Security Directory

P

Public Service Division

psd.gov.sg

56

The Public Service Division (PSD) is a Singapore government agency dedicated to nurturing, guiding, and supporting public officers to serve citizens effectively. The website reflects its role as a central government entity providing leadership, transformation initiatives, career development, and communication services. The site targets public officers and Singapore citizens, emphasizing a unified public service culture. Technically, the website is built on the Isomer platform, leveraging modern JavaScript libraries and analytics tools such as Google Tag Manager, Facebook Pixel, and Snowplow Analytics. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. Overall, the website is professional, trustworthy, and aligned with government standards, though it could enhance privacy compliance and security posture further.

G

Gutenberg

gutenberg.com.mt

29

Gutenberg is a Malta-based manufacturing company specializing in books and commercial printing, packaging, and related solutions. The website serves as a basic landing page introducing their three main divisions but lacks detailed business or contact information. The technical infrastructure is simple, relying on legacy jQuery and standard HTML/CSS with minimal modern web practices. Security posture is weak due to absence of HTTPS, security headers, and privacy policies, exposing the site to potential risks and compliance issues. Overall, the website presents a basic digital presence with significant room for improvement in security, privacy, and user engagement.

I

ICON

icon.com.mt

52

ICON is a Malta-based technology company specializing in digital transformation and software solutions. With over 16 years of experience, ICON serves a diverse range of sectors including insurance, retail, fintech, aviation, real estate, transportation, gaming, and government entities. The company offers a structured methodology to deliver measurable business outcomes through business process improvement, custom software development, and ongoing optimization services. ICON positions itself as a trusted partner with a strong focus on security, compliance, and customer success. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Modernizr, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar. The site is optimized for performance, mobile responsiveness, and SEO, with comprehensive cookie consent management and GDPR compliance mechanisms in place. From a security perspective, ICON demonstrates a mature posture with ISO 27001 certification, adherence to OWASP Top 10 standards, and GDPR readiness. The website uses HTTPS with strong SSL configuration and employs cookie consent banners to manage user privacy. However, explicit security headers like Content-Security-Policy and incident response contact details are not visibly published, representing areas for improvement. Overall, ICON presents a professional and trustworthy online presence with strong business credibility and technical implementation. The risk level is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and improving incident response transparency.

C

Casapinta Design Group

casapinta.com

35

Casapinta Design Group is a Malta-based event management and exhibition contractor specializing in exhibitions, conventions, weddings, tent rentals, and custom event designs. Established since 2015, it holds a leading market position in Malta with a reputation for quality and reliability. The company targets businesses and individuals seeking comprehensive event solutions, offering a broad range of services from design to turnkey event management. Technically, the website is built on WordPress with a modern JavaScript stack including jQuery and various plugins for enhanced user experience and SEO. Hosting appears to be managed by SiteGround, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and secure form handling via Gravity Forms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

S

Seasus Ltd.

seasus.com

55

Seasus Ltd. is a Malta-based technology company established in 1995, specializing in web design, mobile application development, custom-built software, and business optimisation solutions. The company has a strong market position supported by numerous industry awards and a portfolio of reputable clients. Their business model focuses on delivering tailored technology solutions to enhance business efficiency and customer engagement. The website reflects a mature digital presence with clear service offerings and client engagement channels. Technically, the website is built on the Drupal CMS platform, leveraging modern JavaScript libraries such as jQuery, Slick Slider, and Lozad for performance and user experience enhancements. Hosting is supported by Amazon CloudFront CDN, ensuring good content delivery speeds. The site is mobile-optimized and SEO-friendly, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security headers and published security or incident response policies, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details are consistent with the business claims, reinforcing legitimacy. Overall, Seasus demonstrates a solid digital and business foundation with room to enhance privacy compliance and security transparency to further strengthen trust and regulatory adherence.

G

German University in Cairo

guc.edu.eg

45

The German University in Cairo (GUC) is a well-established private educational institution in Egypt, managed by a consortium of Germans and Egyptians. It offers a wide range of undergraduate and postgraduate academic programs, continuing education, and research activities. The university targets students, prospective students, international students, parents, and alumni, positioning itself as a leading center of excellence in teaching and research with strong German-Egyptian collaboration. The website reflects a professional and consistent brand image with active social media engagement and regularly updated news and events. Technically, the website uses a modern front-end stack including jQuery, Foundation framework, and Font Awesome, with backend indications of ASP.NET Web Forms. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate and accessibility features are basic. From a security perspective, the site lacks visible HTTPS enforcement information and security headers, and does not publish explicit security or incident response policies. No cookie consent mechanism was detected, indicating potential privacy compliance gaps. The use of Google Analytics suggests moderate user tracking. Overall, the security posture is average with room for improvement. The domain WHOIS data aligns well with the university's claims, showing consistent registration information and domain age appropriate for the institution's history. No suspicious patterns were detected, supporting the legitimacy of the site. Strategic recommendations include implementing HTTPS, enhancing security headers, publishing security policies, and adding privacy compliance mechanisms to improve trust and compliance.

T

The Open University

open.ac.uk

55

The Open University is a well-established UK-based distance learning institution offering a wide range of undergraduate and postgraduate courses. It holds a strong market position supported by multiple prestigious awards such as the Teaching Excellence Framework Gold and the Queen's Anniversary Prize. The website reflects a mature digital presence with comprehensive content tailored to adult learners and professionals seeking flexible education options. Technically, the site employs modern JavaScript libraries, consent-based analytics, and a cookie management system that aligns with GDPR requirements. Security posture is robust with HTTPS enforcement and consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism, accessibility, and trustworthiness, supporting the university's mission to provide open access to higher education.

F

Finland Promotion Board

finland.fi

55

ThisisFINLAND.fi is an official Finnish government website managed by the Finland Promotion Board under the Ministry for Foreign Affairs. It serves as a comprehensive platform to promote Finnish culture, society, business, innovation, and tourism to a global audience. The site features rich, multilingual content, including articles, news, and resources tailored to diverse audiences such as tourists, investors, and the general public. The website leverages a modern WordPress CMS with a well-implemented technical stack including Yoast SEO, Cookiebot for privacy compliance, and Piwik for analytics, ensuring a balance between user experience and data privacy. Security posture is strong with HTTPS enforced, Cloudflare protection, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable source of information about Finland.

P

Push Gaming Ltd

pushgaming.com

44

Push Gaming Ltd is a reputable gaming software provider specializing in online and mobile casino games, with a strong focus on player-first design and innovative entertainment. The company holds key licenses from the Malta Gaming Authority and the UK Gambling Commission, positioning it as a trusted B2B supplier in the gaming industry. Their website reflects a professional and modern digital presence, optimized for mobile devices and compliant with GDPR regulations through explicit cookie consent mechanisms and privacy policies. Technically, the site employs common industry-standard libraries and tracking tools such as Google Analytics and LinkedIn Insight Tag, with HTTPS enforced and CSRF protections in place. Security posture is solid, though there is room for improvement by adding explicit security headers and publishing formal security policies. Overall, the website and business demonstrate high trustworthiness and compliance, suitable for their market segment.

WasteServ Malta Ltd is a government-owned entity established in 2002, responsible for managing integrated waste management systems in Malta. The organization provides key services including household and commercial waste management, recycling, and environmental initiatives. The website reflects a medium-sized organization with a clear focus on serving residents and businesses in Malta, supported by official government affiliations and a consistent brand presence. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Google Analytics, and is built on the Krystal CMS platform. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and secure form submissions but lacks explicit security headers and incident response policies. Privacy compliance is basic, with privacy and cookie policies present but no active consent mechanism. No critical vulnerabilities or suspicious indicators were detected, indicating a generally secure posture. Overall, the website is professional, trustworthy, and aligned with the organization's mission. Strategic improvements in security headers, privacy consent, and incident response documentation would enhance the security posture and compliance standing.

N

National Audit Office (NAO)

nao.org.uk

59

The National Audit Office (NAO) website serves as the official digital presence of the UK's independent public spending watchdog. It provides comprehensive audits, reports, insights, and recommendations aimed at supporting Parliament in holding the government accountable and improving public services. The site targets government officials, public sector stakeholders, and the general public interested in government accountability. The NAO holds a strong market position as an authoritative government oversight body with a large organizational size and a focus on transparency and governance. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and uses the GOV.UK design system to ensure accessibility and usability. It employs Google Tag Manager for analytics and Civic Cookie Control for privacy compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks some advanced security headers and a publicly available security policy or incident response contacts. No vulnerabilities or suspicious patterns were detected, and the domain registration aligns well with the official government entity, indicating high legitimacy. Overall, the NAO website is a professional, secure, and compliant platform that effectively supports its mission. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen trust and security posture.

Sonyjobs.com is a professional career portal for Sony Electronics Inc., a global leader in technology and entertainment with over 70 years of innovation. The website targets job seekers and interns interested in joining Sony, providing comprehensive information about careers, internships, company culture, and benefits. The site reflects Sony's strong market position and commitment to equal opportunity and accessibility. Technically, the website uses a modern but somewhat dated tech stack including jQuery 1.9.1 and Bootstrap 3.3.7, with Google Analytics for tracking. The site is mobile optimized and accessible, with good SEO practices and clear navigation. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site lacks visible security headers and explicit security or incident response policies. HTTPS usage is assumed but not confirmed from the HTML alone. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a comprehensive privacy policy linked but no cookie consent mechanism visible. Overall, the website is trustworthy and professional, with strong business credibility and good content quality. Security posture and privacy compliance could be improved to enhance user trust and regulatory adherence.

M

Malta Development Bank

mdb.org.mt

48

The Malta Development Bank (MDB) is a government-backed financial institution established in 2023 to promote sustainable economic development in Malta. It focuses on providing financing facilities to SMEs and public/private sector projects where market gaps exist. The bank collaborates with major intermediary banks such as APS Bank, Bank of Valletta, and HSBC to deliver flagship schemes like the SME Guarantee Scheme and Guaranteed Co-Lending Scheme. The website reflects a professional and modern digital presence with strong compliance to GDPR and cookie consent regulations. Technically, the site is built on WordPress with modern libraries and plugins, hosted on Google Cloud, and optimized for accessibility and SEO. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration and business information are consistent and legitimate, supporting a high trustworthiness rating.

E

Elmo Insurance Limited

elmoinsurance.com

52

Elmo Insurance Limited is a Malta-based insurance company offering a broad range of personal and commercial insurance products including motor, home, health, travel, and commercial insurance. The company emphasizes financial stability, honest customer relationships, and personalized service. Their website reflects a medium-sized enterprise with a professional online presence targeting individuals and businesses in Malta. Technically, the website is built on Drupal CMS with common web technologies such as jQuery, Bootstrap, and various UI libraries. While the site is mobile-optimized and well-structured, some technical debt is evident, notably the use of an outdated jQuery version and lack of security headers. Security posture is moderate with HTTPS enabled and cookie consent implemented, but improvements are needed in security headers and library updates. The domain registration details align well with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could benefit from enhanced security practices and clearer legal documentation.

U

Union Print Co. Ltd

unionprint.com.mt

28

Union Print Co. Ltd is a Maltese media house specializing in publishing local newspapers and magazines, alongside providing design, content management, and printing services for both private and public sectors. The company positions itself as a leading local media provider with a focus on print and digital storytelling. The website reflects a small-sized business with a professional but basic online presence. Technically, the site uses common JavaScript libraries such as jQuery and Modernizr, and integrates Google Analytics and Tag Manager for tracking. However, the site lacks modern security headers and visible HTTPS enforcement, which impacts its security posture negatively. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and related regulations. Contact information is clearly presented, including a contact form, email, phone number, and physical address, supporting business credibility. Overall, the website is functional and moderately optimized for mobile, but improvements in security and privacy compliance are needed.

B

Betagy Ltd

betagy.com

33

Betagy Ltd is a technology company specializing in scalable cloud-based software solutions and business intelligence for online and retail business operations. The company offers a comprehensive suite of services including omnichannel digital offerings, CRM, third-party integrations, and localization, targeting diverse sectors such as hospitality, entertainment, and finance. With offices in Malta and Serbia, Betagy leverages international talent to deliver customizable and integrated software platforms. Technically, the website uses modern web technologies including Bootstrap and jQuery, with a focus on responsive design and modular architecture. However, the site lacks visible security headers and published privacy or cookie policies, indicating areas for improvement in security and compliance. Overall, the website is professional and informative but would benefit from enhanced security practices and privacy compliance to strengthen trust and regulatory adherence.

N

NORGATE.LV SIA

onlinetrader.lv

36

NORGATE.LV SIA is a Latvian IT company specializing in innovative business software solutions tailored for various industries across Latvia and Europe. Their offerings include inventory management programs, CRM systems, e-commerce platforms, and custom software development, targeting businesses such as service companies, rental enterprises, retail chains, and manufacturing firms. The company positions itself as a pioneer in online business management systems in Latvia, emphasizing specialized and adaptable IT solutions. Technically, the website employs a traditional tech stack with jQuery 1.11.1, Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. While the site is well-designed, mobile-optimized, and user-friendly, it uses an outdated jQuery version that poses security risks. Security posture is moderate with HTTPS implied but lacks modern security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism and a cookie policy page, but no comprehensive privacy or terms of service pages are found. Overall, the website reflects a credible and professional business presence with room for security and compliance improvements.

V

Veikals.lv

veikals.lv

42

Veikals.lv is a Latvian e-commerce retailer specializing in office supplies, computer equipment, packaging materials, cartridges, and related services such as printer repair and cartridge refilling. The website offers a broad product catalog with multiple language options (Latvian, Russian, English), targeting both business and individual customers in Latvia. The platform is built on OpenCart CMS with modern web technologies including Bootstrap, jQuery, and Swiper.js, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though the absence of security headers and explicit security policies suggests room for improvement. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Overall, the site appears legitimate and professional, with clear contact information and consistent branding.

F

FHU TELVICOM

telvicom.pl

37

FHU TELVICOM is a small Polish technology service provider specializing in web development, e-commerce platforms, CMS solutions, 3D product photography, panoramic imaging, hosting, and domain registration services. The website targets local businesses and individuals in Poland seeking digital presence and hosting solutions. The site uses basic modern web technologies such as HTML5, CSS, JavaScript, and Modernizr but lacks advanced frameworks or CMS detection. The content is minimal and primarily marketing-oriented with no visible privacy, cookie, or terms of service policies, and no contact information or forms are present on the homepage. Security posture is weak with no detected security headers or HTTPS confirmation in the provided data. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website demonstrates a basic digital maturity level with room for improvement in security, privacy compliance, and content richness.

AFRY is a well-established European leader in engineering, design, and advisory services with a strong emphasis on sustainability and energy transition. The website reflects a mature enterprise with comprehensive service offerings across multiple sectors including energy, transport, manufacturing, and technology. The digital infrastructure is built on Drupal 10, leveraging modern web technologies and tracking tools such as Google Tag Manager. The site demonstrates good privacy compliance with clear policies and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Overall, AFRY presents a professional and trustworthy online presence aligned with its business stature.

M

Mindgrape

mindgrape.se

33

Mindgrape is a Swedish IT consultancy specializing in IT infrastructure, application delivery, and MS Workspace solutions. They hold an official partnership as a Nordic training partner for Flexera, offering specialized products and training services. The website presents a professional and modern design with clear navigation and relevant content targeted at businesses seeking IT consultancy services in Stockholm and the Nordic region. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google Analytics, hosted behind Cloudflare, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are missing. Overall, the site is trustworthy and functional but could improve privacy compliance and security transparency.

Bonigi is a small Swedish technology company specializing in cloud-based applications tailored for fundraising and social organizations. Their mission is to support those who help others by providing software solutions that facilitate fundraising efforts. The website presents a professional and consistent brand image with a clear focus on their niche market. The technical infrastructure leverages modern web technologies including Contao CMS, Bootstrap, jQuery, and integrates popular analytics and marketing tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. However, the absence of privacy and cookie policies, as well as lack of security headers and incident response information, indicates gaps in compliance and security posture. Overall, the website is functional and professional but would benefit from enhanced privacy and security measures to improve trust and compliance.

Levi, Ray & Shoup, Inc. (LRS) operates the Cirrato.com website, offering print and output management software solutions, including the Cirrato One single server printing product. The company positions itself as a strategic provider of enterprise print management solutions, targeting a broad audience including Windows and Mac users. The website content is professionally presented, with clear navigation and comprehensive product information. Technically, the site uses a modern ASP.NET framework with various analytics and tracking tools integrated, hosted on reliable platforms including Azure services. Security posture is good with HTTPS enforced and use of reCAPTCHA, though some security headers and cookie consent mechanisms could be improved. Overall, the site is trustworthy and aligns well with the company's business identity and WHOIS registration data.

L

Lioness MedTech

lightions.com

45

Lioness MedTech is a Swedish-based medical technology company specializing in advanced cancer care technologies including proton therapy, BNCT, stereotactic radiosurgery, and portable MR imaging. They act as European agents and Nordic distributors for leading manufacturers such as Sumitomo Heavy Industries and Hyperfine Inc., providing state-of-the-art equipment and services to healthcare providers and cancer treatment centers. The website reflects a professional and consistent brand presence with detailed product and service information targeting medical professionals and institutions. Technically, the site is built on WordPress with modern plugins and tracking tools, offering moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is partial, with cookie consent but no explicit privacy or terms of service pages found. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

A

ADSTRINGO SOFTWARE PRIVATE LIMITED

adstringo.in

33

AdStringO Software Private Limited is a technology company based in India specializing in endpoint digital compression solutions for images, audio, video, PDF, and Office files. Their technology enables enterprises to compress files up to 90% without loss of visual quality, facilitating digital transformation especially in low network environments such as rural areas. The company targets a broad audience including SMEs, government institutions, and Fortune 500 companies, positioning itself as a global leader in fast endpoint compression technology. The website employs a modern technology stack including jQuery, Bootstrap, and various UI libraries to deliver a responsive and user-friendly experience. However, the technical infrastructure lacks visible HTTPS enforcement and security headers, which are critical for secure communications and trust. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. From a security perspective, the absence of HTTPS and security policies, as well as no visible vulnerability disclosure or incident response information, indicates a low maturity level in security posture. The website does not provide privacy or cookie policies, which impacts compliance with GDPR and other privacy regulations. Contact information is clearly provided, including company emails, phone number, and physical address, supporting business credibility. Overall, while the business and website demonstrate good content quality and professional presentation, significant improvements in security, privacy compliance, and technical hardening are recommended to enhance trust and protect users. Strategic focus on implementing HTTPS, publishing privacy and security policies, and adopting security best practices will strengthen the company's digital presence and risk management.

A

Active IT Sweden AB

active.se

42

Active IT Sweden AB is a well-established IT service provider founded in 1998, specializing in delivering secure and reliable IT solutions primarily to small and medium-sized enterprises within healthcare, sales, and marketing sectors in Sweden. The company has a strong market position, evidenced by its recognition as a Di Gasell 2023 growth company and partnerships with major technology vendors such as Microsoft, VMware, and Trend Micro. Their service portfolio includes cloud solutions, consulting, office IT, protection, and managed workplace services. Technically, the website is built on WordPress with modern integrations including Google Tag Manager, reCAPTCHA Enterprise, and a comprehensive cookie consent management system, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, secure form handling, and privacy compliance mechanisms, although explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates good content quality, accessibility, and user experience, supporting the company's professional image and trustworthiness.

I

Insitepart

insitepart.se

38

Insitepart is a Swedish logistics operations and competence partner specializing in warehouse and terminal operations, staffing solutions, project support, and IT support services. Founded in 2015, the company positions itself as a flexible and leading partner in the logistics sector, serving a broad range of clients with tailored operational solutions. The website reflects a professional and consistent brand image, targeting businesses requiring logistics and operational expertise in Sweden. The company maintains multiple regional offices and provides clear contact information, enhancing its credibility and accessibility. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Slick Carousel, and Modernizr. SEO is enhanced through Yoast SEO plugin and structured data (JSON-LD) is implemented for better search engine understanding. The site uses HTTPS with good SSL configuration and includes cookie consent mechanisms, indicating a mature digital infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security policy pages, incident response contacts, and advanced security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration details align well with the business claims, supporting legitimacy. Overall, the security posture is good but could be improved by adding formal security policies and vulnerability disclosure mechanisms. The overall risk assessment is low with recommendations to enhance security transparency and accessibility. Strategic improvements include publishing a security policy, adding incident response contacts, and implementing additional security headers to strengthen defenses and trust.

K

Kungälvs kommun

kungalv.se

41

Kungälvs kommun operates as the official municipal government website for the Kungälv region in Sweden, providing comprehensive information and services across education, social care, culture, environment, and local governance. The website serves residents, businesses, and visitors with a broad range of resources including detailed navigation for municipal services, event information, and contact points. The site demonstrates a mature digital infrastructure leveraging Microsoft Azure hosting, Episerver CMS, and multiple analytics platforms such as Matomo and New Relic, indicating a commitment to performance monitoring and user experience optimization. Security posture is strong with enforced HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not present. Overall, the site reflects a professional, trustworthy government portal with good accessibility and privacy compliance.

C

Capish

capish.com

48

Capish is a technology company specializing in software tools for visualization and exploration of clinical data. Their flagship products, including Capish Reflect and Capish Curation, enable users to query and structure complex clinical datasets without requiring coding skills. The company targets healthcare professionals and organizations seeking innovative data solutions to improve clinical research and collaboration. The website reflects a professional and consistent brand image with clear contact information and a focus on user-friendly data exploration. Technically, the website is built on WordPress using the Customizr Pro theme and Nimble Builder plugin, leveraging modern JavaScript libraries such as jQuery and Swiper.js. The site is mobile-optimized and provides a good user experience, although some accessibility features are basic. SEO practices appear adequate with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS (implied by external Office365 booking links), but lacks visible security headers and published security policies. There is no cookie consent mechanism detected, which may impact GDPR compliance. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is trustworthy and professionally maintained, with a solid business focus and technical foundation. Enhancements in privacy compliance and security policy publication would strengthen the site's security posture and regulatory adherence.

S

System Verification

systemverification.com

49

System Verification is a well-established global software quality assurance company specializing in advanced quality monitoring and analytics, leveraging AI insights to enhance end-user experiences. With over 22 years in the QA business and a workforce exceeding 300 employees, the company positions itself as a strategic partner focusing on innovation, efficiency, and security. Their service portfolio includes Quality AI, expert QA for digital transformation, tailored quality assessments, flexible subscription services, and dedicated teams, targeting businesses seeking to improve software quality and delivery. Technically, the website is built on WordPress with integrations of HubSpot for forms and analytics, Google Analytics, Google Tag Manager, and various marketing pixels. The site demonstrates good SEO practices, mobile optimization, and a modern tech stack, although some performance and accessibility improvements could be made. The presence of a comprehensive cookie consent mechanism and privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site uses HTTPS and implements consent-based tracking controls but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration details align well with the company's claimed history and location, supporting its legitimacy. Overall, System Verification's website reflects a professional, trustworthy, and privacy-conscious organization with a solid market position in the technology sector. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen their security posture and compliance.

K

Kristensson i Skåne AB

kiskane.se

45

Kristensson i Skåne AB is a specialized consulting firm founded in 2014, focusing on IT and information security, project management, and strategic IT management. The company targets businesses in regulated sectors requiring tailored IT security solutions. Their website reflects a professional small business with a consistent brand and clear contact information, though lacking formal privacy and cookie policies. Technically, the website is built on WordPress using modern frameworks like Bootstrap and jQuery, with moderate performance and good mobile optimization. Analytics are implemented via Plausible, indicating a privacy-conscious approach with minimal tracking. However, the absence of security headers and formal privacy compliance mechanisms suggests room for improvement in security posture. Security-wise, the site uses HTTPS but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain registration aligns well with the business claims, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy and security practices. The risk level is moderate with recommendations to implement privacy and cookie policies, add security headers, and establish incident response contacts to improve compliance and trust.

Schmiedmann Sverige AB operates as Sweden's largest independent BMW specialist, offering an extensive e-commerce platform for BMW and MINI styling, tuning, and spare parts. The company maintains a strong market position with a comprehensive product catalog exceeding 300,000 items, targeting vehicle owners, workshops, and enthusiasts. Their digital presence is supported by a professional website with clear navigation, mobile optimization, and active social media engagement across Facebook, YouTube, Instagram, and TikTok. The technical infrastructure is built on ASP.NET with modern libraries and analytics integrations, ensuring a robust and scalable platform. Security practices include HTTPS enforcement, cookie consent mechanisms, and use of security tokens in forms, though there is room for enhancement in security headers and library updates. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.

T

Tranemo kommun

tranemo.se

44

Tranemo kommun is the official municipal government entity for Tranemo Municipality in Sweden, providing a comprehensive digital platform for residents, businesses, and visitors. The website offers a broad range of services including news updates, e-services, educational resources, cultural and tourism information, and community support. The site is well-positioned as a trusted local government resource with clear contact information and a consistent brand identity. Technically, the website is built on WordPress 6.7.1 with modern web technologies and plugins supporting event calendars, embedded media, and table management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting details are not explicitly identified. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. It has discontinued Google Analytics since 2021, minimizing user tracking. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced security posture. Overall, Tranemo kommun's website is a professional, trustworthy, and user-friendly portal that effectively serves its public sector role. Strategic improvements in security transparency and incident response readiness would further strengthen its risk management and compliance stature.

K

Kibion GmbH

kibion.com

32

Kibion GmbH is a specialized healthcare company focused on providing rapid and reliable urea breath test solutions for diagnosing Helicobacter pylori infections, a key factor in stomach ulcers. The company positions itself as a global leader in this niche diagnostic market, supported by its ISO 13485 certification and affiliation with the parent company Mayoly Spindler. The website targets healthcare professionals and distributors, offering product information, scientific publications, and support resources. The business model centers on manufacturing and distributing medical diagnostic devices, with a clear emphasis on quality and regulatory compliance. Technically, the website is built on WordPress with a modern tech stack including RequireJS, jQuery, and Modernizr, enhanced by SEO and multilingual plugins. The site demonstrates good mobile optimization and user experience, though performance is moderate. SEO practices are well implemented, but accessibility features are basic. The site uses Google Analytics for user tracking but lacks visible cookie consent mechanisms and privacy policies, indicating gaps in privacy compliance. From a security perspective, the site does not show evidence of advanced security headers or explicit HTTPS enforcement in the provided data, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is moderate but could benefit from enhanced policies and technical controls. Incident response and vulnerability disclosure information are absent, which may impact trust and compliance. Overall, Kibion's website reflects a professional and credible healthcare business with solid market positioning but requires improvements in privacy compliance and security best practices to enhance trustworthiness and regulatory adherence.

M&P Legal is a small incorporated legal practice based in the Isle of Man, offering a broad range of legal services including dispute resolution, employment law, commercial law, and private client services. The firm positions itself as a professional and responsive legal service provider with a focus on both local and international clients. The website content is well-structured, professionally presented, and includes trust signals such as testimonials and company registration details. Technically, the website uses modern web technologies including Google Analytics for tracking, Typekit for fonts, and Modernizr for feature detection. The site is served over HTTPS with secure forms incorporating CSRF tokens, indicating a reasonable level of technical maturity. However, some security best practices such as security headers and cookie consent mechanisms are missing. From a security perspective, the site shows good SSL configuration and no obvious vulnerabilities or exposed sensitive data. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is comprehensive and clearly displayed, but no explicit security or incident response policies are published. Overall, the site demonstrates a moderate to good security posture with room for improvement. The domain registration data aligns well with the business claims, showing consistency and legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving accessibility features to further strengthen the website's security and compliance posture.

Laurence Keenan Advocates & Solicitors is a well-established Isle of Man law firm founded in 1992, offering a broad range of legal services including personal, family, and commercial law. The firm targets clients requiring expert legal advice with a global reach, maintaining a professional and consistent brand presence online. The website is built on WordPress using the Foundation framework, incorporating modern JavaScript libraries such as jQuery and Zepto, delivering a moderate performance with good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and a cookie consent mechanism would enhance compliance and protection. The absence of social media links and minimal tracking indicates a privacy-conscious approach. Overall, the site reflects a credible and trustworthy legal practice with room for technical and compliance improvements.

E

ECOMAL Europe GmbH

ecomal.com

47

ECOMAL Europe GmbH is a well-established specialty distributor of electronic components with a strong European presence through 15 subsidiaries. The company focuses on distributing passive components, discrete semiconductors, and electromechanical components, partnering with notable global manufacturers. Their website reflects a mature business with clear branding, comprehensive contact information, and a user-friendly interface targeting electronics industry professionals. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and session management in place, though some security headers and explicit policies are missing. Overall, the website demonstrates good digital maturity and business credibility, supporting their market position as a trusted distributor in Europe.

H

Höhere Bundeslehranstalt für Landwirtschaft und Ernährung Pitzelstätten

pitzelstaetten.at

19

HBLA Pitzelstätten is a specialized vocational higher education institution in Austria focusing on agriculture and nutrition. It holds a unique position as the only school of its kind in Carinthia, offering comprehensive education aligned with modern economic, technical, and environmental demands. The website reflects a strong commitment to sustainability and community engagement through rich content including news, events, and projects. The institution maintains active social media channels and provides clear contact information, enhancing accessibility and trust. Technically, the website is built on a modern stack with HTML5, CSS3, and JavaScript, likely managed via Magnolia CMS. It demonstrates good mobile optimization, accessibility, and SEO practices, though some improvements in security headers and cookie consent mechanisms are recommended. The site is not blocked by any WAF and is fully accessible, indicating a stable hosting environment. Security posture is moderate with no critical vulnerabilities detected, but the absence of explicit security policies and incident response contacts suggests room for improvement. Privacy compliance is basic with a privacy policy present but lacking cookie consent features. Business credibility is high, supported by consistent branding, certifications like the Austrian Environmental Label, and transparent contact details. Overall, the website is professional, trustworthy, and well-suited for its educational mission, with strategic recommendations focusing on enhancing security and privacy compliance to further strengthen user trust and regulatory adherence.

K

Kantonsspital Graubünden

ksgr.ch

47

Kantonsspital Graubünden is a large, well-established healthcare institution serving the Southeast Switzerland region. The website reflects a professional medical center offering a wide range of medical and surgical services, with a strong focus on patient care and comfort. It also serves as a certified training center for medical professionals. The site is well-structured, multilingual, and provides comprehensive information for patients, visitors, and referring physicians. Technically, the site is built on Drupal CMS with modern web technologies, including Bootstrap and Matomo analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent mechanisms. However, explicit security policies and incident response contacts are not found, which could be improved. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and certifications.

G

Global Voices

globalvoices.org

31

Global Voices is a reputable international non-profit media organization founded in 2005, focusing on multilingual journalism, digital rights, and human rights advocacy. The website serves a global audience with rich, regularly updated content and a strong contributor network. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Tag Manager, Plausible Analytics, and Mailchimp. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security gap. Privacy compliance is moderate, with a comprehensive privacy policy but no cookie consent mechanism detected. Overall, the website demonstrates excellent content quality and business credibility but requires urgent security improvements to protect user data and enhance trust.

E

Eyemaxx Real Estate AG

eyemaxx.com

38

Eyemaxx Real Estate AG is an established real estate development company operating primarily in Germany and Austria, with over 20 years of market presence. The company focuses on residential, micro and student apartments, hotels, urban quarters, retail, and logistics properties. It is publicly listed on the Frankfurt and Vienna Stock Exchanges and issues bonds, indicating a mature business model targeting investors and real estate clients. The website reflects a professional corporate presence with good content quality and consistent branding. Technically, the site uses standard web technologies such as Apache, Bootstrap, and Google Analytics, but lacks a valid SSL certificate, which is a significant security concern. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols severely impacts the security posture. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism despite tracking usage. Contact information is not explicitly provided on the homepage, which may affect user trust and engagement. Overall, the website is functional and professional but requires urgent improvements in security and privacy compliance to meet modern standards.

A

Agos Ducato S.p.A.

agosducato.it

35

Agos Ducato S.p.A. is a well-established Italian consumer credit company with over 30 years of market presence, serving millions of customers through a large network of branches and digital platforms. The website provides comprehensive corporate information, social responsibility initiatives, and partner portals, reflecting a mature business model focused on customer-centric financial services. Technically, the site uses ASP.NET Web Forms with modern JavaScript libraries and integrates advanced consent management and analytics tools. However, the absence of a valid SSL certificate and missing DNS records represent significant security and operational risks. While the site demonstrates good privacy compliance and business credibility, these technical shortcomings reduce overall trust and security posture. Strategic improvements in SSL deployment, DNS configuration, and enhanced security headers are recommended to align the website with industry best practices and regulatory requirements.

Landeskrankenhaus Bregenz is a key healthcare institution in the Vorarlberg region of Austria, operating under the Vorarlberger Krankenhaus-Betriebsgesellschaft.m.b.H. umbrella. The hospital provides a wide range of medical services, including specialized departments, emergency care, and patient support, serving both local and regional populations. The website reflects a mature and professional healthcare provider with a strong emphasis on quality assurance, ethics, and patient engagement. Technically, the site uses modern JavaScript libraries and analytics tools, including CookieHub for consent management and both Google Analytics and Matomo for visitor tracking. However, the website suffers from a critical security shortfall due to an invalid or missing SSL certificate and lack of proper HTTPS enforcement, which undermines user trust and data security. The absence of DNSSEC and CAA records further indicates room for improvement in DNS security. Overall, while the content and business credibility are strong, the technical and security posture requires urgent attention to meet modern standards and regulatory compliance.

Veolia Australia and New Zealand operates as a leading provider of sustainable environmental solutions focusing on water, energy, and waste management. The company leverages global expertise and innovative technologies to support ecological transformation and sustainability goals for businesses and communities in the region. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with a large enterprise. Technically, the site is built on Drupal 10 and uses modern web technologies and Cloudflare CDN for delivery. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture. Privacy compliance is well addressed with accessible privacy and cookie policies and consent mechanisms. Contact is primarily facilitated through webforms and social media channels, with no explicit company emails or phone numbers publicly listed. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the site is professional and content-rich but requires urgent security improvements to meet best practices.

The website finanzamt-geilenkirchen.de serves as the official online presence of the Finanzamt Geilenkirchen, a regional tax office under the Oberfinanzdirektion Nordrhein-Westfalen in Germany. It provides comprehensive tax-related information, contact details, online services such as appointment booking and electronic tax declaration (ELSTER), and current news updates. The site targets residents and businesses in the Nordrhein-Westfalen region, offering clear navigation and well-structured content tailored to public service needs. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies including Apache server, Matomo analytics for user tracking, and a robust Content Security Policy. The site demonstrates good mobile optimization and accessibility features, ensuring usability across devices and for users with disabilities. However, the SSL/TLS configuration is critically flawed, with no valid certificate and no TLS protocols enabled, which undermines secure HTTPS access. From a security perspective, the site implements several best practices such as strict security headers (X-Frame-Options, X-Content-Type-Options, CSP), HSTS with preload directive, and referrer policies. Despite these, the lack of a valid SSL certificate and HTTPS support is a major vulnerability that must be addressed urgently to protect user data and maintain trust. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear privacy and cookie policies with consent mechanisms. The business credibility is high given its government affiliation, but the security posture is currently weak due to SSL issues. Strategic recommendations include immediate remediation of SSL/TLS configuration, enhancement of session security features, and continuous monitoring of security compliance.

L

Logwin AG

logwin-logistics.com

40

Logwin AG operates an international logistics and transportation services website offering a broad range of services including sea freight, air freight, warehousing, and transport management. The company targets businesses requiring reliable logistics solutions and positions itself as a professional and dedicated provider with a worldwide network. The website is built on TYPO3 CMS and uses modern frontend technologies such as jQuery and Fancybox, providing a good user experience with clear navigation and professional design. However, the technical infrastructure shows weaknesses, notably the absence of a valid SSL certificate and lack of TLS protocol support, which significantly impacts the security posture. Security headers are partially implemented, and privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is limited to a contact form, with no explicit emails or phone numbers found. Overall, the website is functional and professional but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

H

HOM Furniture

homfurniture.com

36

HOM Furniture is a large regional furniture retailer primarily serving the upper Midwestern United States, including Minnesota and surrounding states. The company offers a broad range of furniture, home décor, and design services both online and in physical stores. Their digital presence includes advanced features such as augmented reality visualization and room planning tools, indicating a moderate level of digital maturity. However, the website lacks a valid SSL certificate, which is a critical security shortfall that undermines user trust and data protection. While privacy policies are present, cookie consent mechanisms are missing despite the use of tracking and analytics tools. The site uses modern web technologies including MeteorJS and React, but performance data is lacking, suggesting potential optimization opportunities. Overall, the business appears legitimate and well-established, but security improvements are urgently needed to protect customer data and enhance trust.

K

Kammer für Arbeiter und Angestellte für Wien

akwien.at

40

The website akwien.at represents the Kammer für Arbeiter und Angestellte für Wien, a government-related non-profit organization advocating for workers' rights and social services in Vienna, Austria. The site offers comprehensive information and services including legal advice, consumer protection, educational resources, and digitalization funding. It targets employees and workers in Vienna, providing a rich content experience with clear navigation and strong branding. Technically, the site is built on a Gentics Portal CMS with a modern tech stack including jQuery, Bootstrap, Matomo Analytics, and Usercentrics for consent management. Hosting is provided by Anexia. While the site is mobile optimized and accessible, performance metrics indicate slow loading, and the SSL/TLS configuration is currently invalid, which is a critical security concern. Security posture is moderate with several security headers implemented, but the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the security score. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism in place. Business credibility is high due to consistent branding, official contact information, and alignment with WHOIS data. Overall, the site is a professional and trustworthy resource for workers in Vienna but requires urgent improvements in SSL/TLS configuration and performance optimization to enhance security and user experience.

D

DSV A/S

panalpina.com

40

DSV A/S is a leading global transport and logistics company founded in Denmark in 1976, offering comprehensive freight forwarding and contract logistics services worldwide. The website reflects a mature and professional business with a strong market position and a broad portfolio of services including air, sea, road, and rail freight. The digital infrastructure is modern, leveraging Sitecore CMS and Microsoft Azure hosting, with good SEO and accessibility practices. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocols, which should be addressed promptly to maintain trust and compliance. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the website is trustworthy, well-branded, and provides clear business information and customer engagement channels.

C

Chaya Fuera

chayafuera.com

26

Chaya Fuera is a small hospitality and media business operating a high-quality event venue in Vienna, Austria, specializing in clubs, live concerts, and business events. The website provides detailed event information, including dates, pricing, and VIP reservation contacts, targeting local event attendees and business clients. The business model revolves around event hosting and ticket sales with partnerships with known brands and ticket providers. Technically, the website uses basic HTML, CSS, and JavaScript with some modern font and icon libraries but lacks advanced CMS or frameworks. Performance is slow with minimal mobile optimization and basic SEO. Security posture is weak due to the absence of HTTPS, valid SSL certificates, and security headers, exposing the site to risks. Privacy compliance is poor with no privacy or cookie policies detected. Overall, the site is functional but requires significant improvements in security and privacy to meet modern standards.