Security Directory

V

Voiceflow

voiceflow.com

70

Voiceflow is a leading SaaS platform specializing in no-code AI conversational agents for chat and voice. It targets product teams and enterprises aiming to build scalable AI agents across multiple customer channels. The platform offers deep customization, integrations with major CRM and analytics tools, and a strong partner ecosystem. Technically, the website is built on Webflow with modern JavaScript libraries and analytics integrations, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and no exposed sensitive data, though explicit security policies and incident response contacts are not publicly available. Overall, the domain is privacy protected, which is common for tech companies, and the website content and branding strongly support legitimacy and trustworthiness.

M

Ministerstvo vnitra České republiky

mvcr.cz

56

The website https://mv.gov.cz/ is the official online presence of the Ministry of Interior of the Czech Republic, a key government entity responsible for internal affairs including public order, security, migration, and eGovernment services. The site provides comprehensive information and services targeted at Czech citizens, foreigners, and public institutions. It is positioned as a central authoritative source for internal state administration and security-related matters. Technically, the site employs legacy jQuery scripts alongside modern tracking tools such as Google Tag Manager and Analytics, with HTTPS and Content Security Policy headers ensuring a secure browsing environment. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy in Czech. Security posture is strong with no visible vulnerabilities, though some additional security headers and modern script upgrades are recommended. Overall, the site is professional, trustworthy, and well-structured, reflecting its government status and mission.

T

The Ravestijn Gallery

theravestijngallery.com

64

The Ravestijn Gallery is a leading photography gallery based in the Netherlands, specializing in exhibitions, artist representation, exclusive artwork editions, and a bookshop. The website reflects a professional art gallery business model targeting photography collectors and art enthusiasts. The company positions itself as a prominent player in the Dutch photography art market with a focus on quality and exclusivity. Technically, the website is built on the Artlogic CMS platform, utilizing jQuery and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is hosted with secure HTTPS and uses Cloudinary for image hosting. Performance is moderate with good mobile optimization and accessibility features, indicating a mature digital presence. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and no dedicated security or incident response policies are publicly available. No vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the business claims, supporting domain legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, though improvements could be made in security header implementation and transparency of security policies. The risk level is low, with recommendations focusing on enhancing security posture and compliance documentation.

MOS is a small, US-based architecture and design practice with a strong focus on theoretical and experimental architecture, publishing, and exhibitions. The website serves as a comprehensive archive of their projects, writings, and exhibitions spanning over two decades, targeting architects, students, and design professionals. Technically, the site is built on WordPress with modern JavaScript libraries and hosted on Linode, offering good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. The absence of privacy and cookie policies indicates compliance gaps with GDPR and other privacy regulations. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.

E

EducaThyssen

educathyssen.org

59

EducaThyssen is an educational platform associated with the Museo Nacional Thyssen-Bornemisza in Madrid, Spain. It serves as a cultural and educational resource, complementing major art institutions in the city. The website provides educational content and resources aimed at a general audience interested in art and culture. The platform is positioned as a trusted source for museum-related educational materials, leveraging its association with a renowned national museum. Technically, the website is built on Drupal 10, utilizing modern tracking and consent management tools such as Google Tag Manager and CookiePro. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Security posture is strong with HTTPS enforcement and standard security headers, but lacks explicit security policy or vulnerability disclosure mechanisms. The absence of a clear privacy policy and terms of service pages slightly reduces compliance confidence. WHOIS data is unavailable or malformed, limiting domain trust verification, but the website content and official affiliations suggest legitimacy. Overall, EducaThyssen presents a professional, secure, and content-rich platform with room for improvement in privacy transparency and accessibility.

G

Gorgias

gorgias.help

67

Gorgias is a technology company specializing in conversational AI platforms tailored for ecommerce businesses. Their platform integrates AI agents, helpdesk solutions, chat, and FAQ automation to enhance customer support and drive sales. Positioned as a leading solution trusted by over 15,000 brands, Gorgias targets ecommerce merchants seeking to automate and improve customer interactions. The website reflects a mature digital presence with professional design, clear messaging, and extensive use of modern marketing and analytics technologies. The technical infrastructure leverages Webflow CMS, Google Analytics, Amplitude, Facebook Pixel, and advanced A/B testing tools like VWO, indicating a high level of digital maturity and performance optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on website content and technology use. Strategic recommendations include publishing detailed security and incident response policies and establishing a vulnerability disclosure program to enhance transparency and trust.

FUNKE Mediengruppe is a prominent German media company operating in regional newspapers, magazines, and digital media. The website reflects a mature media group with a strong emphasis on quality journalism, sustainability, and diversity. Their digital presence is supported by modern technologies including Contao CMS and Vue.js, with integrated analytics via Matomo and Google Tag Manager. The site is well-structured, mobile-optimized, and professionally designed, targeting a broad audience interested in media and journalism. Security posture is solid with HTTPS enforced, though some security headers and incident response details could be improved. Privacy policies are comprehensive and GDPR compliant, but cookie consent mechanisms could be enhanced. Overall, the website projects high business credibility and trustworthiness.

W

white label eCommerce GmbH

wlec.ag

57

Online-ticket.de operates as a German e-commerce platform specializing in the direct sale of tickets for a variety of events including concerts, festivals, comedy shows, musicals, and sports. The platform targets a broad audience of event-goers in Germany, providing official tickets directly from event organizers. The business is positioned as a niche player in the ticket retail market, leveraging a partnership with white label eCommerce GmbH for its platform infrastructure. The website demonstrates consistent branding and offers key services such as newsletter and event alarm subscriptions to engage customers. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and custom scripts from the Youtix ticketing platform. Hosting is provided via Google Cloud DNS, indicating a reliable and scalable infrastructure. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS with a valid GeoTrust SSL certificate and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and security.txt disclosures. No critical vulnerabilities or exposed sensitive data were detected. The site uses recognized payment methods and maintains trust signals such as social media presence and legal compliance links. Overall, online-ticket.de presents a trustworthy and professional e-commerce platform with a solid technical foundation and good privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security posture and user trust.

C

C/O RED | Die Kreativagentur der FUNKE Medien NRW

co-red.de

39

C/O RED is a creative agency operating under the umbrella of FUNKE Medien NRW GmbH, specializing in branding, design, and campaign services primarily for media and marketing clients in Germany. The company emphasizes clear, individual design solutions and has a strategic partnership with ALTOBELLI agency to enhance service offerings. Their website reflects a professional and modern digital presence built on WordPress with SEO and consent management tools integrated. Security posture is solid with HTTPS and consent mechanisms, though some security headers and vulnerability disclosures are missing. Overall, the site is trustworthy and well-positioned in its market segment.

M

Modular DS

modulards.com

69

Modular DS is a Spanish-based technology company founded in 2021 that offers a SaaS platform focused on centralized management and automation of WordPress websites. Their platform provides key services such as automated maintenance, backups, uptime monitoring, vulnerability analysis, and reporting, targeting WordPress site managers, agencies, and freelancers. The website is professionally designed, mobile-optimized, and integrates modern web technologies including WordPress CMS, WP Rocket for performance, and Google Analytics for tracking. Security posture is good with HTTPS enforced and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers like Content-Security-Policy. Privacy compliance is basic with a cookie policy and consent mechanism present, but no explicit privacy policy or terms of service pages were found. Overall, the domain registration data is consistent and legitimate, supporting the business credibility. The site is free from adult or questionable content and is safe for general audiences.

R

RaveCapture

ravecapture.com

52

RaveCapture is a SaaS platform specializing in ecommerce reviews, user-generated content (UGC), and customer experience surveys. Founded in 2023 and based in the United States, it targets ecommerce merchants seeking to build trust and increase sales through authentic customer feedback and visual content. The company positions itself as a user-friendly alternative to larger review platforms, emphasizing personalized support and no-contract pricing. The website is professionally designed with comprehensive content, clear navigation, and strong branding consistency, supported by customer case studies and testimonials that enhance credibility. Technically, the website is built on WordPress using the Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Intercom. Hosting is via Amazon AWS, and the site employs HTTPS with a good SSL configuration. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. The site lacks DNSSEC and some recommended security headers like Content-Security-Policy and Referrer-Policy. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but could enhance its security posture by enabling DNSSEC and adding missing headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good with a comprehensive privacy policy and terms of service, though no explicit cookie consent mechanism was found. Contact information is available, including a physical address and verified support email. Overall, RaveCapture presents a trustworthy and professional online presence with a solid technical foundation and good security practices. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its posture. The domain registration details align well with the company's claimed history and operations, supporting legitimacy and trustworthiness.

W

WITTMANN MEDIA

unternehmen-heute.de

56

UNTERNEHMEN-HEUTE.de is a German-language online news portal operated by WITTMANN MEDIA, focusing on business, finance, technology, politics, motor industry, and environmental news. The website provides regularly updated news articles, press releases, and multimedia content targeting German-speaking professionals and the general public interested in these sectors. The business model centers on news publishing and press release distribution, supplemented by advertising and partner promotions. The site holds a niche position within the German media landscape with a small operational size. Technically, the website employs a custom or unknown CMS with a technology stack including jQuery, Google Analytics, Google Tag Manager, CookieConsent2, Google Fonts, and embedded YouTube videos. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are present but basic. The site uses multiple external resources and CDNs for fonts, scripts, and media. From a security perspective, the website uses HTTPS (assumed but not explicitly confirmed in HTML), implements a cookie consent mechanism, and includes Google site verification. However, it lacks explicit security headers such as CSP, HSTS, and X-Frame-Options, which are recommended for enhanced security. No incident response or vulnerability disclosure policies are found. The WHOIS data indicates a consistent domain registration with no privacy protection, aligning with the website operator's identity. Overall, the website is functional, professionally designed, and trustworthy for its intended audience. Security posture is moderate with room for improvement in headers and policies. Privacy compliance is basic but present. Strategic recommendations include enhancing security headers, publishing terms of service, and adding more comprehensive contact information to improve trust and compliance.

Z

Zavis Inc.

zavis.ai

59

Zavis Inc. operates a professional and modern website offering AI-powered business automation solutions focused on WhatsApp Business, AI cloud call centers, and omnichannel customer engagement. The company targets businesses seeking to scale customer interactions efficiently using advanced AI technologies. Their market position is that of a specialized SaaS provider delivering full-stack AI solutions for customer communication and engagement across multiple platforms including WhatsApp, Instagram, and voice calls. The website demonstrates a high level of digital maturity with a modern React/Next.js tech stack, embedded multimedia content, and integration of multiple analytics and marketing tools. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not clearly presented. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, supporting a positive business credibility profile.

W

white label eCommerce GmbH

radiosparbox.de

63

RadioSparBox is an e-commerce platform operated by white label eCommerce GmbH, specializing in selling tickets and vouchers for a variety of entertainment and leisure activities including concerts, festivals, sports events, and restaurants. The platform targets regional customers in Germany, offering exclusive discounts up to 50%, positioning itself as a regional niche player in the entertainment e-commerce market. The website is professionally designed with clear navigation and a good user experience, supporting multiple payment methods and integrating marketing and analytics tools with user consent mechanisms.

R

regioshop

dein-shop.de

59

Dein Shop is a German e-commerce platform operating under the brand 'regioshop', offering a broad range of consumer products across categories such as home, lifestyle, health, and seasonal goods. The website is built on the Shopware CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, Microsoft Clarity, and Friendly Captcha for enhanced user experience and security. The site demonstrates good design quality, clear navigation, and mobile optimization, targeting a general audience in Germany with a medium-sized market presence. From a technical perspective, the website employs HTTPS with strong security headers, uses CAPTCHA to protect forms, and integrates multiple analytics and tracking tools with some consent mechanisms in place. However, the privacy and cookie policies are basic, and there is no dedicated security policy or incident response information published. The domain WHOIS data is minimal and lacks detailed registrant information, which slightly reduces trustworthiness but does not detract significantly from the overall legitimacy of the business. Security posture is solid with no visible vulnerabilities or exposed sensitive data. The website complies with GDPR to a basic extent, providing privacy and cookie policies and mechanisms for user consent. Business credibility is supported by professional content, consistent branding, and trust indicators such as HTTPS and contact options. Overall, the site scores well in content quality, technical implementation, and security, with room for improvement in privacy compliance and transparency regarding security policies.

W

Westfunk GmbH & Co. KG

westfunk.de

52

Westfunk GmbH & Co. KG is a regional media service company based in Essen, Germany, specializing in local radio broadcasting and advertising services. As part of the FUNKE MEDIENGRUPPE, it serves as the backbone for twelve independent local radio stations across the Ruhrgebiet, Niederrhein, and Sauerland regions. The company offers technical, marketing, and digital product services to local radio stations and provides advertising sales support through FUNKE MediaSales. The website reflects a strong market position as a regional market leader in several broadcast areas, supported by professional content and clear business messaging. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, ensuring good SEO and user experience. It employs Google Tag Manager for analytics and uses a consent management platform for GDPR-compliant cookie handling. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, indicating a secure and modern infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though some security headers could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and user consent mechanisms. No critical vulnerabilities or suspicious content were detected. Overall, Westfunk's website demonstrates a mature digital presence with strong business credibility, good technical implementation, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving accessibility features to further strengthen the site’s security and user experience.

FUNKE Mediengruppe is a large German media company active in regional newspapers, magazines, and digital media. The website reflects a professional media group with a clear focus on quality journalism and corporate responsibility, including sustainability and diversity. The technical infrastructure is modern, leveraging Contao CMS and popular JavaScript frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the site is trustworthy and well-maintained, supporting a broad audience interested in media and journalism.

N

Nordkurier

nordkurier.de

63

Nordkurier.de is a regional news portal serving Mecklenburg-Vorpommern and Brandenburg in Germany, providing local news, e-paper services, job listings, and event calendars. The website targets residents and readers interested in regional news and operates a subscription-based business model supplemented by advertising revenue. The site uses modern web technologies including React and Next.js, and integrates multiple analytics and marketing tools such as Google Analytics, TikTok Pixel, and Microsoft Clarity. Consent management is implemented, indicating GDPR awareness, though explicit privacy and terms of service documents were not found in the provided content. Security posture is moderate with HTTPS enabled but lacking explicit security headers and incident response contacts. Overall, the site is professional, well-branded, and trustworthy for its target audience.

NIC.ec, operated by ECUADORDOMAIN S.A., is the official registry and registrar for Ecuador's .ec country code top-level domain. The website provides domain search, registration, and management services targeting individuals, businesses, and government entities within Ecuador. It holds multiple official accreditations such as ICANN, IANA, LACNIC, and LACTLD, reinforcing its authoritative position in the domain registration market. The site also promotes partnerships with registrar agents and offers specialized services for government and military domains. Technically, the website employs a modern tech stack including jQuery, Bootstrap, FontAwesome, Google Tag Manager, Google Analytics, Yandex Metrika, and Chatwoot for live chat support. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms. The site is mobile optimized and features good navigation and content quality. However, no explicit CMS or hosting provider information is detected, suggesting a custom-built platform. From a security perspective, the site follows best practices such as HTTPS enforcement, CSRF tokens, and reCAPTCHA integration. While security headers are not explicitly visible in the HTML, the site does not expose sensitive data or show signs of vulnerabilities. The absence of a published security policy or incident response contact is noted. Extensive tracking and marketing tools are used, indicating a moderate to extensive user tracking level, with basic privacy compliance. Overall, NIC.ec presents a trustworthy and professional online presence consistent with its role as Ecuador's official domain registry. Recommendations include enhancing security header implementation, publishing a security policy and incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

S

Shop Houzz

shophouzz.com

72

Shop Houzz operates as an e-commerce platform specializing in home furniture, lighting, and decor products. The website is built on the Shopify platform, leveraging a modern tech stack including various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Yotpo for product reviews. The site targets consumers looking for home essentials and offers a broad product catalog with clear navigation and a professional design. The business model is retail-focused, serving the US market primarily. Technically, the site is well-structured with good mobile optimization and moderate performance, hosted on Shopify's CDN infrastructure. Security posture is adequate with HTTPS enforced and use of fraud prevention services, though explicit security headers and dedicated security policies are not visible. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site appears legitimate and trustworthy but would benefit from enhanced transparency and security best practices.

Horde is a Swiss-based strategic and creative communication agency with offices in Lausanne, Zürich, Genève, and Valais. The company offers a broad range of services including design, advertising, digital strategy, motion design, and copywriting. It serves a diverse clientele including major brands such as Migros, Swiss International Air Lines, Nespresso, and Tesla, positioning itself as a reputable medium-sized agency in the Swiss media and advertising market. The website is professionally designed, multilingual, and optimized for modern web standards, reflecting a mature digital presence. Technically, the site is built on WordPress with advanced SEO and performance optimizations, leveraging tools like Yoast SEO, WP Rocket, and Google Tag Manager. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though explicit security policies and cookie consent mechanisms are absent. Overall, the site demonstrates strong business credibility and technical maturity but would benefit from enhanced privacy and security disclosures.

M

Museo Nacional Thyssen-Bornemisza

museothyssen.org

65

Museo Nacional Thyssen-Bornemisza is a prominent national art museum located in Madrid, Spain, forming part of the renowned 'Paseo del Arte' cultural corridor alongside Museo del Prado and Centro de Arte Reina Sofía. The museum offers a rich collection of Western art from the 13th to the 20th century, complemented by temporary exhibitions, educational activities, and a museum shop. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting general public and art enthusiasts. Technically, the site is built on Drupal 10, integrates Google Tag Manager and Google Optimize for analytics and marketing, and employs CookiePro for GDPR-compliant cookie consent management. Security posture is strong with HTTPS enforced and privacy-conscious analytics activation, though some security headers could be improved. WHOIS data is unavailable due to registry restrictions, but the website's branding and content indicate legitimacy. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations, serving as a reliable digital front for the museum.

A

Antica Terra

anticaterra.com

57

Antica Terra is a boutique winery and hospitality business based in Amity, Oregon, with a strong focus on direct-to-consumer wine sales, exclusive membership programs, and curated wine experiences. The website reflects a professional and consistent brand image targeting wine enthusiasts and mature audiences. Technically, the site is built on WordPress with integrations such as Gravity Forms, Google Analytics, Klaviyo, and Commerce7, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and contact information. Security posture is adequate with HTTPS and form CAPTCHA, but lacks advanced security headers and DNSSEC, and no privacy or cookie policies are published, which are compliance gaps. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

M

Ministry of Interior

nasiukrajinci.cz

66

The website nasiukrajinci.cz is an official Czech government platform managed by the Ministry of Interior, providing comprehensive information and resources to support Ukrainian refugees in the Czech Republic. It offers multilingual content covering legal stay, financial aid, healthcare, education, employment, and additional assistance. The site also targets Czech citizens and organizations willing to help Ukrainians, positioning itself as a central information hub in this humanitarian context. The business model is public service oriented, with no commercial intent, focusing on accessibility and clarity. Technically, the website is built on modern web technologies including React and Next.js, hosted on Azure DNS infrastructure. It integrates Google Tag Manager for analytics and employs a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure suitable for government services. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official nature of the site, showing consistent registration and domain age appropriate for the service's launch in 2022. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact information for incident response to further strengthen trust and compliance.

F

Fair Trade Town

fairtradetown.ch

56

Fair Trade Town is a Swiss non-profit initiative dedicated to promoting justice, sustainability, and social responsibility through the certification and support of municipalities as Fair Trade Towns. The website serves as a platform to raise awareness, provide resources, and showcase success stories from certified towns. The organization positions itself as a key player in advancing global sustainability goals at the local level, engaging communities and local partners in fair trade practices. Technically, the website is built on WordPress 6.8.3, utilizing modern web technologies including Google Tag Manager for analytics and Borlabs Cookie for consent management. The site is mobile-optimized with good SEO practices and uses HTTPS to secure communications. The presence of Google Maps API enhances user interaction with geographic data about Fair Trade Towns. From a security perspective, the site enforces HTTPS and uses a reputable cookie consent plugin, but lacks explicit security headers and visible privacy or terms of service pages, which are recommended for enhanced compliance and trust. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a professional and trustworthy image with a clear mission and audience. Strategic improvements include publishing comprehensive privacy and terms policies, enhancing security headers, and providing clear contact information to strengthen compliance and user trust.

C

Contentstack Inc.

contentstack.com

75

Contentstack Inc. operates a leading adaptive digital experience platform that integrates AI-driven content management with real-time customer data to deliver personalized experiences across multiple digital channels. Positioned as an enterprise-grade SaaS provider, Contentstack targets developers, business users, and digital leaders seeking flexible and scalable headless CMS solutions. The platform's key services include headless content management, real-time data analytics, omnichannel personalization, intelligent agents, and front-end hosting, supported by a strong brand presence and major global customers. Technically, the website leverages modern web technologies such as React and Next.js, integrates Google Tag Manager for analytics, and employs CookiePro for consent management, reflecting a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive metadata and structured content. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses consent mechanisms for privacy compliance. However, explicit security policies and incident response contacts are not prominently published, indicating areas for improvement. No vulnerabilities or exposed sensitive data were detected during analysis. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards, although the absence of WHOIS data introduces some uncertainty about domain registration details. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around data protection roles.

B

Broadstreet Ads Inc

broadstreetads.com

62

Broadstreet Ads Inc operates a specialized SaaS platform focused on ad management for local and B2B publishers who rely on direct sales. The company positions itself as a niche leader with a strong emphasis on customer support, innovative ad formats, and seamless integration with programmatic and Google Ad Manager solutions. Their website reflects a mature business with comprehensive content, testimonials, and resources tailored to their target audience of small and local publishers. Technically, the site is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. Security posture is good with HTTPS and domain protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is addressed with a clear privacy and cookie policy including consent mechanisms. Overall, the business credibility is high with clear contact information, physical address, and positive trust signals.

N

Nadace O2

o2chytraskola.cz

41

O2 Chytrá škola is a well-established educational project by Nadace O2 focused on promoting safe and responsible use of technology and the internet among children, parents, and teachers in the Czech Republic. The website offers a rich variety of educational content including articles, videos, podcasts, quizzes, and grant programs, positioning itself as a trusted resource in the education and non-profit sectors. The project benefits from clear branding, consistent messaging, and a strong social media presence, enhancing its outreach and engagement with its target audience. Technically, the website employs modern web technologies such as Alpine.js for interactivity, Google Tag Manager and Exponea for analytics and marketing, and Google reCAPTCHA v3 for bot protection. The site is mobile-optimized, accessible, and SEO-friendly, with a custom or framework-based backend likely using Nette. The performance is moderate, with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS, integrates a consent management platform for GDPR compliance, and uses secure forms with validation. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be added to enhance security posture. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies and mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with relevant regulations. It serves its educational mission effectively while maintaining a secure and user-friendly environment.

O

O2 CZ

o2.cz

66

O2 CZ is a major telecommunications provider in the Czech Republic offering a wide range of services including mobile tariffs, internet, digital TV (Oneplay), and device sales. The website reflects a strong market position with comprehensive service offerings and a clear focus on consumer and business segments. The company is part of the PPF Group, a significant parent company, which adds to its credibility and market strength. The website is professionally designed, mobile-optimized, and provides rich content about its products and services, targeting a broad audience in the Czech Republic. Technically, the website employs modern web technologies including JavaScript frameworks, Adobe DTM for tag management, Exponea for marketing automation, and Google Tag Manager for analytics. The site is well-structured with good SEO and accessibility features, ensuring a positive user experience across devices. The use of HTTPS and security headers indicates a strong security posture, although explicit security policies and incident response information are not publicly detailed. Security-wise, the site enforces HTTPS, uses a consent management platform for GDPR compliance, and avoids exposing sensitive data in its HTML content. However, the absence of WHOIS data is unusual and reduces transparency, though the website's branding and external references strongly support its legitimacy. No critical vulnerabilities or malicious content were detected. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.

P

Panattoni

panattoni.in

61

Panattoni India is a regional branch of Panattoni Development Company, a globally recognized leader in real estate development specializing in industrial, logistics, office, retail, and mixed-use projects. The company boasts a significant market presence with over 60 million sqm developed worldwide and is recognized as the largest logistics developer in Europe. Their business model focuses on providing end-to-end real estate development and investment services, targeting institutional investors and clients seeking industrial space in India and beyond. The website reflects a professional and consistent brand image with comprehensive content tailored to investors and business clients. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, Sentry for error monitoring, and Iubenda for cookie compliance, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and moderate performance. However, explicit CMS or hosting details are not evident. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit security headers and a published security policy or incident response contact suggests room for improvement. Overall, the site demonstrates a strong security posture but could enhance transparency and incident readiness. The overall risk assessment is low, with the site appearing trustworthy and professionally managed. Strategic recommendations include implementing additional security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security and compliance posture.

P

PDE Shared Services sp .z o.o.

panattonieurope.com

69

Panattoni Europe is a leading industrial real estate developer and investment provider, recognized as the largest industrial developer across Europe for eight consecutive years. The company offers a broad range of services including industrial space development, capital deployment, and additional client services such as strategy recommendations. Their market position is strong, targeting institutional investors and clients interested in logistics and industrial real estate investments. The website reflects a mature and professional digital presence with comprehensive content and clear navigation. Technically, the site employs modern technologies including Google Tag Manager, Google Analytics, and Iubenda for cookie compliance, hosted with Cloudflare DNS services, ensuring fast and secure access. Security posture is robust with HTTPS enforced, domain locking, and active monitoring via Sentry, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Overall, the website is trustworthy, professional, and compliant with relevant regulations.

F

FUNKE Publishing GmbH

globista.de

58

GLOBISTA Reisen is an online travel portal operated by FUNKE Publishing GmbH, a subsidiary of the FUNKE Mediengruppe, a major German media company. The website offers curated travel deals including cruises, city trips, family vacations, and bus tours primarily targeting German-speaking customers. The platform integrates modern web technologies such as WordPress CMS, Google Tag Manager, and Cloudfront CDN to deliver a responsive and user-friendly experience. Privacy and cookie compliance are well implemented with clear consent mechanisms and GDPR adherence. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations. Contact information and company details are transparent and consistent with the registrant data, supporting business credibility.

F

FUNKE Mediengruppe

hamburgerimmobilien.de

63

The website www.abendblatt.de/hamburg/immobilien-hamburg/ is a regional media platform operated by FUNKE Mediengruppe, focusing on real estate market news and developments in Hamburg. It serves residents and potential property buyers with up-to-date information, leveraging a subscription and advertising-based business model. The site is well-positioned in the regional media market with a consistent brand and professional content quality. Technically, the website employs a modern JavaScript-based infrastructure with modules for consent management, analytics, and advertising. It integrates third-party services such as Google Tag Manager, Piano for subscription management, and various marketing tools. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in security headers and accessibility could be made. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers suggests room for enhancement. The privacy policy and cookie consent mechanisms are comprehensive and clearly presented. Overall, the website exhibits a strong security posture, good privacy compliance, and credible business information. It is suitable for general audiences with safe content focused on real estate and news. Strategic recommendations include implementing additional security headers, auditing third-party scripts regularly, and enhancing accessibility features to further strengthen compliance and user trust.

F

FUNKE Digital GmbH

funkedigital.de

53

FUNKE Digital GmbH is a digital media powerhouse and a wholly owned subsidiary of the FUNKE Mediengruppe, based in Germany. The company specializes in operating news websites, content verticals, and digital investments, serving as the digital engine for its parent group. Their business model integrates modern technologies, agile methodologies, and interdisciplinary teams to innovate and expand digital media offerings. The website reflects a strong market position with a professional and consistent brand presence, targeting digital media consumers, advertisers, and investors. The company also actively recruits talent, emphasizing flexibility and a performance culture.

A

AG info, s.r.o.

aginfo.cz

45

AG info, s.r.o. is a well-established Czech company specializing in agricultural software solutions, serving primarily farmers and agricultural businesses in the Czech Republic. With over 30 years of experience, the company offers a comprehensive suite of products including agronomy software, soil evidence management, livestock tracking, and GPS-based telematics. Their market position is strong within the Czech agricultural sector, supported by a sizable customer base and ongoing technical support and training services. Technically, the website is built on Joomla CMS and leverages common web technologies such as jQuery, Bootstrap, and Google Tag Manager for analytics. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. However, it lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating potential gaps in security transparency. Overall, the website is professional, trustworthy, and content-rich, but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

A

Agri-precision

agri-precision.cz

45

Agri-precision is a Czech-based company specializing in precision agriculture technologies, including GPS navigation, monitoring systems, and automation solutions for agricultural machinery. The company positions itself as an authorized reseller and service provider for multiple well-known brands in the precision farming sector, targeting agricultural businesses primarily in the Czech Republic and Slovakia. Their website showcases a comprehensive product portfolio and emphasizes improving agricultural production efficiency through advanced technology. Technically, the website is built on the xartCMS platform and utilizes common JavaScript libraries such as jQuery and MooTools, along with embedded YouTube videos and Google Tag Manager for analytics and marketing. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and professional design. However, some accessibility features appear basic, and performance is moderate. From a security perspective, the site uses HTTPS and includes tracking and analytics scripts from Microsoft Clarity and Google. No explicit security headers were detected in the provided data, and there is no evidence of privacy or cookie policies, which indicates gaps in privacy compliance. The absence of WHOIS data limits the ability to fully verify domain legitimacy, although the website content and business presence appear professional and trustworthy. Overall, the website presents a solid business offering with good technical implementation but requires improvements in privacy compliance, security best practices, and domain registration transparency to enhance trust and security posture.

DRANA s.r.o. is a Czech-based company specializing in the import and production of spices, seasoning mixes, marinades, dried vegetables, mushrooms, and herbs primarily serving professional gastronomy clients and retail customers. With approximately 30 years of experience, the company emphasizes quality, innovation, and social responsibility, including employing handicapped individuals. The website is built on the Shoptet e-commerce platform, utilizing standard web technologies such as jQuery, Google Analytics 4, and Facebook SDK. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is adequate with HTTPS and CSRF protections, but could be improved by updating outdated libraries and adding security headers. WHOIS data is missing, which reduces domain trustworthiness, but the website content and business information appear professional and credible.

E

EKOFRUKT Slaný, spol. s r.o.

ekofrukt.cz

51

EKOFRUKT Slaný, spol. s r.o. is a Czech-based manufacturer specializing in the production and development of cereal bars, including protein, muesli, nut, fruit, flapjack, and cereal bars. The company emphasizes private label manufacturing with over 30 years of tradition and exports to more than 20 countries in Europe. Their product portfolio is supported by multiple certifications such as IFS Food, Kosher, BIO, HACCP, FSC, and Rain Forest Alliance, underscoring their commitment to quality and sustainability. The website is professionally designed, mobile-optimized, and provides comprehensive information about their offerings and certifications.

V

VOCALLS

vocalls.ai

57

VOCALLS is a technology company specializing in conversational AI automation for contact centers, offering voicebot, chatbot, and emailbot solutions to automate customer interactions. The company positions itself as a leader in contact center AI automation and has recently been acquired by CallMiner, indicating a strong market presence and strategic growth. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow CMS, Google Analytics, and Cloudflare security features. Privacy and cookie policies are implemented with opt-in consent mechanisms, reflecting good privacy compliance. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website and business appear legitimate and well-maintained, with a medium-sized enterprise profile focused on B2B SaaS solutions for customer service automation.

L

Leya AI | Learn English Fast

leyaai.com

63

Leya AI is a newly launched educational platform focused on accelerating English language learning through AI-powered personal coaching. The website presents a clear value proposition targeting individuals seeking fast and confident English learning with minimal daily time investment. The business appears to be a small startup founded in 2023, leveraging modern web technologies and hosted on AWS infrastructure. Technically, the site uses Framer as its CMS and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and PostHog. While the site is accessible and well-designed with good mobile optimization, it lacks critical privacy and security policies, contact information, and security headers, which impacts its overall trust and compliance posture. The domain registration is consistent with a new business and shows no suspicious patterns. Overall, the site demonstrates moderate digital maturity but requires improvements in privacy compliance and security best practices to enhance trustworthiness and regulatory adherence.

YDISTRI is a medium-sized retail technology company founded in 2018, specializing in AI-driven inventory redistribution solutions that help retail chains optimize underperforming stock and increase profitability. The company leverages a SaaS platform integrated with AI to provide real-time demand matching and inventory balancing services. Their market position is strengthened by partnerships with major industry players such as SAP and Microsoft, and a client base including well-known retail brands. Technically, the website is built on HubSpot CMS with modern analytics and marketing tools, demonstrating a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the website presents a professional, trustworthy, and content-rich presence suitable for its B2B audience.

V

Visualio s.r.o.

visualio.cz

50

Visualio s.r.o. is a Czech-based creative studio specializing in brand design, web development, and advertising campaigns. Established in 2010, the company serves businesses seeking to build successful brands, with a strong portfolio including notable clients such as Accolade, Reticulum, and Panattoni. The website reflects a professional and consistent brand image, showcasing client testimonials and awards that reinforce its market position as a trusted creative partner. Technically, the site employs modern JavaScript frameworks like Alpine.js, integrates Google Analytics, Google Tag Manager, and Smartlook for analytics and user behavior tracking, and uses Google reCAPTCHA for bot protection. Hosting and domain registration are managed via WEDOS, a Czech provider, consistent with the company's location and business claims. Security posture is good with HTTPS enforced and bot protection, but lacks explicit security headers and published privacy or cookie policies, indicating areas for compliance improvement. Overall, the site is well-designed, mobile-optimized, and user-friendly, but would benefit from enhanced privacy disclosures and security best practices to improve trust and regulatory compliance.

G

GA Connector

gaconnector.com

72

GA Connector is a technology company specializing in integrating CRM systems with Google Analytics to provide businesses with detailed insights into their marketing ROI and lead sources. Founded in 2016 and operated by MarTech Solutions LLC, the company serves a broad range of clients including Fortune 500 companies, offering a SaaS platform that imports visitor and sales data into CRM software to optimize marketing spend. The website is professionally designed, mobile-optimized, and rich in content, showcasing strong branding consistency and trust signals such as customer testimonials and GDPR compliance. Technically, the site uses modern frameworks like Bootstrap and integrates multiple marketing and analytics tools including Google Analytics, Google Tag Manager, Drip, and HelpScout Beacon. Hosting is managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website and business present a credible, professional, and secure digital presence.

N

N-TV Spiele

n-tvspiele.de

60

n-tvspiele.de is a German-language online gaming portal offering a wide variety of free-to-play online, browser, and downloadable games primarily in the strategy, simulation, and action categories. The site targets casual gamers seeking diverse gaming experiences without cost. The business model appears to be based on advertising and game promotion within a niche market segment. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

R

RTL

rtl.de

68

RTL.de is a leading German media and broadcasting website providing news, entertainment, sports, and streaming content primarily targeting a general German-speaking audience. The site offers a comprehensive range of services including live sports coverage, star news, lifestyle advice, and access to RTL's streaming platform RTL+. Technically, the website is built using modern web technologies such as Next.js and React, with optimized images and responsive design for mobile users. Security is well implemented with HTTPS and multiple security headers, although explicit privacy and cookie policies are not clearly found in the provided content. The site integrates several third-party analytics and advertising scripts, managed with consent mechanisms. Overall, RTL.de presents a professional and trustworthy digital presence consistent with a major media enterprise.

G

Gruner + Jahr Deutschland GmbH

guj.de

68

Gruner + Jahr Deutschland GmbH is a prominent media publishing company based in Hamburg, Germany, specializing in magazines and digital content for well-known brands such as Schöner Wohnen, Häuser, Couch, and GEOlino. Since 2022, it has been fully integrated into RTL Deutschland GmbH, part of the larger RTL Group, a leading European entertainment conglomerate. The company targets a broad general audience with its publishing and digital media offerings, leveraging the strong market position and resources of RTL Deutschland. Technically, the website employs modern web technologies including Google Tag Manager for analytics and a privacy management solution from privacy-mgmt.com to handle GDPR compliance. The site is built on a CMS platform likely proprietary to RTL (NetRTL CMS), with responsive design and good SEO practices. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain is unavailable, which is typical for subdomains of large corporate domains, but the main rtl.com domain is well-established and reputable. Overall, the website presents a professional and trustworthy front for Gruner + Jahr Deutschland GmbH and RTL Group, with solid business credibility and compliance efforts. Strategic improvements in security headers, transparency on security policies, and enhanced privacy documentation would further strengthen the security posture and user trust.

C

Comodo: Cloud Native Cyber Security Platform

comodo.com

71

Comodo is a cybersecurity company offering advanced endpoint protection and website security solutions designed to safeguard devices and websites from malware and cyber threats. The company positions itself as a cloud-native cyber security platform with a broad portfolio of services including malware monitoring, remediation, premium DNS, CDN, WAF, backup, antivirus, and containment technologies. Their target audience includes both businesses and consumers seeking comprehensive cybersecurity solutions. The website demonstrates a professional and consistent brand presence with clear navigation and modern design elements. Technically, the site is built on WordPress with Elementor and integrates multiple analytics and marketing tools such as HubSpot, Google Tag Manager, and Klaviyo, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and use of security products, though explicit security headers and published security policies are lacking. WHOIS data is unavailable from the raw output, which reduces trustworthiness but the website content and branding suggest legitimacy. Overall, the site is well-structured and provides a good user experience with moderate performance and good mobile optimization.

S

Sectigo

sectigo.com

80

Sectigo is a leading global provider of SSL certificates and automated certificate management solutions, trusted by enterprises and global brands for over 20 years. The company offers a broad portfolio of security products including SSL/TLS certificates, code signing, IoT security, and private PKI solutions, targeting IT professionals and businesses requiring robust digital security. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site employs modern JavaScript frameworks, analytics, and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and compliance with recognized standards such as ISO 27001 and SOC 2. Privacy and cookie policies are comprehensive and GDPR compliant, supported by consent mechanisms. WHOIS data is unavailable likely due to privacy protection, which is justified for a security company. Overall, Sectigo's website demonstrates a professional, trustworthy, and secure online presence.

R

RaveCapture

trustspot.io

59

RaveCapture is a SaaS platform specializing in ecommerce reviews, user-generated content (UGC), and customer experience surveys. The company targets ecommerce merchants seeking to build trust and increase conversions through authentic customer feedback and visual content. Positioned as a user-friendly and no-contract alternative to larger review platforms, RaveCapture emphasizes personalized support and fair pricing. The website is professionally designed with excellent content quality, clear navigation, and strong SEO optimization, reflecting a mature digital presence despite the company's recent founding in 2023. Technically, the site is built on WordPress using the Divi theme, leveraging modern web technologies such as jQuery, Google Tag Manager, and Intercom for customer engagement and analytics. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and accessible, with fast loading times and proper meta tags enhancing search engine visibility. From a security perspective, the website enforces HTTPS and employs domain transfer protections. However, DNSSEC is not enabled, and no Content-Security-Policy header was detected, indicating room for improvement in DNS and web security hardening. The absence of published security policies or incident response contacts suggests limited transparency in security governance. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a visible cookie consent mechanism, which may impact GDPR adherence. Overall, RaveCapture presents a trustworthy and professional ecommerce service with a solid technical foundation. Strategic enhancements in security headers, DNS security, and privacy consent mechanisms would further strengthen its security posture and regulatory compliance, supporting sustained growth and customer confidence.