clients and professionals. The technical infrastructure leverages Adobe Experience Manager CMS and Adobe's marketing and analytics technologies, indicating a mature digital presence. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and visible security policies. Privacy compliance is partially demonstrated through cookie consent but lacks visible privacy and terms of service documentation on this page. Overall, the site is trustworthy and professional, though SEO is limited by noindex directives.

M

Mountfield

mountfield.cz

76

Mountfield.cz is a leading Czech retailer specializing in garden technology, furniture, and pools, operating both online and through over 50 physical stores. The website is professionally designed with a clear focus on consumer garden products and services, offering a comprehensive shopping experience including customer support and after-sales services. The technical infrastructure leverages modern web technologies and integrates multiple analytics and marketing tools, ensuring good performance and user experience across devices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be explicitly verified or enhanced. The absence of WHOIS data is likely due to privacy protection, which is justified for a large retail business. Overall, the website is trustworthy, compliant with GDPR, and free from adult or questionable content, making it suitable for a general audience.

Z

Zabbix

zabbix.com

77

Zabbix is a globally recognized enterprise-class open-source network and application monitoring solution. The company offers a comprehensive suite of products including on-premise software, a fully managed cloud platform, professional services, and extensive training and certification programs. Their market position is strong, supported by a large deployment base and trusted by Fortune 500 companies and government entities. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern JavaScript libraries and tracking tools, with good performance and mobile optimization. Security posture is solid with HTTPS enforced and published security policies, though some security headers could be improved and a cookie consent mechanism is missing, which may affect GDPR compliance. Overall, the business credibility is high, supported by case studies, partner programs, and active community engagement. The WHOIS data is unavailable or protected, which is a minor concern but does not detract from the overall trustworthiness given the company's established reputation.

Zvířetice Vision 21 is a small Facebook community page focused on community engagement through photo and video sharing. The page has a modest following with 301 likes and 339 followers, indicating a niche or local audience. The business model is primarily social and community-driven, leveraging the Facebook platform for content distribution and interaction. The website is hosted and managed by Facebook, utilizing modern web technologies such as React and JavaScript, ensuring a stable and performant user experience. Mobile optimization is good, consistent with Facebook's platform standards. Security posture is strong due to Facebook's infrastructure, with HTTPS enforced and robust SSL configuration. However, the page lacks explicit privacy, cookie, and security policies, which limits privacy compliance and transparency. No direct contact or incident response information is provided, which is typical for Facebook community pages but may impact trust for business users. Overall, the domain is highly legitimate as it is part of Facebook's main domain, but the page itself offers limited business credibility and compliance information.

D

Delska

deac.lv

79

Delska operates as a sustainable data center provider in Northern Europe, particularly focusing on the Baltic region. The company emphasizes green energy usage, GDPR compliance, and robust security, positioning itself as a leading medium-sized player with over 25 years of experience. Their business model centers on providing environmentally friendly data center services to enterprises requiring secure and compliant hosting solutions. The website content is professionally presented with consistent branding and clear messaging targeting enterprise customers interested in sustainable IT infrastructure. Technically, the website employs modern web technologies including Bootstrap, Material Design Icons, and Google Fonts, hosted behind Cloudflare DNS services. It integrates multiple third-party analytics and marketing tools such as Google Analytics, Meta Pixel, Twitter Pixel, Reddit Pixel, and Hotjar, managed through Google Tag Manager. Cookie consent is managed comprehensively via Cookiebot, ensuring GDPR compliance. The site is mobile-optimized and performs moderately well, though accessibility features are basic. From a security perspective, the site enforces HTTPS, uses domain transfer locks, and implements CSRF protection cookies. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not published. No critical vulnerabilities or exposed sensitive data were detected. The domain is newly registered but consistent with the business's claims, suggesting a recent domain acquisition or rebranding. Overall, the website presents a trustworthy and professional front with good privacy compliance and security posture. Strategic improvements include enabling DNSSEC, publishing detailed security and incident response policies, adding terms of service, and enhancing accessibility. These steps would further strengthen the company's digital maturity and trustworthiness.

P

Promon

promon.io

76

Promon is a specialized mobile and desktop application security company with nearly two decades of experience, offering no-code solutions that protect apps, APIs, and SDKs across multiple industries including finance, healthcare, gaming, and government. Their product suite includes runtime protection, code obfuscation, app attestation, and asset protection, supported by recognized certifications such as EMVCO and ISO 27001. The website is professionally designed, mobile-optimized, and built on HubSpot CMS with modern analytics and consent management tools. Security posture is strong with HTTPS and privacy mechanisms, though explicit security headers and incident response contacts are not publicly visible. WHOIS data shows privacy protection typical for tech firms, with no suspicious indicators. Overall, Promon presents a credible, trustworthy, and technically mature digital presence.

P

Promon

promon.co

76

Promon is a specialized mobile app security company offering a comprehensive suite of products designed to protect mobile, desktop, and SDK applications from tampering, reverse engineering, and fraud. With nearly two decades of experience, Promon serves a diverse set of industries including finance, healthcare, gaming, and government. Their solutions emphasize no-code integration, operational efficiency, and multi-layered protection. The website reflects a mature digital presence with strong branding, rich content, and a focus on enterprise customers. Technically, the site uses modern technologies such as HubSpot CMS, Google Tag Manager, and Cookiebot for consent management, ensuring good performance and compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit privacy policies and terms of service pages are not found in the provided content, which slightly impacts privacy compliance scoring. Overall, Promon demonstrates a high level of professionalism and trustworthiness in the mobile app security market.

W

WebNIC

webnic.cc

79

WebNIC is an established ICANN Accredited Registrar and B2B Internet Service Wholesaler specializing in domain registration and cybersecurity solutions. The company offers a broad portfolio of services including domain wholesale, premium DNS, SSL certificates from reputable providers like DigiCert, Sectigo, and GlobalSign, as well as brand protection and reseller programs. The website targets business customers and resellers globally, positioning itself as a trusted partner in the domain and cybersecurity market. Technically, the website is built on WordPress with Elementor and integrates modern tracking and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Pixel. Security measures include HTTPS enforcement and hCaptcha for form protection, though explicit security headers and privacy compliance documentation are lacking. The absence of WHOIS registration data reduces transparency but does not significantly detract from the site's legitimacy given the professional branding and market presence. Overall, WebNIC demonstrates a solid digital maturity with room for improvement in privacy compliance and security policy transparency.

E

Eurostar

eurostar.com

79

Eurostar is a prominent transportation company specializing in high-speed train services connecting major European cities such as London, Paris, Brussels, Amsterdam, and Cologne. The website serves as the official platform for booking train tickets and holiday packages, targeting general travelers across Europe. The business model focuses on providing efficient and convenient rail travel options, positioning Eurostar as a leading player in the European transportation sector. The website's content and branding are professional and consistent, reinforcing its market position and trustworthiness. Technically, the website employs modern web technologies including React and Next.js, with a CMS powered by Sanity. The site demonstrates excellent performance, mobile optimization, and SEO practices, supported by structured data and social media integration. Despite the lack of explicit hosting provider information, the infrastructure appears robust and well-maintained. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and publicly available security policies or incident response information. The absence of privacy and cookie policies, as well as WHOIS data, presents compliance and trust concerns that should be addressed to enhance transparency and user confidence. Overall, Eurostar's website is a high-quality, professional platform with strong business credibility and technical maturity. Addressing privacy compliance and security transparency will further strengthen its security posture and regulatory adherence.

mailbox.org is a well-established German secure email provider operated by Heinlein Support GmbH, founded in 1998. The company offers privacy-focused email services, cloud storage, online office tools, and secure video conferencing, targeting private individuals, businesses, and public sector institutions. The website reflects a strong commitment to data protection, leveraging German privacy laws and certifications such as SHiG, SMiG, and BSI IT Security Labels. The business model is subscription-based, with tiered pricing plans and a free 30-day trial, emphasizing ad-free and encrypted communication.

S

Siemens Portugal

siemens.pt

78

Siemens Portugal is a leading technology company focused on energy, industry, mobility, and building technologies within the Portuguese market. The company emphasizes electrification, automation, and digitalization to drive infrastructure development and digital transformation. The website reflects a mature digital presence with modern technologies such as Vue.js, Brightcove video integration, and advanced analytics tools including Matomo and Adobe DTM. Privacy and cookie policies are comprehensive and supported by a consent management platform, indicating strong compliance with GDPR requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies could be improved. Overall, the site demonstrates high professionalism and trustworthiness consistent with a large multinational enterprise.

A

Audemars Piguet

aplb.ch

80

Audemars Piguet is a prestigious Swiss luxury watchmaker with a rich heritage dating back to 1875. The company operates a sophisticated and visually rich website that showcases its products, brand story, and latest novelties. The site targets affluent consumers and watch enthusiasts globally, emphasizing craftsmanship and exclusivity. Technically, the website leverages modern JavaScript frameworks such as Vue.js, integrates Google Tag Manager for analytics, and uses OneTrust for privacy compliance, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The WHOIS data for the domain is unavailable, likely due to privacy protection, which is common for luxury brands. Overall, the website is professional, secure, and compliant with privacy regulations, supporting the brand's high trustworthiness and market position.

D

dongit.eu

securityreporter.app

77

Security Reporter is a self-hosted pentest reporting platform designed to streamline and enhance the workflow of security teams including pentesters, red teamers, and cybersecurity professionals. The platform offers features such as collaborative tools, API and webhook integrations, and advanced reporting capabilities, positioning itself as a comprehensive solution for agile pentesting. The website is professionally designed, mobile-optimized, and includes trust signals such as client logos from reputable organizations and a vulnerability disclosure policy, indicating a mature business presence in the cybersecurity technology sector. Technically, the website is built on Drupal CMS with modern frontend technologies including Bootstrap, Highlight.js, and Plyr for video playback. It integrates multiple analytics and marketing tools such as Google Tag Manager, LinkedIn Insight, Zoho SalesIQ, and Cookie Script for consent management, reflecting a well-rounded digital maturity. The site is fully accessible without WAF or blocking mechanisms, uses HTTPS with excellent SSL configuration, and implements GDPR-compliant cookie consent mechanisms. From a security perspective, the platform emphasizes secure handling of sensitive data and provides a vulnerability disclosure policy, though explicit security headers are not detected in the provided data. No critical vulnerabilities or exposed sensitive information were found. The absence of direct contact emails or phone numbers suggests a preference for controlled communication via contact forms. Overall, the security posture is strong but could be enhanced by publishing incident response contacts and adding security certifications. The overall risk assessment is low with a high trustworthiness rating. Strategic recommendations include enhancing security headers, publishing incident response details, and expanding transparency with certifications to further strengthen trust and compliance. The platform is well-positioned in the cybersecurity technology market with a clear focus on pentest reporting efficiency and quality.

A

Alector Therapeutics

alector.com

76

Alector Therapeutics is a biopharmaceutical company specializing in developing therapies for neurodegenerative diseases. Founded in 2008, the company positions itself as an innovative player in the healthcare sector, focusing on advancing treatments that address critical unmet needs in neurodegeneration. Their website targets patients, investors, and the scientific community, providing detailed information about their scientific approach, pipeline, and patient resources. The company maintains a professional online presence with comprehensive privacy and cookie policies, reflecting strong compliance with GDPR and data protection standards. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Bootstrap, and Flickity for UI components, alongside Google Tag Manager for analytics and OneTrust for cookie consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Hosting and DNS are managed via DomainControl, with no DNSSEC enabled, which is a recommended improvement. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks some advanced security headers such as Content-Security-Policy and X-Content-Type-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data confirms domain legitimacy with a long registration period and appropriate domain status flags. Overall, the security posture is solid but could benefit from additional hardening. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include enabling DNSSEC, implementing additional security headers, and publishing a vulnerability disclosure policy to enhance transparency and trust. The website's design, content quality, and compliance measures position Alector as a credible and trustworthy healthcare company online.

M

Merck Animal Health Canada

merck-animal-health.ca

76

Merck Animal Health Canada operates as a regional branch of the global Merck Animal Health enterprise, focusing on improving animal health and well-being through vaccines, products, and resources tailored for the Canadian market. The website presents a professional and consistent brand image aligned with Merck's global identity, targeting veterinarians, animal health professionals, and pet owners. Technically, the site is built on WordPress with modern SEO and tracking tools, including Google Tag Manager and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and published security policies suggests room for improvement. The lack of publicly available WHOIS data is likely due to privacy protection, which is common for corporate domains. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency in privacy and security disclosures.

A

Audemars Piguet

audemarspiguet.com

80

Audemars Piguet is a prestigious Swiss luxury watchmaker with a rich heritage dating back to 1875. The company specializes in crafting high-end mechanical watches and maintains a strong global brand presence. Their website reflects a mature digital infrastructure with modern technologies such as Adobe Experience Manager, Google Tag Manager, and OneTrust for privacy compliance. The site is well-designed, mobile-optimized, and provides rich multimedia content to engage affluent consumers and watch enthusiasts. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data is unusual but does not detract significantly from the overall trustworthiness given the brand's reputation and website quality. Strategic recommendations include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

G

Gemeente Den Haag

denhaag.nl

87

Gemeente Den Haag operates as the official municipal government website for The Hague, Netherlands, providing digital products, services, and comprehensive information for residents and businesses. The website positions itself as a key public service portal with a strong focus on accessibility, user experience, and digital engagement. The target audience includes local residents and commercial entities within the city. The business model is that of a government entity delivering essential civic services and information digitally. Technically, the website is built on WordPress, leveraging modern frameworks such as the NL Design System and React components. It integrates advanced SEO tools like Yoast SEO Premium and uses Piwik PRO for analytics, alongside Cookiebot for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization, accessibility, and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements multiple security headers. Cookie consent is actively managed, and forms are secured using Gravity Forms. However, explicit privacy policies, terms of service, and incident response contacts are not found in the provided content, representing areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website exhibits a high level of professionalism, trustworthiness, and compliance with privacy standards, though it would benefit from publishing comprehensive privacy and security policies to enhance transparency and user trust.

T

TeamNL

teamnl.org

76

TeamNL.org is a professional website dedicated to showcasing Dutch athletes and sports teams, providing inspirational stories and information about national sports representation. The platform targets sports fans and stakeholders interested in Dutch sports. The website employs modern analytics and marketing technologies such as Google Analytics, Microsoft Clarity, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. Privacy compliance is partially met with a detailed cookie consent mechanism but lacks a clearly linked privacy policy. Overall, the site appears trustworthy and professionally managed, though contact and legal information could be more transparent.