Low-risk security reports

Santa Monica Networks (SMN) is a well-established IT solutions provider specializing in data transmission networks, cybersecurity, cloud computing, and IT consulting services. With over 30 years of experience and a team of 50 professionals, SMN serves large and medium enterprises across telecommunications, finance, energy, and government sectors primarily in Lithuania and Latvia. The company maintains strong partnerships with global technology leaders such as Cisco, Dell, Palo Alto Networks, and IBM, reinforcing its market position as a trusted IT service provider. Technically, the website demonstrates a moderate to good digital maturity with a custom CMS, modern JavaScript libraries like Swiper.js, and integration of Google reCAPTCHA for form security. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, some improvements in accessibility and security headers could enhance the technical posture further. From a security perspective, SMN shows a solid baseline with HTTPS enforcement, ISO certifications (including ISO/IEC 27001), and secure form handling. The absence of explicit incident response contacts and security.txt files suggests room for improvement in transparency and vulnerability management. The missing WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, SMN presents a professional and credible business front with strong technical and security foundations. Addressing WHOIS transparency and enhancing incident response visibility would strengthen trust and compliance further.

T

The Coca-Cola Company

coca-cola.ge

81

The website represents the Georgian localized Coca-Cola brand portal, showcasing campaigns and product information tailored for the Georgian market. It reflects a strong brand presence consistent with The Coca-Cola Company's global identity. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital setup. Security posture is solid with HTTPS and monitoring scripts, though explicit security headers and privacy policies are not evident in the provided data. Overall, the site is professional, mobile-optimized, and trustworthy, though improvements in privacy transparency and security headers are recommended.

O

Onspring Technologies

onspring.com

78

Onspring Technologies is a mature technology company founded in 2000, specializing in automated business process solutions and governance, risk, and compliance (GRC) software. Their SaaS offerings target enterprises seeking to streamline workflows, improve compliance, and accelerate incident response. The website demonstrates a professional digital presence built on WordPress with modern themes and multiple marketing and analytics integrations, indicating a digitally mature infrastructure. Security posture is solid with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is currently weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures to improve trust and compliance.

S

Satisloh

satisloh.com

76

Satisloh is a global enterprise specializing in manufacturing solutions for the ophthalmic and precision optics industries. Their website presents a comprehensive catalog of products including machinery, software, consumables, and services tailored to optical manufacturing labs and businesses. The company targets B2B customers requiring advanced optical manufacturing equipment and support. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and employs Matomo analytics with a GDPR-compliant cookie consent mechanism, indicating attention to privacy and data protection. Security posture is generally good with HTTPS enabled and no exposed sensitive data, though the absence of security headers and incident response information suggests areas for improvement. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall professional presentation and content quality support the site's credibility. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing direct contact information to strengthen trust and compliance.

M

Movate

movate.com

81

Movate is an enterprise-level IT services company specializing in digital transformation, technology support, and customer experience solutions. The company targets large businesses seeking outsourcing and infrastructure services. Their website reflects a mature digital presence with modern technologies and comprehensive service offerings. The technical infrastructure is built on WordPress with robust integrations for analytics, marketing, and user engagement, indicating a digitally mature organization. Security posture is strong with HTTPS, security headers, and secure forms, though public security policies and incident response details are not prominently disclosed. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, but the overall professional presentation and certifications like ISO 27001 support trust. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing accessibility compliance to further strengthen trust and compliance.

O

Offr

offr.io

76

Offr is a well-established proptech company founded in 2014, providing a comprehensive digital platform for property transactions including auctions, offers, viewings, and legal document management. The company targets residential and commercial estate agents, buyers, sellers, and solicitors, positioning itself as a leading innovator in the Irish and UK real estate markets. The platform integrates modern technologies such as Docusign, Stripe, and AWS to deliver a seamless end-to-end digital experience. Technically, the website is well-implemented with modern tracking and marketing tools, fast performance, and excellent mobile optimization. Security posture is strong with HTTPS enforcement and client transfer protection on the domain, though improvements like DNSSEC and security.txt publication are recommended. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Business credibility is high, supported by client logos, press coverage, and transparent contact information. Overall, Offr presents a professional, trustworthy, and technically mature online presence.

D

DFDS A/S

dfdsseaways.com

78

DFDS A/S operates a comprehensive European ferry and cruise service network, positioning itself as a leading ferry operator with multiple routes connecting the UK, Scandinavia, the Baltics, and other European destinations. The website offers detailed information on passenger and freight ferry services, mini cruises, package holidays, and onboard amenities, targeting travelers and logistics customers. The company demonstrates strong market presence and brand consistency, supported by industry recognition such as the World’s Leading Ferry Operator nomination for 2025. Technically, the website is built on modern frameworks including React and Gatsby, leveraging Contentful CMS and integrating Google Tag Manager for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response information are not publicly available. The absence of WHOIS registration data limits domain trust analysis; however, the professional site content, comprehensive privacy and cookie policies, and active social media presence strongly indicate a legitimate and credible business. Overall, the site reflects a mature digital infrastructure aligned with business goals and compliance requirements.

O

Opera Contemporary

operacontemporary.com

76

Opera Contemporary is a luxury contemporary furniture company based in Italy, specializing in high-end bedroom furniture and contract projects for residential, public, and yacht spaces. The company positions itself in the luxury design market, targeting affluent customers and businesses seeking elegant and contemporary furniture solutions. The website reflects a professional digital presence built on WordPress, utilizing modern plugins and tools such as Yoast SEO, LayerSlider, and Cookiebot for cookie consent management. The technical infrastructure is hosted on AWS-related services, ensuring reliable performance and availability. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy and terms policies indicates room for improvement. No contact emails or phone numbers are explicitly provided, which may affect user trust and compliance. Overall, the website is well-designed and optimized for SEO and mobile devices but lacks some critical compliance and security documentation.

F

Farm Frites

farmfrites.com

76

Farm Frites is a global manufacturer specializing in fries, potato specialties, and appetizers. The company collaborates closely with farmers to produce high-quality potato products distributed worldwide. Their website reflects a professional presence with clear branding and a focus on sustainability, as evidenced by their Sustainability Report 2024. The digital infrastructure is modern, leveraging Next.js and React frameworks, with integrations for analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site is mobile-optimized and provides a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced, but lacks some advanced security headers and explicit incident response or vulnerability disclosure information. The absence of WHOIS data for the domain raises questions about domain registration transparency, though the website content and structure suggest a legitimate business. Overall, the site is well-designed and functional, but could improve in security transparency and contact information availability.

A

Adtran

adtran.com

79

Adtran is a globally recognized technology company specializing in open and disaggregated networking and communications solutions. Their offerings span fiber access, optical networking, cloud software, and enterprise networking products, targeting telecommunications providers, enterprises, and network operators. The website reflects a mature digital presence with comprehensive product information, multimedia content, and investor relations, indicating a well-established market position. Technically, the site employs modern JavaScript libraries, analytics tools, and consent management, hosted on a Sitecore CMS platform, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and privacy compliance, though improvements in security headers and incident response transparency are recommended. The absence of WHOIS data limits domain registration trust analysis but does not detract from the overall legitimacy and professionalism of the site.

Veho Group is a company specializing in sustainable mobility solutions, operating primarily in the Nordic and Baltic regions. The company positions itself as a sustainability leader in the automotive industry, focusing on delivering superior customer experiences and environmentally responsible products and services. Their website reflects a professional corporate presence with clear messaging about sustainability and customer-centric values. Technically, the website is built on the Crasman Stage CMS platform, uses modern JavaScript libraries, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting and DNS services are managed via Cloudflare, providing good performance and security. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and a comprehensive cookie consent mechanism. However, there is room for improvement in publishing explicit security policies, incident response contacts, and vulnerability disclosure information. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, making it suitable for its target audience and business goals.

I

ion8

ion8.net

79

ion8 is a technology-focused business management consultancy established in 2011, specializing in software integration, business process optimization, marketing, and cybersecurity services. The company positions itself as a full-cycle consultancy partnering with over 50 top software providers to deliver bespoke solutions tailored to unique business needs. Their market approach emphasizes measurable marketing strategies and robust software deployment to enhance client business performance. The website reflects a professional and modern digital presence built on Next.js and React, integrating multiple marketing and analytics tools such as Google Analytics, LinkedIn Insight, and Zoho SalesIQ. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but lacking a visible privacy policy or terms of service. Overall, ion8 demonstrates a credible and mature business with a good technical foundation and moderate tracking practices.

T

Teltonika Networks

teltonika-networks.com

78

Teltonika Networks is a technology company specializing in industrial IoT networking hardware, including 4G/5G routers, gateways, Wi-Fi, and Ethernet switches. The company targets industrial and enterprise customers requiring secure and reliable M2M communication solutions. The website reflects a medium-sized business with a professional online presence and consistent branding. The technical infrastructure leverages modern web technologies such as Vue.js and Tailwind CSS, hosted with reputable providers and secured with HTTPS and Cloudflare DNS. Security measures include the use of Google reCAPTCHA to mitigate automated abuse. However, the absence of explicit privacy and cookie policies, as well as missing security headers, indicates areas for improvement in compliance and security posture. The domain WHOIS data is consistent with the business claims, showing a legitimate and appropriately aged domain. Overall, the website demonstrates good digital maturity but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.

P

PricewaterhouseCoopers Ireland

pwc.ie

76

PricewaterhouseCoopers Ireland (PwC Ireland) is a leading professional services firm specializing in tax, advisory, audit, and consulting services. As part of the global PwC network, it serves a broad range of business clients in Ireland, leveraging expertise and technology to help clients outthink, outpace, and outperform. The website reflects a mature enterprise with a strong market position and a comprehensive portfolio of services tailored to business needs. Technically, the website is built on Adobe Experience Manager, utilizing modern JavaScript libraries such as jQuery and integrates with OneTrust for cookie consent and Adobe DTM for tag management. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security best practices are observed, including HTTPS enforcement and security headers, though some advanced security policy disclosures are not publicly visible. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR compliance indicators. Contact information including a Data Protection Officer email is provided, enhancing trust and compliance. The absence of WHOIS data limits domain registration analysis but the website's professional presentation and branding strongly support legitimacy. Overall, PwC Ireland's website demonstrates a high level of professionalism, security, and compliance suitable for an enterprise-level professional services firm. Strategic recommendations include publishing a dedicated security policy and incident response information to further enhance transparency and trust.

P

PricewaterhouseCoopers

pwc.in

78

PwC India operates as a leading professional services firm specializing in consulting, ESG, financial advisory, tax, and regulatory services. The website reflects a mature enterprise-level business with a strong brand presence and a focus on uniting expertise and technology to help clients outperform. The digital infrastructure leverages Adobe Experience Manager as CMS, Adobe DTM for analytics, and OneTrust for cookie consent, indicating a modern and compliant technical setup. Security posture is strong with HTTPS and CSRF protections, though explicit security policies and incident response contacts are not evident in the provided content. Overall, the website is professional, well-branded, and trustworthy, serving a business audience primarily in India.

S

Schneider Electric Japan Holdings Ltd.

proface.com

80

Pro-face by Schneider Electric is a well-established enterprise specializing in Human Machine Interface (HMI) solutions and industrial automation products. The website showcases a comprehensive portfolio including Industrial PCs, Advanced and Basic HMIs, Edge Box solutions, and related software, targeting industrial automation customers globally. The company positions itself as a trusted partner with decades of experience and strong branding consistency aligned with its parent company, Schneider Electric. Technically, the website employs modern web technologies such as React and Next.js, supported by Akamai CDN for performance and security. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR standards. From a security perspective, the site enforces HTTPS, includes essential security headers, and avoids exposing sensitive data. However, it lacks explicit published security policies, incident response information, and vulnerability disclosure details, which are recommended for enhanced transparency and trust. Overall, the website is professional, secure, and compliant, though the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency. Given the strong corporate affiliation and quality content, the risk is moderate. Strategic improvements in security policy publication and contact information transparency would further strengthen trust and compliance.

S

Sensia

sensiaglobal.com

78

Sensia is a technology and service provider specializing in digital automation and solutions for the oil and gas industry, aiming to optimize performance from reservoir to refinery. The company appears to be medium-sized, founded in 2019, with a focus on reducing risk and driving efficiency for its clients. The website reflects a professional digital presence with a clear business focus on energy sector clients. Technically, the site uses a modern tech stack including ASP.NET WebForms, Google Analytics, LinkedIn Insight, Hotjar, and OneTrust for cookie consent, hosted likely on Microsoft Azure infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Contact information is limited to forms without explicit emails or phone numbers. Overall, the domain WHOIS data is consistent and transparent, supporting the legitimacy of the business.

S

State Treasury

applyforgrants.fi

79

The website www.haeavustuksia.fi is an official Finnish government service portal operated by the State Treasury. It aggregates all government grant calls in one centralized platform, providing a valuable resource for individuals and organizations seeking funding opportunities in Finland. The site features comprehensive information about grant authorities and open calls, with clear navigation and multilingual support. The business model is a public service platform aimed at improving accessibility and transparency of government grants. Technically, the website uses modern web technologies including React for client-side rendering, SVG icons, and CSS modules. It is mobile optimized and accessible, with a cookie consent mechanism in place. Performance is moderate, and SEO best practices are followed with proper meta tags and Open Graph data. No major technical debts or vulnerabilities were detected in the content. From a security perspective, the site enforces HTTPS and implements cookie consent. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not published. Security headers are not visibly configured in the HTML content. No exposed sensitive data or vulnerable libraries were found. Overall, the security posture is good but could be improved by adding formal security documentation and headers. The overall risk assessment is low given the official nature of the site, consistent WHOIS data, and absence of suspicious elements. Strategic recommendations include publishing security and incident response policies, implementing security headers, and enhancing transparency around vulnerability disclosures to further strengthen trust and compliance.

R

Robert Morris University

rmu.edu

79

Robert Morris University (RMU) is a well-established higher education institution based in Pittsburgh, Pennsylvania, offering a broad range of academic programs including undergraduate, graduate, doctoral, and certificate options. The university emphasizes career readiness, affordability, and a supportive campus environment that blends the benefits of a small college with access to a major city. RMU maintains a strong market position in education with recognized programs in business, nursing, cybersecurity, and engineering. The website reflects a professional and comprehensive digital presence, supporting prospective and current students, faculty, alumni, and donors.

M

M&T Bank

mtb.com

81

M&T Bank is a large regional financial institution focused on providing personal, business, and commercial banking services with a community bank approach. The website reflects a mature digital presence with comprehensive banking, mortgage, loan, and investment services targeted at individuals and businesses primarily in the United States. The company maintains a consistent brand image and active social media channels, reinforcing its market position as a trusted banking partner. Technically, the website leverages modern technologies including Adobe Experience Manager CMS, Google Tag Manager, reCAPTCHA, and various marketing and analytics tools such as Quantum Metric and Tealium. The site is well-optimized for mobile devices and accessibility, with good SEO practices and fast loading times. Security best practices are observed with HTTPS enforcement, security headers, and form protections, although explicit security policies and incident response information are not publicly detailed. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data for the domain is missing or unavailable, which is unusual for a major bank and warrants monitoring. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing detailed security and incident response policies, adding a vulnerability disclosure program, enhancing transparency on data protection officer contacts, and continuous auditing of third-party scripts to maintain security integrity.

N

New Horizons Worldwide, LLC

newhorizons.com

79

New Horizons Worldwide, LLC is a well-established enterprise providing modern IT training solutions with a strong market position supported by over 40 years of experience. The company offers a broad catalog of IT and professional development courses, including certifications from major industry players such as Microsoft, AWS, and CompTIA. Their target audience includes IT professionals, corporate teams, and government personnel seeking upskilling and certification. The business operates under the parent company Educate 360, with multiple subsidiaries enhancing its service portfolio. Technically, the website is built on the DNN CMS platform and leverages a mature technology stack including jQuery, HubSpot, Google Tag Manager, and analytics tools like Hotjar and Microsoft Clarity. The site is mobile-optimized, well-structured, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and secure form handling, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place. However, explicit security policies and incident response contacts are not found, which could be enhanced. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility. The missing WHOIS data is a notable gap but likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining vigilance on third-party scripts to sustain security and compliance.

I

InfoSupport

infosupport.com

77

InfoSupport is a Dutch IT services company specializing in software development, artificial intelligence, cloud solutions, and managed services. The company positions itself as a leading specialist with a comprehensive portfolio that supports businesses in achieving their IT and business goals. Their website is professionally designed, well-structured, and provides extensive information about their services and sectors served, targeting business clients primarily in the Netherlands. Technically, the website uses WordPress CMS integrated with multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and HubSpot, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and business information appear legitimate and professional. Overall, the site demonstrates a strong business and technical foundation with room for improvement in security best practices and domain registration transparency.

C

Countly Ltd.

count.ly

78

Countly Ltd. operates a privacy-focused first-party digital analytics and customer engagement platform, offering both on-premise and private cloud hosting solutions. The company targets businesses and product teams that require comprehensive data capture, analysis, and engagement tools while maintaining strict data ownership and privacy. Countly holds a strong market position as a leader in privacy-centric analytics, supported by a broad SDK ecosystem covering mobile, web, desktop, and connected devices. The website reflects a mature digital presence with excellent content quality, professional design, and clear navigation. Technically, Countly leverages modern web technologies including asynchronous JavaScript SDKs, Webflow CMS, and Cloudflare DNS services. The platform supports extensive data collection and user tracking capabilities, integrating advanced analytics and engagement features. Performance and mobile optimization are excellent, with good accessibility and SEO practices in place. From a security perspective, Countly demonstrates a robust posture with HTTPS enforcement, domain transfer protection, and recognized certifications such as SOC 2 Type 2 and ISO 27001/27017/27018. The platform emphasizes privacy by design and offers self-hosting options for complete data control. However, DNSSEC is not enabled, and no explicit incident response or vulnerability disclosure policies are publicly available, representing areas for improvement. Overall, Countly presents a trustworthy and professional digital analytics solution with strong privacy and compliance focus. The website and domain registration details align well, supporting legitimacy. Strategic recommendations include enabling DNSSEC, publishing vulnerability disclosure information, and enhancing security header implementation to further strengthen security and trust.

Marsh is a globally recognized leader in insurance broking and risk management, offering tailored solutions across various industries and regions. The website reflects a mature enterprise with a professional digital presence, leveraging Adobe Experience Manager and modern analytics and consent management tools. Security posture is strong with HTTPS enforcement, secure login forms, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data limits domain registration trust analysis but is consistent with large enterprises using privacy protections. Overall, Marsh's website demonstrates a solid balance of business credibility, technical sophistication, and privacy compliance.

Santa Monica Networks SIA is a well-established Latvian IT solutions provider specializing in data transmission networks, cybersecurity, cloud computing, and IT consulting services. With over 25 years of experience and a recent acquisition by SIA Latvijas Mobilais Telefons, the company holds a strong market position in the Baltic region. Their website reflects a professional business with clear service offerings and trusted technology partnerships including Cisco, Palo Alto Networks, and IBM. The technical infrastructure uses modern web technologies and includes security features such as HTTPS and Google reCAPTCHA. Privacy and cookie policies are present and indicate GDPR compliance. However, WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the company demonstrates a mature digital presence with good security posture and business credibility.

E

Eversheds Sutherland

eversheds.lv

82

Eversheds Sutherland is a global law firm with a dedicated Latvia presence, offering a wide range of legal services across multiple sectors including banking, energy, insurance, construction, and technology. The firm positions itself as a responsible and purpose-led business, aiming to support clients, employees, and communities. The website reflects a mature digital presence with a modern React-based frontend and integration of analytics tools like Piwik Pro. Security configurations are robust with HTTPS and security headers properly implemented, indicating a strong security posture. However, the absence of explicit privacy and cookie policies, as well as contact information, suggests areas for compliance and transparency improvement. Overall, the site is professional and trustworthy but could enhance user trust and regulatory compliance by adding missing policy documents and contact details.

The LinkedIn profile for Simon Andrews represents a professional individual engaged in media and advertising consulting, with a significant follower base and connections indicating a strong market presence. The profile is hosted on the LinkedIn platform, which provides a robust technical infrastructure with modern web technologies and secure authentication mechanisms including Google OAuth. The security posture is strong with HTTPS enforced and secure forms, though explicit security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy compliance. The absence of direct contact information is typical for personal LinkedIn profiles, but the profile maintains trust through platform credibility and follower metrics. Overall, the risk is low, and the profile serves as a credible professional representation.

C

Cinnabon Franchisor SPV LLC

cinnabon.com

78

Cinnabon Franchisor SPV LLC operates a globally recognized bakery brand specializing in cinnamon rolls, coffee, and related baked goods. The company operates through a franchise model and offers catering, grocery products, and gift cards. The website is professionally designed, mobile-optimized, and provides clear navigation to key services such as ordering, locations, and franchise opportunities. The brand maintains a strong market position with consistent branding and a large customer base. Technically, the website employs a modern technology stack including popular analytics and marketing tools, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforced and appropriate security headers, though some improvements in public security policy disclosure and incident response contacts are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website reflects a mature digital presence aligned with a large retail and hospitality business.

M

Man Group

man.com

77

Man Group is a well-established, enterprise-level investment management firm with a heritage dating back to 1783. The company specializes in technology-empowered active investment management, offering diversified strategies including quantitative and discretionary approaches, as well as private market investments. Their target audience primarily consists of institutional investors seeking tailored portfolio solutions. The website reflects a strong market position with consistent branding and comprehensive content focused on their investment capabilities and corporate responsibility. Technically, the website is built on Drupal CMS and employs modern web technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. However, some security headers are missing, and no explicit incident response or vulnerability disclosure information is provided, indicating areas for security posture improvement. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, reflecting good privacy compliance aligned with GDPR. The absence of WHOIS data limits domain registration trust analysis, but the website content and external references strongly support legitimacy. Overall, the site demonstrates a mature digital presence with room for enhanced security transparency. Strategically, Man Group should focus on publishing vulnerability disclosure policies, enhancing security headers, and providing clear incident response contacts to strengthen trust and compliance. These steps will improve their security posture and align with best practices for enterprise financial services websites.

T

Tietoevry

tieto.co.uk

77

Tietoevry is a large enterprise technology company with Nordic roots and a global presence, specializing in purposeful technology solutions that drive digital transformation, IT services, and software development. Their website reflects a mature digital infrastructure with modern analytics and monitoring tools, including Azure Application Insights, Google Tag Manager, and Piwik PRO, indicating a high level of digital maturity. The site is well-designed, mobile-optimized, and provides comprehensive privacy and cookie policies aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response contact information are not prominently published. The absence of WHOIS data for the domain www.tietoevry.com is a notable anomaly that impacts domain trustworthiness, suggesting possible privacy protection or registration issues. Overall, the website presents a professional and trustworthy front for the business, but domain registration inconsistencies warrant further investigation.

C

CGI Inc.

acando.se

87

CGI Inc. is a global leader in IT and business consulting services, established in 1976, with a strong presence in Sweden and worldwide. The company offers a broad portfolio of services including business consulting, system integration, managed IT services, cybersecurity, cloud solutions, and sustainability initiatives. Their market position is solid, supported by recognition such as TIME Magazine's 2024 best companies list. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the website is built on Drupal 9, leveraging modern technologies such as Google Tag Manager, New Relic for performance monitoring, and Akamai CDN for hosting and delivery. The site is optimized for mobile devices, has good SEO and accessibility features, and employs a robust cookie consent mechanism compliant with GDPR. From a security perspective, the site enforces HTTPS, implements security headers, and uses consent management tools. However, explicit security policies and incident response contacts are not published, which could be improved. The WHOIS data for the domain is unavailable, which slightly reduces trust but does not detract significantly given the strong corporate branding and content. Overall, CGI's website demonstrates a high level of professionalism, technical maturity, and compliance with privacy regulations, making it a trustworthy and authoritative source for their services.

O

OneMagnify

marketingassociates.com

76

OneMagnify is a performance marketing and technology agency specializing in creating optimal customer experiences through digital transformation. The company offers a broad range of services including customer experience optimization, brand strategy, digital marketing, business intelligence, and eCommerce capabilities. Backed by Crestview Partners and having acquired Guidance, OneMagnify positions itself as a growing player in the digital marketing and technology sector, targeting businesses seeking to enhance their digital presence and operational impact. Technically, the website is built on the Webflow platform, leveraging modern web technologies and multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Segment, Mouseflow, and HubSpot forms. The site demonstrates excellent mobile optimization, fast performance, and good SEO and accessibility practices, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs standard security headers, and uses secure forms via HubSpot. However, there is no publicly available security policy, incident response information, or vulnerability disclosure program, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and branding appear professional and trustworthy. Overall, OneMagnify presents a strong digital and business presence with minor gaps in security transparency and domain registration information. Strategic recommendations include publishing security and incident response policies, establishing a vulnerability disclosure program, and improving domain registration transparency to enhance trust and compliance.

W

WinMagic

winmagic.com

80

WinMagic is a well-established technology company specializing in enterprise data security solutions, including passwordless authentication, endpoint encryption, and key management. Founded in 1997, the company targets enterprises requiring robust cybersecurity measures to protect sensitive data. Their market position is supported by certifications such as ISO 27001 and SOC 2, and they emphasize seamless user experience combined with strong security. The website reflects a mature digital presence with comprehensive content, structured data, and modern marketing tools. Technically, the site is built on WordPress with popular plugins and demonstrates good performance and mobile optimization. Security posture is strong, with HTTPS enforced, security headers present, and no visible vulnerabilities. However, the site could improve by publishing a security.txt file and providing explicit incident response contacts. Overall, WinMagic presents a trustworthy and professional online presence aligned with its business objectives.

D

Datadog

sqreen.io

79

Datadog is a leading technology company specializing in cloud monitoring and security solutions. Their App and API Protection product offers comprehensive security features for web applications and APIs, targeting security and DevOps teams. The website reflects a mature, enterprise-grade SaaS platform with strong branding and professional content. Technically, the site uses modern frameworks like Tailwind CSS and Alpine.js, integrates multiple analytics and marketing tools, and is optimized for performance and mobile responsiveness. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though privacy compliance could be improved by adding explicit privacy and terms of service pages. The absence of WHOIS data limits domain trust analysis but given the brand recognition, the domain is likely legitimate. Overall, the website is professional, secure, and well-positioned in the market.

J

Jets® Group

jetsgroup.com

76

Jets® Group is a company focused on reducing global water and energy consumption through innovative solutions and sustainability initiatives. Their website positions them as an established player in the energy sector, targeting businesses and organizations interested in environmental efficiency. The site features a professional design with good content quality and clear navigation, optimized for mobile devices. Technically, the website leverages modern tools including Craft CMS, Google Tag Manager, Piwik Pro analytics, and a comprehensive cookie consent management system, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR, but lacks explicit security headers and published security policies, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and compliance features suggest legitimate operations. Overall, the site scores well in security posture and privacy compliance but could improve business credibility by providing clearer contact and legal information.

H

HSO

hso.com

78

HSO is a global business transformation partner specializing in Microsoft technology solutions, including Dynamics 365 ERP and CRM, cloud services, and AI-driven data analytics. The company holds a strong market position as a top Microsoft Business Applications partner, recognized with prestigious awards such as the Microsoft Inner Circle and Partner of the Year for Supply Chain Management. Their service offerings span multiple industries including manufacturing, financial services, professional services, retail, public sector, and non-profit organizations. The website reflects a mature digital presence with excellent content quality, clear navigation, and mobile optimization. Technically, the site leverages modern frameworks and integrates multiple analytics and marketing tools, including Google Tag Manager, Bing Ads, and uMarketingSuite, hosted on a CMS platform identified as Umbraco. The site enforces HTTPS with strong security headers, indicating a good security posture. However, there is a lack of explicit published security policies or incident response information, which could be improved to enhance transparency and trust. The WHOIS data for the domain is unavailable or not publicly disclosed, which raises some concerns about domain registration transparency. Despite this, the professional website, Microsoft partnership, and comprehensive service descriptions support the legitimacy of the business. Overall, the site scores well on content, technical implementation, and security, with moderate privacy compliance and business credibility scores due to missing direct contact details and WHOIS information. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and improving direct contact availability to strengthen trust and compliance.

P

Proact IT Group AB

proact.lv

82

Proact IT Group AB is a leading European specialist in data management and IT services, focusing on cloud transformation, data centre modernization, cybersecurity, and backup solutions. The company targets enterprise clients across multiple countries, offering a comprehensive portfolio of IT infrastructure and consulting services. Their market position is strong, supported by a large operational footprint and a history of over 30 years in the industry. The website reflects a mature digital presence with professional branding and clear communication of services and corporate governance. Technically, the website is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and third-party tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained digital infrastructure. Security posture is robust with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, the absence of a public vulnerability disclosure or security.txt file and explicit incident response contacts are areas for improvement. Overall, the website and business present a low-risk profile with strong trust indicators and professional operations. Strategic recommendations include enhancing transparency around security incident response and vulnerability disclosure to further strengthen stakeholder confidence.

B

Boston Scientific

btgplc.com

76

Boston Scientific is a leading global medical device company dedicated to advancing science for life by providing innovative medical solutions that improve patient health worldwide. Their website targets healthcare professionals, patients, and caregivers, offering extensive information on medical specialties, products, therapies, and support services. The company maintains a strong market position in the healthcare sector with an enterprise-scale digital presence. Technically, the website is built on Adobe Experience Manager, leveraging modern analytics and marketing technologies such as Adobe Target, Google Tag Manager, Hotjar, and Coveo Search. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security posture is strong with HTTPS enforcement, security headers, and consent management via OneTrust, though explicit incident response contacts and vulnerability disclosure mechanisms are not evident. Overall, the website reflects a mature, trustworthy enterprise with comprehensive privacy and compliance policies, though the absence of WHOIS data limits domain registration trust verification.

E

Erasmus University Rotterdam

eur.nl

77

Erasmus University Rotterdam (EUR) is a well-established Dutch educational institution with a strong focus on bachelor and master programs, research, and societal impact. The university targets students, researchers, and academic professionals, maintaining a leading position in the Dutch and international education market. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support. Technically, the site is built on Drupal CMS, leveraging modern analytics tools like Matomo and Google Tag Manager, and employs OneTrust for cookie consent management, indicating a commitment to privacy compliance. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. However, explicit security policies and incident response contacts could be improved. Overall, the domain registration data aligns well with the university's identity, supporting legitimacy and trustworthiness.

G

GC Europe N.V.

gceurope.com

79

GC Europe N.V. is a prominent oral health company specializing in supplying high-quality dental products and materials to professionals across Europe. Their product portfolio includes glass ionomer cements, impression and filling materials, modelling gypsum, investments, and advanced light-curing composite and ceramic materials. The company targets dental professionals and operates primarily in the healthcare sector with a B2B business model. The website reflects a professional and consistent brand image, supporting their market position as a leading supplier in the European dental industry. Technically, the website is built on Drupal CMS, leveraging modern tools such as Google Tag Manager and CookiePro for analytics and consent management. The site is mobile-optimized and accessible, with good SEO practices in place. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though explicit privacy policies and terms of service are not found in the analyzed content, indicating room for improvement in compliance transparency. No blocking or WAF challenges were detected, and the WHOIS data is privacy-protected, which is typical for corporate domains. Overall, the website demonstrates a solid digital presence with moderate to good security and privacy posture but would benefit from enhanced policy disclosures and contact transparency.

S

SOS Kinderdorpen

soskinderdorpen.nl

76

SOS Kinderdorpen is a well-established non-profit organization based in the Netherlands focused on strengthening families to ensure children grow up in loving and safe environments. The website reflects a professional and consistent brand presence with clear messaging aimed at donors, supporters, and stakeholders interested in child welfare. The organization leverages multiple digital marketing and analytics tools to engage its audience effectively while maintaining GDPR compliance through a comprehensive privacy policy and cookie consent mechanism. Technically, the website is built on WordPress and integrates modern technologies such as Google Tag Manager, Facebook Pixel, and Cookiebot, ensuring a good level of digital maturity and performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although additional security headers could enhance protection. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a large non-profit entity.

M

Maximus

maximus.com

77

Maximus is a well-established enterprise specializing in providing technology and operational support services primarily to government agencies across federal, state, and local levels. Their offerings include customer experience solutions, technology services such as AI and cybersecurity, health services modernization, and program services that help transform policy into outcomes. The company operates globally with regional subsidiaries and maintains a strong market position as a trusted partner to public sector organizations. Technically, the website is built on Adobe Experience Manager, hosted on AWS infrastructure, and integrates modern analytics and consent management tools such as Google Tag Manager, Crazy Egg, and OneTrust. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Performance is moderate, with room for optimization. From a security perspective, Maximus employs HTTPS with strong domain registration protections and cookie consent mechanisms, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or incident response contact is noted. Overall, the website demonstrates high professionalism, strong business credibility, and good privacy compliance. The risk profile is low, with recommendations to enhance DNS security and publish explicit security policies to further strengthen trust and compliance.

V

Vass

ecenta.com

76

Vass is a Spain-based technology consulting firm specializing in digital transformation services across a wide range of industries including banking, energy, insurance, retail, telecommunications, education, automotive, life sciences, logistics, travel, manufacturing, and public administration. The company offers a comprehensive portfolio of solutions such as customer experience, marketing, cloud services, business automation, cybersecurity, software engineering, AI and data analytics, and SAP business suite implementations. Their market position is that of a large, established player with a broad industry focus and multiple global technology partnerships. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies including Google reCAPTCHA, Google Tag Manager, LinkedIn Insight Tag, Facebook Pixel, and OneTrust for cookie consent management. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The hosting is provided by Hosting Concepts B.V., with a domain registered since 2018, consistent with the company's founding year. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms. Cookie consent mechanisms are in place, indicating GDPR compliance. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, and no public security policy or incident response contacts are published. There is no vulnerability disclosure or security.txt file found, which could be improved to enhance transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a strong business credibility and technical foundation. Strategic recommendations include enabling DNSSEC, implementing additional security headers, publishing a security policy and incident response contacts, and adding a vulnerability disclosure program to further strengthen security posture and trust.

TV raidījums Zebra is a media entity operating primarily through a Facebook page, focusing on transportation safety and speed-related content targeted at a Latvian-speaking audience. The page has a substantial follower base of approximately 84,000, indicating a strong niche presence. The business model revolves around content creation and distribution on the Facebook platform, leveraging video, photos, reels, and posts to engage its audience. The company appears to be a small-sized media outlet without publicly disclosed parent or subsidiary companies. Technically, the page is hosted and managed entirely on Facebook's infrastructure, utilizing React and Facebook's internal CMS. The site benefits from Facebook's robust hosting, CDN, and security infrastructure, including HTTPS enforcement and security headers. The page is well-optimized for mobile devices and offers a good user experience with clear navigation and relevant content. From a security perspective, the page inherits Facebook's enterprise-grade security measures, including secure login forms and encrypted connections. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, as the page relies on Facebook's overarching policies rather than hosting its own. Contact information is limited but includes a verified company email address. Overall, the risk profile of the page is low given the reliance on Facebook's platform and security. Strategic recommendations include maintaining strong account security, monitoring for phishing attempts, and potentially enhancing direct privacy disclosures if the business expands its own web presence.

A

Avenga

seavus.com

80

Avenga is a global technology partner specializing in IT services including custom software development, AdTech and MarTech, data and AI, and managed services. With over 20 years of experience, Avenga serves a diverse range of industries such as automotive, manufacturing, retail, banking, media, telecommunications, life sciences, mobility, and logistics. The company positions itself as a trusted B2B partner offering comprehensive technology solutions to enterprises worldwide. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to business clients. Technically, the site is built on WordPress and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, Microsoft Clarity, and Piwik PRO, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced, security headers present, and bot protection via Google reCAPTCHA. Privacy compliance is well addressed through a comprehensive privacy and cookie policy with a user-friendly consent mechanism. However, the absence of explicit terms of service, security policy, incident response information, and direct contact details for security or data protection officers suggests areas for improvement. The WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional website and privacy compliance. Overall, Avenga demonstrates a robust business and technical foundation with good security and privacy practices, suitable for enterprise clients.

K

KP Corporation

kpcorp.com

77

KP Corporation is a medium-sized enterprise specializing in large-scale print and digital communication strategies, primarily serving regulated industries such as healthcare, life sciences, government, legal, retail, financial, insurance, and elections. The company offers critical communication, data-driven communication, and commercial print communication services, emphasizing compliance, security, and optimized postal strategies. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and CookieYes for analytics and cookie consent management. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks some security headers and explicit privacy and terms of service pages. The absence of WHOIS registration data is a notable concern, reducing trustworthiness and requiring further verification. Overall, the site is functional, professional, and moderately secure but would benefit from enhanced transparency and security best practices.

A

Apifonica

dzinga.com

80

Apifonica is a medium-sized telecommunications and technology company specializing in AI-powered customer communication automation solutions, including voicebots, SMS marketing, phone number masking, and cloud telecom platforms. The company positions itself as an established player with over 10 years in the market, serving a broad client base with scalable and innovative telecom services. Their website demonstrates a mature digital presence with modern technologies and comprehensive content, including client success stories and industry awards. Technically, the site is built on Vue.js and integrates multiple analytics and marketing tools, ensuring good performance and mobile optimization. Security-wise, Apifonica maintains strong practices with HTTPS, ISO 27001 certification, regular penetration testing, and GDPR compliance, though some transparency gaps exist due to missing WHOIS data. Overall, the company presents a professional and trustworthy image with room for improvement in public contact information and domain registration transparency.

S

Stolt-Nielsen Limited

stolt-nielsen.com

77

Stolt-Nielsen Limited operates as a global leader in bulk-liquid logistics and sustainable land-based aquaculture, providing transportation, storage, and distribution services worldwide. The company holds a strong market position with its subsidiaries specializing in chemical tankers, storage terminals, tank containers, and aquaculture. Their business model focuses on long-term investment and management of these sectors, targeting investors, customers, and job seekers. The website reflects a professional and comprehensive digital presence with rich content, investor relations, and sustainability commitments. Technically, the website employs modern technologies including Google Tag Manager, Vimeo for media, and Cloudflare for performance and security insights. The site is well-optimized for mobile and accessibility, with fast loading times and good SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies could be improved. Overall, the website demonstrates a mature digital infrastructure and a high level of professionalism. The absence of WHOIS data is a notable gap in transparency but does not detract significantly from the site's credibility given the extensive investor and business information presented. Strategically, the company should enhance its security documentation and consider publishing vulnerability disclosure policies to further strengthen trust and compliance.

H

Hexaware Technologies Pvt Ltd

hexaware.com

83

Hexaware Technologies Pvt Ltd is a well-established global IT consulting and services company founded in 1996, with a strong market presence and $1.4 billion in annual revenue. The company offers a broad portfolio of technology services including digital software solutions, cloud services, data analytics, AI-driven automation, and business process outsourcing, targeting enterprise clients across multiple industries. Their website reflects a mature digital infrastructure with modern technologies, responsive design, and comprehensive content showcasing their expertise and client success stories. Security posture is robust with HTTPS, clientTransferProhibited domain status, CAPTCHA-protected forms, and reputable analytics tools, though there is room for improvement in DNSSEC and security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Hexaware demonstrates high business credibility and professionalism, supported by consistent branding and trust indicators.

M

Mantsinen Group Ltd Oy

mantsinen.com

77

Mantsinen Group Ltd Oy is a well-established Finnish company specializing in material handling solutions and logistics support worldwide. The company positions itself as a frontrunner in the transportation sector, providing industrial solutions to multiple material handling industries. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress with modern libraries such as React and jQuery, and it uses Google Tag Manager for analytics and event tracking. Hosting is provided by Cloudpit, and the domain is stable with a long history dating back to 2001. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service. Contact information is not explicitly provided on the main page, which could be improved for better user trust and compliance. Overall, the site is functional, professional, and trustworthy but could enhance privacy and security transparency.