Low-risk security reports

D

Dukascopy Bank SA

dukascopy.com

76

Dukascopy Bank SA is a Swiss-based financial institution specializing in online forex, CFD, binary options, and cryptocurrency trading, complemented by retail and corporate banking services. With over 20 years of market presence, it offers a comprehensive suite of trading platforms including JForex, MetaTrader 4 and 5, and binary options platforms, targeting retail and institutional clients globally. The bank emphasizes Swiss-quality service, competitive spreads, and multi-currency account offerings, positioning itself as a leading Swiss forex broker and bank with a strong digital presence. Technically, the website employs modern web technologies such as SVG graphics, Google Tag Manager, Hotjar analytics, and JSON-LD structured data for SEO. The site is mobile-optimized, accessible, and well-structured with clear navigation and multilingual support. Performance is moderate with room for optimization. Security best practices are observed with HTTPS enforcement, security headers, and consent management for cookies, though explicit security policies and incident response information are not prominently published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with GDPR-aligned cookie and privacy policies. However, the WHOIS data for the domain is missing or unavailable, which is unusual for a regulated financial entity and may indicate privacy protection or registrar issues. Despite this, the website content, branding, and regulatory disclosures support the legitimacy of the business. Overall, Dukascopy Bank SA's website reflects a mature, professional financial services provider with robust digital infrastructure and security practices. The main risk lies in the lack of transparent WHOIS data, which should be addressed to enhance trust and compliance visibility.

H

HELSINKI COMMISSION

helcom.fi

76

HELCOM is a well-established intergovernmental organization focused on the protection and sustainable management of the Baltic Sea environment. It serves as a bridge between policy and science, providing environmental assessments, policy coordination, and stakeholder engagement for the Baltic Sea region countries. The organization enjoys a strong market position as a regional authority with a history dating back to 1991. The website reflects this maturity with comprehensive content, clear navigation, and a professional design tailored to policy makers, scientists, and environmental stakeholders. Technically, the website is built on WordPress with modern plugins and libraries, including GDPR compliance tools and social sharing features. The infrastructure supports good mobile optimization, accessibility, and SEO practices, although hosting details are not explicitly identified. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs standard security best practices, including cookie consent mechanisms and no visible vulnerabilities or exposed sensitive data. However, there is an opportunity to enhance security posture by implementing a security.txt file and publishing incident response policies. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website and domain exhibit high legitimacy and trustworthiness, supported by consistent WHOIS data and transparent organizational information. The risk profile is low, with no critical security issues detected. Strategic recommendations include enhancing security headers, formalizing vulnerability disclosure, and continuous monitoring of CMS and plugin updates to maintain security and compliance.

E

eoacomdev

emailonacid.com

76

Email on Acid is a technology company specializing in email pre-deployment solutions, offering a comprehensive SaaS platform that enables marketers and developers to build, test, optimize, and analyze email campaigns. The company holds a strong market position as a leading provider in email testing and analytics, supported by industry certifications such as SOC 2 type 1, ISO 27001, and GDPR compliance. Their platform targets email marketing professionals seeking to improve campaign quality and ROI through advanced testing and analytics tools. Technically, the website is built on WordPress with modern SEO and performance optimizations, including the use of Yoast SEO, WP Rocket, and integrations with Google Analytics, Google Tag Manager, RudderStack, and Qualified for marketing and analytics. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a fast and user-friendly experience. From a security perspective, the company emphasizes compliance and certifications, though some security headers are not explicitly detected. The site uses HTTPS and secure forms, and includes cookie consent mechanisms aligned with GDPR. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, though the professional presentation and certifications mitigate this concern. Overall, Email on Acid presents a mature and trustworthy digital presence with strong business credibility and technical infrastructure. The main risk lies in the lack of publicly available domain registration data, which should be monitored. Strategic recommendations include enhancing security headers, publishing incident response contacts, and establishing a vulnerability disclosure policy to further strengthen trust and security posture.

R

Rugby Europe

rugbyeurope.eu

78

Rugby Europe is the governing body responsible for the administration and promotion of rugby union across European countries outside the Six Nations Championship. The organization focuses on organizing competitions, developing rugby at various levels, and serving the rugby community in Europe. The website serves as the official digital presence, providing information and resources related to European rugby activities. Technically, the website employs modern web technologies including Google Tag Manager for analytics and Cookiebot for cookie consent management, hosted on a reliable Azure CDN platform. The site is mobile-optimized and includes structured data for enhanced SEO. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though lacks some advanced security headers and explicit security policies. Overall, the website is professional and trustworthy, but could improve privacy compliance and transparency by publishing privacy and terms of service policies and providing clear contact information. The domain WHOIS data is protected by EURid privacy services, which is common and justified for this type of organization.

B

Bauer Hockey, LLC

bauer.com

76

Bauer Hockey, LLC is a well-established company specializing in hockey equipment and apparel with over 90 years of market presence. The company operates a professional e-commerce website primarily targeting hockey players and enthusiasts, offering a wide range of products including sticks, gloves, pads, helmets, skates, base layers, bags, and apparel. The website is built on the Shopify platform, leveraging modern web technologies and multiple third-party marketing and analytics tools to enhance user experience and business intelligence. The technical infrastructure is robust, featuring a modern tech stack with integrations such as Google Tag Manager, Yotpo, Klaviyo, and Visual Website Optimizer. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforced, comprehensive security headers, and cookie consent mechanisms in place. However, the absence of publicly available WHOIS data for the main domain introduces some uncertainty regarding domain registration legitimacy. Overall, the website presents a secure and professional front for Bauer Hockey's e-commerce operations, with strong privacy compliance and extensive user tracking for marketing optimization. The lack of direct contact information and security policy pages suggests areas for improvement in transparency and customer trust. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining vigilant third-party script audits to mitigate potential vulnerabilities.

T

TraceParts

traceparts.com

77

TraceParts operates as a leading global provider of 3D digital content for engineering professionals, offering free access to an extensive library of CAD models and supplier catalogs. The website is professionally designed with excellent content quality, targeting CAD users and engineers worldwide. The business model focuses on providing valuable digital assets to the engineering community, supporting product design and manufacturing processes. Technically, the site employs modern JavaScript libraries, analytics platforms like Piano Analytics and HubSpot, and a consent management platform (Didomi) to manage user privacy preferences. The website is accessible, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses consent management but lacks visible security headers and explicit security policies, which are recommended for enhancement. The absence of WHOIS data raises some concerns about domain registration transparency, though the website content and branding suggest a legitimate and established business. Overall, the site presents a strong digital presence with room for improvement in privacy compliance and security best practices.

R

Rara Themes

rarathemes.com

76

Rara Themes is a WordPress theme provider established in 2015, offering both free and premium mobile-friendly WordPress themes. The company targets WordPress users seeking easy-to-use, professional themes and operates a theme club membership model. The website demonstrates a good level of professionalism with clear navigation, consistent branding, and a significant user base indicated by the happy customers count. Technically, the site is built on WordPress with popular plugins such as Easy Digital Downloads and AffiliateWP, and uses modern tracking and marketing tools including Google Analytics, Facebook Pixel, and Microsoft Clarity. Hosting and DNS are managed via NameCheap and Cloudflare respectively, with HTTPS enabled ensuring secure communication. However, DNSSEC is not enabled, representing a minor security gap. The website lacks explicit privacy policy, terms of service, and security policy pages, which impacts privacy compliance and security posture scores. No direct contact emails or phone numbers were found, which may affect user trust and support accessibility. Overall, the site is well-structured and functional but could improve in privacy and security transparency.

Nevercode Ltd. operates Codemagic, a specialized SaaS platform providing continuous integration and delivery (CI/CD) services tailored for mobile app development across multiple frameworks including Flutter, React Native, native Android/iOS, Unity, Ionic, and MAUI. The company targets mobile development teams seeking to automate and accelerate their build, test, and release pipelines. With over 150,000 developers trusting the platform and notable clients showcased, Codemagic holds a strong market position as a focused mobile CI/CD solution. Technically, the website is modern, fast, and mobile-optimized, leveraging cloud hosting on AWS and integrating analytics tools such as Google Tag Manager and Plausible Analytics. Security posture is robust, with HTTPS enforced, SOC 2 type 2 and ISO 27001 certifications, and GDPR/CCPA compliance clearly stated. However, DNSSEC is not enabled and no public security.txt or incident response contacts were found, representing areas for improvement. Overall, the platform demonstrates a mature digital presence with strong trust signals and compliance adherence.

I

Interactive Advisors

interactiveadvisors.com

76

Interactive Advisors is a well-established robo-advisor platform affiliated with Interactive Brokers Group, offering low-cost, diversified investment portfolios with a focus on transparency and ease of use. The platform targets retail investors seeking automated portfolio management and self-directed trading options. The website demonstrates a high level of professionalism, with comprehensive content, clear navigation, and strong trust signals including SEC registration and SIPC protection. Technically, the site uses modern web technologies, is mobile-optimized, and performs well. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is robust with clear cookie consent and privacy policies. Overall, the site reflects a credible and mature financial service provider with a solid digital presence.

P

Puppet

puppet.com

78

Puppet, a Perforce company, is a leading provider of infrastructure automation software designed to empower DevOps teams and enterprises to automate, manage, and secure their IT infrastructure across hybrid environments. The company offers a comprehensive platform including Puppet Enterprise, Puppet Core, and integrations, supported by professional services and training. The website reflects a mature enterprise with strong branding, clear navigation, and a focus on security and compliance. Technically, the site is built on Drupal 10, employs modern JavaScript libraries, and integrates consent management tools to ensure privacy compliance. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. WHOIS data for the domain is unavailable, which is unusual but does not detract significantly from the site's legitimacy given the strong external trust signals and parent company association. Overall, Puppet's digital presence is professional, secure, and well-optimized, supporting its market position as a leader in infrastructure automation.

W

William Reed Business Media

confectionerynews.com

76

ConfectioneryNews.com is a specialized media website operated by William Reed Business Media, providing daily news and insights focused on the confectionery, chocolate, candy, and biscuit industries. The site targets professionals and businesses within these sectors, offering industry news, market analysis, event information, and expert presentations. The business model is primarily media publishing supported by advertising and subscription services, positioning itself as a reputable source within its niche market. Technically, the website employs a modern technology stack including JavaScript frameworks, Google Tag Manager, Microsoft Clarity, and Tinypass for content monetization. It uses Arc Publishing as its CMS platform, ensuring good mobile optimization, accessibility, and SEO practices. Performance is moderate with a professional design and clear navigation enhancing user experience. From a security perspective, the site enforces HTTPS and includes several security headers, reflecting a good security posture. However, it lacks a publicly available security policy, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly diminishes domain legitimacy trust. Overall, ConfectioneryNews.com is a professionally maintained industry news platform with solid technical and security foundations but would benefit from improved transparency in security policies and domain registration information to strengthen trust and compliance.

W

William Reed Business Media

nutraingredients.com

76

NutraIngredients.com is a specialized media platform operated by William Reed Business Media, focusing on daily news and insights related to dietary supplements, nutraceuticals, functional foods, health ingredients, and herbals primarily in Europe. The website serves industry professionals by providing timely news, expert presentations, and event information, positioning itself as a leading niche media outlet in the health ingredients sector. The business model centers on content delivery and industry engagement through digital media. From a technical perspective, the website employs a modern technology stack including Google Tag Manager, Microsoft Clarity, and Tinypass for content monetization. The CMS appears to be Arc Publishing, supporting a responsive and accessible design with good SEO practices. Performance is moderate with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and multiple security headers implemented. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy or incident response contact reduces transparency. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website presents a professional and trustworthy front for its target audience, though the lack of WHOIS data introduces some uncertainty regarding domain registration legitimacy. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure information, and improving transparency around incident response to enhance trust and compliance.

E

Erply

erply.com

77

Erply is a well-established enterprise providing cloud-based retail POS and inventory management software solutions globally. Their platform supports retail businesses, franchises, and warehouses with a comprehensive suite of tools including employee scheduling, customer communication, BI dashboards, and payment processing. The website demonstrates a mature digital presence with excellent content quality, clear navigation, and mobile optimization. Technically, Erply leverages modern web technologies and AWS infrastructure, ensuring fast performance and scalability. Security posture is strong with HTTPS enforcement, domain protection statuses, and cookie consent mechanisms, although DNSSEC is not enabled and incident response contacts are not explicitly provided. Overall, Erply presents a trustworthy and professional online presence aligned with their business model and market position.

P

Puratos

puratos.pt

76

Puratos is a well-established international company specializing in manufacturing and supplying products and ingredients for bakers, pastry chefs, and chocolatiers. The website targets professional audiences in the bakery and food manufacturing sectors, emphasizing quality and innovation. The company demonstrates a strong market presence with a consistent brand and multilingual support across many countries. Technically, the website is built on Adobe Experience Manager CMS and integrates advanced analytics and A/B testing tools such as Google Tag Manager and Visual Website Optimizer, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and no blocking mechanisms detected; however, the absence of explicit security headers and privacy policies suggests room for improvement. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and clearer contact and security information.

P

Puratos

puratos.ch

76

Puratos is a well-established Swiss company specializing in manufacturing and supplying innovative bakery, patisserie, and chocolate ingredients. The website reflects a professional and consistent brand presence with a clear focus on B2B customers in the food manufacturing sector. The company offers a broad product range and supports customers with tailored solutions and an online ordering platform called My Puratos. Technically, the website is built on Adobe Experience Manager CMS with modern JavaScript frameworks and integrates Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and secure login mechanisms, although some security headers are missing and no explicit privacy or cookie policies were detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Puratos

puratos.gr

76

Puratos is a well-established international supplier specializing in ingredients and products for the bakery, patisserie, chocolate, and ice cream industries. The website targets professional bakers, pastry chefs, chocolatiers, and food industry businesses primarily in Greece, offering a broad product catalog and customer services. The company leverages a modern technical infrastructure including Adobe Experience Manager CMS and React components, with integration of Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS enforcement and secure login mechanisms, though explicit privacy and cookie policies are not found in the provided content. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

W

WebSecured AS

websecured.io

77

WebSecured AS is a Norwegian cybersecurity service provider specializing in penetration testing, security audits, code review, and physical security testing. The company serves a diverse clientele including major organizations such as Microsoft, Vipps, and the Norwegian Tax Administration, positioning itself as a trusted small business in the cybersecurity sector. Their website reflects a professional and modern digital presence built on Vue.js and Nuxt.js frameworks, with good mobile optimization and SEO practices. The use of Cloudflare for DNS and CDN enhances their hosting reliability and security. Security posture is solid with HTTPS enforced and domain transfer protection, though improvements are recommended in security headers and explicit security policies. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Contact information is clearly provided, including email, phone, and physical address. Overall, WebSecured demonstrates a credible and trustworthy business with a good balance of technical maturity and client trust.

H

Hill & Knowlton

hillandknowlton.com

82

Hill & Knowlton is a well-established global public relations and communications consultancy, operating since 1995. The website reflects a professional enterprise-grade digital presence built on modern JavaScript frameworks (Nuxt.js) and uses Cloudflare for DNS services. Accessibility features are implemented via external scripts, enhancing user experience. However, the site lacks explicit privacy and cookie policies, terms of service, and direct contact information, which are critical for compliance and user trust. Security posture is generally good with HTTPS enabled and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Overall, the website is functional and professional but requires enhancements in privacy compliance and transparency to meet best practices.

D

DFDS A/S

dfds.com

77

DFDS A/S operates a comprehensive European ferry travel service, offering passenger and freight ferry crossings, mini cruises, and package holidays. The company holds a strong market position as the World’s Leading Ferry Operator with multiple routes across Europe, the UK, Scandinavia, and the Baltics. Their website provides rich content, clear navigation, and a professional user experience targeting travelers and logistics customers. Technically, the site is built on modern frameworks such as React and Gatsby, with optimized performance and mobile responsiveness. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data reduces domain registration trustworthiness, though the website content and branding strongly support legitimacy.

L

Linde

linde.com

76

Linde is a leading global industrial gases and engineering company focused on making customers more successful while supporting sustainability and decarbonization efforts. Their website presents a professional and comprehensive overview of their expertise in industrial gases, clean energy solutions including hydrogen technologies, and corporate governance. The company targets industrial and energy sectors with a B2B business model and positions itself as a market leader in its industry. Technically, the website employs modern analytics and monitoring tools such as Google Tag Manager and Microsoft Application Insights, and implements a cookie consent mechanism indicating awareness of privacy compliance. However, the absence of a visible privacy policy and terms of service, as well as missing WHOIS domain registration data, raises concerns about transparency and domain legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and vulnerability disclosure information. Overall, the website is well designed, mobile optimized, and user-friendly, but improvements in security transparency and domain registration clarity are recommended.

S

Skadden, Arps, Slate, Meagher & Flom LLP

skadden.com

78

Skadden, Arps, Slate, Meagher & Flom LLP is a leading global law firm providing high-quality legal advice and innovative solutions to complex legal challenges. The firm targets corporate clients and business professionals seeking expert legal services. The website reflects a strong brand presence with professional design and comprehensive content tailored to its audience. Technically, the site employs modern web technologies including AngularJS and integrates analytics and cookie consent tools, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, explicit security headers and detailed security policies are absent, representing areas for improvement. The lack of WHOIS registration data reduces domain trustworthiness from a registration perspective but does not detract from the firm's established market position. Overall, the website is professional, secure, and user-friendly, with recommendations to enhance privacy transparency and security disclosures.

P

Proact SE

proact.se

76

Proact SE is a leading Swedish IT services company specializing in data storage, backup, cybersecurity, network solutions, and modern workplace consulting. Positioned as Europe's leading specialist in data and information management with a focus on cloud services and data center solutions, Proact offers expert consulting and 24/7 support to its business clientele. The website reflects a professional and consistent brand image with comprehensive service descriptions and a strong emphasis on expertise and support. Technically, the website is built on a modern WordPress CMS platform using Elementor and Yoast SEO plugins, indicating a mature digital infrastructure. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be improved. Analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot are integrated, supporting data-driven marketing and compliance. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements a robust cookie consent mechanism via Cookiebot. However, explicit security headers are not detected, and there is no visible security policy or incident response contact information, which are areas for improvement. No vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. The lack of WHOIS data for the exact queried subdomain is typical and does not detract from the legitimacy of the main domain. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact information to further strengthen trust and compliance.

T

ThoughtSpot Inc.

thoughtspot.com

76

ThoughtSpot Inc. is a leading enterprise software company specializing in AI-driven analytics and business intelligence platforms. Positioned as a Gartner Magic Quadrant Leader for 2025, ThoughtSpot offers a comprehensive suite of products including AI Agents, Embedded Analytics, Enterprise BI, and AI-Augmented Dashboards. Their platform empowers data teams and business users to transform insights into actionable decisions through agentic AI and automated workflows. The website reflects a mature digital presence with modern technologies, strong branding, and extensive customer testimonials, indicating a well-established market position. Technically, the site leverages a modern React/Next.js framework with integrations for analytics, personalization, and marketing tools such as Google Tag Manager, Mixpanel, and Visual Website Optimizer. The site is fast, mobile-optimized, and SEO-friendly, demonstrating high digital maturity. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly detailed. Overall, the security posture is robust with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract from the legitimacy given the company's public recognition and professional web presence. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and enhancing transparency around data protection officer contacts and certifications to further strengthen trust and compliance.

D

Digital Privacy Corporation

tyk.io

79

Tyk.io is a mature technology company specializing in API management platforms and API gateway solutions. Founded in 2012 and operated by Digital Privacy Corporation in the US, the company targets developers and enterprises seeking scalable and secure API management. The website reflects a professional and consistent brand presence with a focus on technical excellence and user experience. The technical infrastructure leverages modern web technologies including WordPress CMS, Cloudflare DNS, Google Tag Manager, and advanced lazy loading scripts, indicating a high level of digital maturity. Security posture is solid with HTTPS and domain transfer protections, though there is room for improvement in DNSSEC adoption and explicit security policy disclosures. Privacy compliance is currently basic, lacking visible privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and well-positioned in the API management market, but could enhance transparency and compliance to further strengthen user trust and regulatory adherence.

P

Proact IT Group AB

proact.ee

82

Proact IT Group AB is a leading European specialist in data management and IT services, focusing on cloud transformation, data center modernization, cybersecurity, and managed services. The company operates across 12 countries in Europe and North America, targeting medium to large enterprises seeking advanced IT infrastructure solutions. Their website reflects a mature digital presence with comprehensive service offerings and investor relations transparency. Technically, the site is built on WordPress with Elementor and Yoast SEO, employing modern web standards and good performance practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though there is room to improve transparency around vulnerability disclosure and incident response. Overall, Proact demonstrates a high level of professionalism and trustworthiness, consistent with its market position as a major IT services provider.

W

Wunderkraut

wunder.io

76

Wunder is a Finnish digital solutions company specializing in digital transformation, software development, data analytics, and cloud hosting services. Established in 2012, the company serves a diverse client base including public sector organizations and enterprises, positioning itself as a trusted partner in delivering user-centered digital services. The website reflects a mature digital presence with comprehensive content, client success stories, and clear service offerings. Technically, the site leverages modern frameworks such as Next.js and Drupal CMS, hosted on reliable platforms with Cloudflare DNS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be explicitly added. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website demonstrates professionalism, trustworthiness, and a solid digital maturity level.

B

Bilendo

bilendo.de

76

Bilendo is a German-based SaaS company specializing in Accounts Receivable (AR) Automation and Credit Management software. Their platform integrates cloud-based tools to automate debtor management and order-to-cash processes, targeting finance executives, credit managers, accountants, sales, and IT professionals. The company positions itself as a modern, efficient solution provider with a strong client base including notable enterprises and industry references from BCG, PWC, and EOS. Their business model revolves around subscription-based cloud software with modular products such as Cloud Platform, Receivables, Risk, and Add-Ons. Technically, Bilendo leverages a modern tech stack including Ruby on Rails, Bootstrap 5, Font Awesome, and is hosted on AWS with Cloudflare providing firewall and CDN services. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity.

K

Kuusakoski Oy

kuusakoski.com

77

Kuusakoski Oy is a well-established company specializing in expert-level recycling services, focusing on restoring value to waste materials by collecting, processing, and producing new raw materials. With a history spanning over 100 years, Kuusakoski positions itself as a pioneer in the circular economy, serving industrial and business customers worldwide. Their key services include material processing, sale of recycled raw materials, data security and reuse, logistics, analysis and research, and local service offerings. The company emphasizes sustainability and holds certifications such as EcoVadis Silver. Technically, the website employs modern JavaScript libraries and tracking tools including Google Analytics, Google Tag Manager, and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. However, explicit security headers are not detected, and no incident response or vulnerability disclosure policies are published, indicating areas for improvement in security maturity. The security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, but the absence of WHOIS data and domain registration details introduces some uncertainty regarding domain legitimacy. The website provides clear contact information, including official company emails and phone numbers, and maintains active social media profiles, enhancing trustworthiness. Overall, Kuusakoski demonstrates a mature digital presence aligned with its business goals, though it should address security header implementation and publish incident response policies to strengthen its security posture and compliance stance.

A

Apifonica

apifonica.com

80

Apifonica is a medium-sized telecommunications technology company specializing in AI-powered customer communication solutions including voicebots, SMS marketing, phone number masking, and cloud telecom platforms. The company positions itself as an established player with over 10 years in the market, serving over 200 clients with thousands of integrations. Their technical infrastructure leverages modern web technologies such as Vue.js and integrates with major analytics and marketing tools like Google Analytics and HubSpot. Security posture is strong, evidenced by ISO 27001 certification, regular penetration testing, and GDPR compliance. The website is professionally designed, mobile-optimized, and provides comprehensive legal and security documentation. However, the absence of WHOIS registration data for the domain introduces some uncertainty about domain legitimacy, though the overall business credibility remains high based on content and certifications. Strategic recommendations include improving transparency on domain registration and publishing additional security headers and a security.txt file.

W

Whirlpool Europe

whirlpool.eu

77

Whirlpool Europe operates as the regional web presence for Whirlpool Corporation, a leading global manufacturer of home appliances. The website serves multiple European markets with localized content and provides product information, customer support, and store locator services. The site demonstrates a professional design with consistent branding and a focus on European consumers. Technically, the website employs modern JavaScript libraries, Google Analytics, Google Tag Manager, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is served over HTTPS with good SSL configuration, though it lacks some advanced security headers. Privacy compliance is partially addressed through cookie consent mechanisms, but explicit privacy policy and terms of service documents were not detected in the provided content. No contact information or forms were found, which may impact user trust and compliance. Overall, the domain appears legitimate and consistent with a major brand, though WHOIS data is privacy protected as typical for .eu domains.

S

Strands

strands.com

84

Strands is a well-established fintech company specializing in digital banking software solutions that leverage real-time data and AI to enhance customer engagement and financial management. Their platform targets financial institutions, banks, and SMEs, offering modular solutions such as Personal Financial Management, Business Financial Management, AI-driven insights, and Carbon Footprint analytics. The company demonstrates a strong market position with a global client base and a consistent brand presence. Technically, the website is built on WordPress with modern marketing and analytics integrations, including HubSpot, Google reCAPTCHA Enterprise, Matomo, and LinkedIn Insight. The site is well-optimized for SEO, mobile responsiveness, and user experience. Security posture is solid with HTTPS enforcement and bot protection, though DNSSEC is not enabled and explicit security policies are not published. Overall, the domain registration is consistent with the business claims, showing legitimacy and transparency. The website exhibits extensive user tracking balanced with privacy compliance mechanisms such as cookie consent banners and GDPR-aligned policies.

P

Puratos

puratos.com

76

Puratos is a global enterprise specializing in the manufacturing and supply of bakery, patisserie, and chocolate ingredients. The company targets professional bakers, pastry chefs, and chocolatiers worldwide, offering a broad portfolio of products and innovation support. The website reflects a mature digital presence with multilingual support and a professional design consistent with its market position as a leader in the food ingredient manufacturing sector. Technically, the site uses advanced marketing and analytics tools such as Visual Website Optimizer and Google Tag Manager, hosted on a CMS platform likely Adobe Experience Manager, ensuring a modern and responsive user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR adherence. The absence of WHOIS data for the domain is a notable anomaly that warrants further investigation but does not detract from the overall legitimacy of the business as presented on the site.

K

KI

ki.com

78

KI is a company specializing in contract furniture solutions, providing expert advice, design options, and personalized services to its customers. The website positions KI as a trusted expert in the contract furniture industry, targeting businesses and organizations seeking tailored furniture solutions. The site demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the website employs modern technologies including Font Awesome icons, Microsoft Application Insights for monitoring, Google Tag Manager for analytics, and OneTrust for cookie consent management. The site is accessible, mobile-optimized, and uses HTTPS, indicating a secure baseline. However, the absence of WHOIS data and lack of explicit privacy policies or contact information reduce transparency and trust from a compliance and security perspective. Security best practices such as security headers and vulnerability disclosures are not evident, suggesting room for improvement in the security posture. Overall, KI's website reflects a mature business with a solid digital presence but would benefit from enhanced transparency and security disclosures to improve trust and compliance.

M

Metsä Group

metsagroup.com

76

Metsä Group is a large enterprise specializing in the production of renewable products derived from northern forests, focusing on sustainable manufacturing that replaces fossil raw materials. The company operates multiple business areas including wood supply, wood products, pulp, paperboard, and tissue products, positioning itself as a key player in the manufacturing and energy sectors in Finland. The website reflects a professional and consistent brand image with clear segmentation of business areas and a focus on sustainability. Technically, the site is built on the Episerver CMS platform and integrates modern analytics and marketing tools such as Microsoft Application Insights, Adobe DTM, Hotjar, and Zaius, all managed with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which contrasts with the professional presentation and content quality of the site. Contact information is limited to a contact form without direct emails or phone numbers, and no explicit terms of service or security policy pages are present. Overall, Metsä Group's digital presence is mature and secure, but domain registration transparency and enhanced contact details could improve trust and compliance.

S

Spliethoff

spliethoff.com

76

Spliethoff is a well-established Dutch shipping company specializing in worldwide dry cargo ocean transport. With a fleet of over 50 modern vessels and a history dating back to 1921, the company positions itself as a reliable and high-quality partner in the maritime transport sector. Their website reflects a professional and comprehensive digital presence, targeting businesses requiring specialized cargo shipping services across various market segments including bulk cargo, containers, metals, and project cargo. Technically, the website employs modern frontend technologies such as Tailwind CSS, Alpine.js, and Swiper JS, alongside Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile responsive, well-structured, and optimized for SEO, providing a good user experience. Privacy compliance is evident through a cookie consent banner and a detailed privacy policy, indicating adherence to GDPR standards. From a security perspective, the site uses HTTPS and implements secure forms with anti-forgery tokens. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which could enhance protection. The absence of WHOIS data transparency reduces domain trust slightly, though the website content and business information strongly support legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and WHOIS transparency would further enhance trust and security posture.

Accenture is a global professional services company specializing in consulting, technology, and operations services. The analyzed webpage focuses on supply chain networks consulting services and solutions, highlighting Accenture's capabilities in helping clients anticipate demand and drive efficiency, sustainability, and growth. The company targets client prospects in various industries including technology, manufacturing, energy, transportation, and finance. Accenture operates at an enterprise scale with a strong market position and a comprehensive service portfolio. Technically, the website is built on Adobe Experience Manager CMS and employs modern web technologies such as Adobe Helix RUM, jQuery, and OneTrust for consent management. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices. Security is robust with HTTPS enforcement, security headers, and no exposed sensitive data. However, explicit security policies and incident response information are not publicly available on the analyzed page. The WHOIS data for the domain is unavailable, likely due to registry restrictions or privacy policies, but this does not detract from the site's legitimacy given Accenture's global brand recognition. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the website presents a professional, secure, and trustworthy digital presence aligned with Accenture's business stature. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

P

Perforce Software, Inc.

zeroturnaround.com

76

JRebel, a product of Perforce Software, Inc., is a leading Java development productivity tool designed to accelerate coding by eliminating the need for redeploys. The website positions JRebel as an enterprise-grade solution trusted by major global companies such as Bosch, Deloitte, and Oracle. The platform targets Java developers and teams seeking to improve development velocity and application performance. The site is professionally designed, mobile-optimized, and provides comprehensive resources including case studies and product information. Technically, the site is built on Drupal 10 and integrates modern libraries and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not published. Privacy compliance is well addressed with visible cookie consent mechanisms and detailed privacy policies. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the strong branding and enterprise presence. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance. Overall, JRebel's website demonstrates a high level of professionalism, technical maturity, and business credibility suitable for its enterprise audience.

Nevercode Ltd. operates Codemagic, a specialized SaaS platform providing continuous integration and delivery (CI/CD) services tailored for mobile app development across multiple frameworks including Flutter, React Native, native Android/iOS, Unity, Ionic, and MAUI. The platform targets mobile development teams seeking to automate build, test, and release workflows to accelerate app delivery. With over 150,000 developers trusting the service, Codemagic holds a strong market position as a focused mobile CI/CD solution with enterprise-grade features and integrations. Technically, the website demonstrates a modern and performant infrastructure hosted on AWS, utilizing JavaScript, CSS, and HTML5 with integrations for Google Tag Manager and Plausible Analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. The platform itself offers cloud-based, fully maintained infrastructure with support for multiple hardware/software configurations, emphasizing ease of use and automation. From a security perspective, Codemagic maintains a robust posture with HTTPS enforced, SOC 2 type 2 and ISO 27001 certifications, and compliance with GDPR and CCPA. The website includes privacy and security statements and cookie consent mechanisms. However, there is no public incident response contact or security.txt file, which could enhance transparency and vulnerability management. No critical vulnerabilities or exposed sensitive data were detected. Overall, Codemagic presents a trustworthy, professional, and technically sound offering with strong compliance and security practices. The domain registration is privacy protected but consistent with the company profile and age. Strategic recommendations include publishing a security.txt file, adding explicit incident response contacts, and enhancing security headers to further strengthen security posture and trust.

Texas Instruments is a global semiconductor company specializing in the design, manufacture, testing, and sale of analog and embedded processing chips. The company maintains a comprehensive and professionally designed website that targets engineers, designers, and enterprises in the semiconductor industry. The site offers extensive product catalogs, design resources, and support forums, reflecting a mature and well-established business model with a strong market position. Technically, the website employs modern web technologies including JavaScript, CSS3, and custom CMS infrastructure, with integrated analytics and consent management tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is strong with HTTPS enforced and privacy compliance evident, though some security headers and explicit incident response contacts could be improved. The WHOIS data for the domain is not publicly available, which is unusual for a large enterprise but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the website demonstrates a high level of digital maturity and business credibility, with minor recommendations for enhancing security transparency and incident response visibility.

K

Kiilto Oy

kiiltoclean.fi

76

Kiilto Oy is a well-established Finnish manufacturing company specializing in adhesives, cleaning, and hygiene solutions primarily for professional and industrial customers. With a history dating back to 1919, Kiilto holds a strong market position in the Nordic region and offers a broad portfolio of sustainable and innovative products. The website reflects a professional B2B business model targeting sectors such as construction, healthcare, and food industries. Technically, the site is built on WordPress with integration of modern marketing and analytics tools like HubSpot and Google Tag Manager, ensuring good digital maturity and user experience. Security posture is strong with HTTPS enforcement, appropriate security headers, and no detected vulnerabilities, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website demonstrates high business credibility and compliance with privacy regulations including GDPR.

T

Textmagic

textmagic.com

76

Textmagic is a technology company providing a comprehensive SaaS platform for business text messaging and email campaigns. Established since 2001, it serves over 100,000 users with services including mass texting, SMS marketing, two-way chat, email-to-SMS integration, voice calls, and helpdesk ticketing. The platform supports omnichannel communication and offers mobile apps for iOS and Android, reflecting a mature digital infrastructure. The website is built on WordPress with advanced SEO and analytics integrations, demonstrating strong digital maturity. Security posture is solid with HTTPS, bot management, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS domain registration data introduces some legitimacy concerns, but the professional web presence and consistent branding mitigate these. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in business credibility transparency and compliance documentation.

F

Funnel Holding AB

funnel.io

76

Funnel Holding AB operates the Funnel.io platform, a leading marketing intelligence SaaS solution that aggregates, transforms, and analyzes marketing data to enable data-driven decision making. The company targets marketing professionals, data analysts, and IT teams across various industries globally, positioning itself as a trusted platform with advanced measurement capabilities including marketing mix modeling and digital attribution. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site leverages modern frameworks like React and HubSpot CMS, hosted on AWS infrastructure, and integrates multiple analytics and marketing tools such as Google Tag Manager, FullStory, and Facebook Pixel. Security posture is solid with HTTPS enforcement, domain transfer protection, and cookie consent mechanisms, though DNSSEC is not enabled and explicit incident response contacts are not found. Overall, Funnel.io demonstrates a high level of professionalism, technical maturity, and compliance readiness, supporting its market position as a reliable marketing intelligence provider.

Upwork Global Inc. operates the world's largest human and AI-powered freelance marketplace, connecting businesses and professionals globally to hire top freelance talent with confidence. The company holds a leading market position in the technology sector, offering services such as freelance talent hiring, project management, and payment processing. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, targeting businesses and professionals seeking freelance services. Technically, the website leverages modern JavaScript frameworks including Vue.js and Vuex, integrates Google Tag Manager for analytics, and employs Forter for fraud prevention. The site demonstrates fast performance, excellent mobile optimization, and good accessibility and SEO practices. HTTPS is properly configured, ensuring secure communications. From a security perspective, the website follows best practices such as HTTPS enforcement and fraud prevention mechanisms. However, explicit security headers and publicly available security policies or incident response information are absent. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place, reflecting GDPR compliance. Overall, the website presents a high level of professionalism, security, and compliance suitable for an enterprise-level technology marketplace. The absence of WHOIS data is attributed to privacy protection, common for large enterprises, and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and security posture.

R

Reliance Jio Infocomm Limited

jio.com

77

Reliance Jio Infocomm Limited operates India's largest telecom network, offering a comprehensive suite of prepaid and postpaid mobile plans, broadband services including JioFiber and AirFiber, and a variety of digital applications. The website reflects a mature enterprise with a strong market position and a focus on delivering digital connectivity and entertainment solutions to both consumers and businesses across India. The company leverages modern web technologies such as Next.js and CDNs to ensure fast and responsive user experiences. Security posture is generally strong with HTTPS and secure form handling, though there is room for improvement in security headers and transparency around privacy and incident response. The absence of WHOIS data is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy of the site. Strategic recommendations include enhancing privacy compliance, publishing vulnerability disclosure information, and improving security header implementation to strengthen trust and compliance.

T

Telia Eesti AS

emt.ee

80

Telia Eesti AS operates as a leading telecommunications provider in Estonia, offering a comprehensive suite of services including mobile telephony, internet connectivity, television, and IT solutions tailored for both private individuals and businesses. The website reflects a mature digital presence with clear navigation, professional design, and extensive service information, targeting a broad audience within Estonia. The company benefits from its affiliation with the larger Telia Company, reinforcing its market position and credibility. Technically, the website employs modern web technologies such as React, integrates advanced consent management via Cookiebot, and utilizes Google Tag Manager for analytics. The infrastructure supports mobile optimization and accessibility, ensuring a positive user experience across devices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, implements robust security headers, and manages user consent effectively. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly detailed, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, compliance with GDPR, and trustworthy business practices. The risk profile is low, with recommendations focusing on enhancing transparency around security and data protection policies to further strengthen user trust.

T

Telia Eesti AS

elion.ee

80

Telia Eesti AS operates as a leading telecommunications provider in Estonia, offering a comprehensive suite of services including mobile telephony, internet connectivity, TV broadcasting, and IT solutions tailored for both individual consumers and businesses. The company maintains a strong market position supported by a well-structured, multilingual website that clearly communicates its offerings and facilitates customer engagement through self-service portals and online stores. The digital infrastructure leverages modern web technologies such as React, Cookiebot for consent management, and analytics tools like Google Analytics and Optimizely, reflecting a mature digital presence. Security posture is robust with HTTPS enforcement, security headers, and no evident vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable digital asset for Telia Eesti AS.

S

Scanfil

scanfil.com

76

Scanfil is a well-established manufacturing partner specializing in industrial and B2B sectors, offering comprehensive services from electronics manufacturing to product development and supply chain management. The company targets global customers in industrial, energy, cleantech, and medtech sectors, positioning itself as a trusted and sustainable partner. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress CMS and Cloudflare for performance and security. Security posture is strong with HTTPS and cookie consent mechanisms in place, though explicit privacy and terms of service pages are not found in the provided content. WHOIS data is unavailable, which slightly impacts trust but the overall digital presence and content quality support legitimacy. Recommendations include publishing clear privacy and security policies and enhancing transparency on incident response and data protection roles.

V

Veriff

veriff.me

79

Veriff is a leading AI-powered identity verification company providing highly automated solutions for fraud prevention, compliance, and customer trust. Their platform supports a wide range of verification services including document verification, biometric authentication, age validation, and AML screening. The company targets global businesses across multiple industries such as financial services, e-commerce, and human resources. The website demonstrates a mature digital presence with modern technologies, strong branding, and comprehensive content. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance practices. However, the absence of public WHOIS data is notable and warrants further verification. Overall, Veriff presents a professional and trustworthy online presence aligned with its market position.

T

Telia Eesti AS

telekom.ee

79

Telia Eesti AS operates as a leading telecommunications provider in Estonia, offering a comprehensive range of services including mobile telephony, home internet, TV packages, and IT solutions for both private individuals and businesses. The website reflects a mature digital presence with multi-language support and a strong brand identity consistent with Telia's corporate standards. The company targets a broad audience encompassing both consumers and enterprises, positioning itself as a one-stop-shop for telecommunications and digital services in Estonia. Technically, the website leverages modern web technologies such as React, integrates advanced consent management via Cookiebot, and employs Google Tag Manager and Telia's own RUM agent for analytics and performance monitoring. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements key security headers to protect users. Cookie consent mechanisms are in place, aligning with GDPR requirements. However, explicit security policies, incident response procedures, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement in transparency and security maturity. Overall, the website and business exhibit a high level of professionalism, trustworthiness, and compliance with privacy regulations. The absence of blocking mechanisms or WAF challenges allows for full content accessibility and analysis. Strategic recommendations include publishing detailed security policies, establishing clear incident response contacts, and enhancing vulnerability disclosure practices to further strengthen security posture and stakeholder trust.

G

GÉANT Association

geant.org

76

GÉANT Association operates as a collaborative membership organization uniting European National Research and Education Networks (NRENs) to provide advanced network infrastructure and services that support research, education, and innovation across Europe and globally. The website reflects a mature and well-established entity with a clear focus on delivering connectivity, cloud, identity, and security services tailored for the research and education community. Their market position is strong, supported by a broad ecosystem of partner sites and active community engagement platforms. Technically, the website is built on WordPress with modern optimization tools like NitroPack, and it demonstrates excellent performance, mobile responsiveness, and SEO practices. Security posture is robust with HTTPS enforcement and domain transfer protections, though there is room for improvement in DNS security and explicit security policy disclosures. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.