Security Directory

H

Hotel Sopron**** - Négycsillagos szálloda Sopronban családoknak, cégeknek, csoportoknak

hotelsopron.hu

48

Hotel Sopron is a four-star hotel located in the city center of Sopron, Hungary, near the Austrian border. The hotel targets families, companies, and groups, offering renovated rooms, free parking, wifi, and an online booking system. The website is professionally designed using Concrete5 CMS and Bootstrap 3.3.7, providing a good user experience with mobile optimization and clear navigation. The technical infrastructure includes Google Tag Manager and CookieYes for analytics and cookie consent management. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie banner but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and legitimate, supported by a domain age of over 20 years consistent with the business history.

P

PORR S.A.

porr.pl

57

PORR Poland is a well-established construction company operating as part of the larger PORR Group. The company offers a wide range of construction services including infrastructure, civil engineering, building construction, rail construction, power plant construction, hydraulic engineering, and specialized equipment services. The website reflects a mature business with a strong market position in Poland and connections to European markets. Technically, the site is built on TYPO3 CMS with modern web technologies and includes comprehensive cookie consent mechanisms and analytics integration. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

P

PORR GmbH & Co. KGaA

porr.de

54

PORR GmbH & Co. KGaA operates a professional and comprehensive website focused on construction and engineering services in Germany. The company positions itself as a technology leader offering a wide range of services including government services, building construction, infrastructure, and environmental technology. The website is well-structured, multilingual, and targets business clients in the construction and infrastructure sectors. The digital infrastructure is based on TYPO3 CMS with modern web technologies and includes a detailed cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and cookie management, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature enterprise-level business with strong branding and trust indicators.

P

PORR Schweiz

porr.ch

55

PORR Schweiz is a well-established, international construction company with over 150 years of experience and a strong presence in Switzerland and other European countries. The company offers a broad range of construction services including building construction, civil engineering, infrastructure, tunnel construction, and environmental technology. The website reflects a professional corporate identity aligned with its parent company PORR AG, showcasing a comprehensive service portfolio and multiple country-specific sites. Technically, the website is built on TYPO3 CMS with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers could be added. Privacy compliance is well addressed with a detailed privacy and cookie policy. Overall, the website projects high business credibility and trustworthiness.

P

PORR a.s.

porr.cz

56

PORR a.s. is a well-established large enterprise operating in the construction and infrastructure sector in the Czech Republic, with a strong international presence under its parent company PORR AG. The company offers full-service construction solutions including transport and engineering structures, building construction, and special competencies. The website reflects a professional corporate identity with comprehensive content, clear navigation, and multilingual support. Technically, the site is built on TYPO3 CMS with modern web technologies and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, cookie consent mechanisms, and privacy-conscious embedded content. No critical vulnerabilities or compliance gaps were detected. Overall, the site projects high trustworthiness and business credibility.

P

PORR AG

porr-group.com

52

PORR AG is a leading European construction company with over 150 years of history, offering full-service construction and engineering solutions. The website reflects a mature digital presence with comprehensive investor relations, sustainability, and career information. The technical infrastructure is based on TYPO3 CMS with modern web technologies and GDPR-compliant cookie management. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates professionalism, compliance, and strong business credibility.

igus® México S. de R.L. de C.V. operates a professional and comprehensive website focused on industrial automation components such as energy chains, polymer bushings, cables for motion, linear technology, and robotic automation products. The company targets industrial manufacturers and automation professionals in Mexico, leveraging a B2B business model with direct online sales and configurator tools. The website reflects a strong market position as a subsidiary of the global igus GmbH brand, offering extensive product information, digital tools, and customer engagement features.

igus® Korea operates as a regional branch of the global igus GmbH, specializing in manufacturing and supplying motion plastics products such as energy chains, cables, polymer bearings, and automation components. The website is professionally designed, offering extensive product information, online configurators, CAD tools, and customer support features tailored for industrial clients in South Korea. The company positions itself as a leader in the manufacturing sector with a strong focus on innovation and customer-centric solutions. Technically, the website employs modern JavaScript libraries, analytics, and marketing tools, ensuring a robust digital presence. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site reflects a mature business with good digital maturity and trustworthiness, despite the lack of WHOIS data which may be due to regional registry constraints.

igus® (India) Pvt. Ltd. is a subsidiary of igus GmbH, specializing in manufacturing and supplying high-performance polymer components for motion applications such as energy chains, polymer bearings, flexible cables, and linear slides. The company targets industrial sectors including automation, robotics, and manufacturing, providing both products and digital configurator tools to enhance customer experience. The website reflects a strong market position with comprehensive product offerings and a global footprint supported by localized country domains. Technically, the website employs modern web technologies and analytics tools, ensuring good performance, mobile optimization, and SEO. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the business's industrial focus.

igus GmbH operates the website igus.cl as a localized Chilean presence offering advanced motion plastics solutions including cable carriers, linear bearings, and automation components. The company is a global leader in manufacturing technical plastics for motion with a strong B2B focus serving diverse industrial sectors. The website demonstrates a mature digital infrastructure with modern technologies such as jQuery, Google Tag Manager, and Piwik PRO analytics, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response contacts are not found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the parent company's branding and market positioning.

The website www.igus.ca serves as a language selection landing page for igus, a manufacturer specializing in high-performance polymers for movement applications such as energy chains, cables, and bearings. The company targets industrial and engineering sectors in Canada, offering direct sales of polymer-based motion components. The site is minimalistic, focusing on directing users to English or French versions of the main site. The technical infrastructure includes multiple marketing and analytics tools such as Google Analytics, Bing Ads, LinkedIn Insight Tag, HubSpot Forms, and Lucky Orange, indicating a moderate level of digital maturity. However, the site lacks visible privacy, cookie, or terms of service policies, which impacts compliance and user trust. Security posture is moderate with no visible security headers or SSL details provided, but no critical vulnerabilities were detected in the content. The absence of WHOIS data for the domain reduces trustworthiness, though the branding and content align with the known igus company. Overall, the site is functional but could improve in privacy compliance and security transparency.

T

Trustist Reviews

trustist.com

63

Trustist Reviews operates as a specialized online platform focused on customer reviews and reputation management. The company offers a free customer reviews quiz and detailed PDF reports to help businesses understand and improve their customer feedback. The website targets businesses looking to enhance their online reputation and customer engagement. Technically, the site is built on WordPress with Elementor, hosted likely on Azure, and uses Cloudflare DNS for performance and security. It integrates multiple marketing and analytics tools including Google Analytics, HubSpot, Hotjar, and Facebook Pixel, indicating a mature digital marketing infrastructure. Security-wise, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, but lacks explicit security policies or incident response contacts. The domain registration is consistent and trustworthy, with a long registration period and protective domain status flags. Overall, the website is professional and secure but could improve transparency by publishing privacy policies, terms of service, and security contact information.

C

ChemE Show

cheme-show.com

58

ChemE Show is a professional trade show platform focused on the process industries and energy sector, powered by established industry organizers ACHEMA and DECHEMA. The website serves as an information and event promotion portal targeting industry professionals and companies. The business model centers on event organization and industry networking, positioning ChemE Show as a significant player in its niche. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and analytics tools such as Google Analytics and Omeda Olytics. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features appear basic. Security posture is moderate with HTTPS enforced and cookie consent implemented via Cookiebot, but lacks DNSSEC and explicit security policies. No privacy policy or terms of service were found, which is a compliance gap. The domain registration is transparent and consistent with the business age, registered with GoDaddy and protected by standard domain locks. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security documentation.

N

Netuna Criação de sites Wordpress

netuna.com.br

47

Netuna Criação de sites Wordpress is a Brazilian digital agency specializing in WordPress website creation, maintenance, SEO optimization, and Google Ads management primarily serving clients in Belo Horizonte and surrounding areas. The company has a well-established market presence with a domain registered since 2009 and client testimonials indicating business activity since 2004. Their website reflects a professional and consistent brand image with a focus on delivering measurable digital marketing results. Technically, the site is built on WordPress with modern plugins and tools, including Yoast SEO, Google Analytics, and Facebook Pixel, supporting effective marketing and analytics capabilities. Security posture is adequate with HTTPS enforced and anonymized analytics, but could benefit from enhanced security headers and explicit privacy and cookie policies. Overall, the website is accessible, well-structured, and trustworthy, with clear contact information and active social media engagement.

T

The Hashgraph Association

hashgraph.swiss

60

The Hashgraph Association is a Swiss-based organization focused on fostering an innovative ecosystem for enterprises by leveraging Hedera Hashgraph technology. The website presents a professional and consistent brand image, targeting enterprise clients interested in blockchain and distributed ledger solutions. The technical infrastructure is built on the Framer CMS platform, incorporating Google Analytics and Google Tag Manager for user tracking and analytics. While the website is accessible and well-structured, it lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is limited due to the absence of detected security headers and publicly available WHOIS registrant information, which is privacy protected. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy transparency.

S

Ski-Weltcup Ofterschwang/Allgäu Organisationskomitee e.V.

weltcup-ofterschwang.de

53

The Ski-Weltcup Ofterschwang website represents a well-established regional sports event organizer focused on hosting ski world cup competitions in Ofterschwang, Germany. The site provides comprehensive information about the event, ticketing, schedules, sponsors, and local visitor services, targeting ski sports enthusiasts and tourists. The business model centers on event promotion, ticket sales, and sponsorship partnerships, with a strong local and regional presence supported by multiple official partners and sponsors. Technically, the website is built on the Tramino CMS platform, uses jQuery and Google Analytics, and hosts static assets on Amazon S3, delivering moderate performance with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and a robust cookie consent mechanism, though it lacks explicit security policy or incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable source for event-related information.

S

Skiclub Oberstdorf Veranstaltungs GmbH

skispringen-damen.de

53

The website www.skispringen-damen.de serves as the official platform for promoting the FIS Women's Ski Jumping World Cup events, specifically the Two Nights Tour held in Oberstdorf, Germany. The site targets sports fans and attendees interested in women's ski jumping competitions, providing event information, ticket sales, media resources, and sponsorship details. The business operates as a small event organizer with a clear focus on winter sports and regional partnerships. Technically, the website is built on the Tramino CMS platform and utilizes modern JavaScript libraries such as jQuery, Slick Carousel, and RequireJS. Hosting appears to leverage AWS S3 and tramino.net infrastructure, ensuring reliable content delivery. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features, delivering a positive user experience. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in formal security governance. Overall, the website presents a professional and trustworthy digital presence for the ski jumping event, with strong compliance and technical foundations. Strategic enhancements in security transparency and accessibility could further strengthen its posture.

The website www.nordic-oberstdorf.de serves as the official platform for the FIS Nordic Combined World Cup event held in Oberstdorf, Germany. It provides comprehensive information about the event, including news, results, media coverage, and service details for participants and fans. The site is positioned as a regional event organizer with strong ties to international sports federations and local partners. The business model focuses on event promotion, sponsorship management, and media dissemination targeting winter sports enthusiasts and stakeholders. Technically, the website is built on the Tramino CMS platform and employs modern JavaScript libraries such as jQuery, RequireJS, and Slick Carousel for dynamic content and user experience enhancements. It uses HTTPS with a valid SSL configuration and integrates Google Analytics with a consent-based mechanism, reflecting a mature digital infrastructure. Mobile optimization and SEO practices are well implemented, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and provides a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but does not raise suspicion, supporting the site's legitimacy. Overall, the website is professional, trustworthy, and well-suited for its purpose. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen its security posture and user inclusivity.

S

Seiz Technical Gloves GmbH

seiz.de

52

Seiz Technical Gloves GmbH is a German manufacturer specializing in protective gloves for various sectors including firefighting, rescue services, industry, handicraft, and sports. The company maintains a strong market position with a comprehensive product portfolio and a focus on quality and innovation. Their website is built on the Shopware e-commerce platform, demonstrating a modern and professional digital presence with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust, reflecting GDPR adherence with clear policies and consent management. Overall, the website reflects a trustworthy and credible business with a high level of professionalism and user experience.

F

Fachzeitschriften Shop

fachzeitschriften.shop

68

Fachzeitschriften.shop is a specialized B2B e-commerce platform focused on providing tailored trade publications for top decision makers in the German and international industrial sectors. The website leverages the Shopify platform with modern themes and third-party apps to deliver a professional and user-friendly experience. The business model centers on selling subscriptions and individual issues of expert magazines, positioning itself as a niche media provider within the industry segment. The site is well-branded, consistent, and targets a professional audience with relevant content and clear navigation. Technically, the website is built on Shopify using the Dawn theme and integrates several JavaScript libraries and apps such as Globo Form Builder for contact forms and GDPR cookie compliance scripts. Hosting and domain registration are managed through reputable providers, with HTTPS enforced and standard security headers likely in place. Performance and mobile optimization are good, though DNSSEC is not enabled, representing a minor security improvement opportunity. From a security perspective, the site benefits from Shopify's inherent platform security, including HTTPS and clientTransferProhibited domain status. However, it lacks explicit incident response policies, vulnerability disclosure mechanisms, and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, fachzeitschriften.shop presents a trustworthy and professional online presence with solid technical and privacy foundations. Strategic improvements include enabling DNSSEC, publishing a security.txt file, and providing explicit incident response contacts to enhance security posture and trust further.

The website www.xdc.dev serves as a developer forum dedicated to the XinFin XDC Network blockchain platform. It functions as a community hub for blockchain developers and enthusiasts to discuss technical topics, share proposals, and collaborate on ecosystem development. The site is positioned as a niche platform within the blockchain technology industry, supporting a small but active user base of over 5,500 members. The business model centers on community engagement and developer support rather than direct commercial services. Technically, the site is built on a modern web stack including JavaScript and Ruby on Rails, with client-side React components and integration of Google Analytics for user tracking. The platform is custom-built rather than using a common CMS, indicating a tailored approach for developer community needs. Performance and mobile optimization are moderate to good, with basic accessibility and SEO features implemented. From a security perspective, the site enforces HTTPS and includes CSRF protection tokens, but lacks advanced security headers such as Content Security Policy. There is no published security policy or incident response information, and no cookie consent mechanism is present, indicating partial compliance with privacy regulations. No critical vulnerabilities or exposed sensitive data were detected, but user-generated content includes some spam-like posts which could pose moderation challenges. Overall, the site is legitimate and consistent with the XinFin blockchain ecosystem branding and WHOIS registration data. However, improvements in privacy compliance, security transparency, and contact information availability would enhance trust and regulatory adherence. The site is safe for general audiences and does not contain adult or questionable content.

U

Udruga za razvoj civilnog društva

smart.hr

41

The website www.smart.hr represents a Croatian non-profit association dedicated to the development of civil society. Established in 2001, it serves as a platform for community support and educational programs targeting NGOs and civil society organizations. The site is built on WordPress using the Divi theme, incorporating standard web technologies and Google Analytics for visitor tracking. While the website demonstrates good design quality and mobile optimization, it lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Security measures include HTTPS and Google reCAPTCHA, but the absence of security headers and vulnerability disclosure policies suggests room for improvement. Overall, the domain registration data aligns well with the website's purpose and location, indicating a legitimate and established entity.

S

Solidarna

solidarna.hr

46

Solidarna is a Croatian non-profit foundation dedicated to fostering solidarity and community support through various funds and programs. The website presents a professional and well-structured digital presence, leveraging WordPress with Elementor and WooCommerce for content management and e-commerce capabilities. The foundation actively engages with its audience via social media channels and provides transparent information about its programs and donors. Technically, the site employs modern web technologies and maintains good security practices, including HTTPS and security headers. Privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service, security policy, and vulnerability disclosure information, which could enhance trust and compliance. Overall, the website is trustworthy, well-maintained, and serves its non-profit mission effectively.

B

business.gov.au

business.gov.au

74

business.gov.au is the official Australian Government portal providing comprehensive support, information, and access to grants, registrations, and business services for Australian businesses and entrepreneurs. It holds a strong market position as a trusted government resource, offering key services such as business grants management and the Research and Development Tax Incentive portal. The website targets Australian businesses of all sizes, facilitating their success through centralized government resources. Technically, the website employs a mature digital infrastructure including Sitecore CMS, Salesforce Live Agent for customer engagement, Coveo for search capabilities, and integrates analytics and tracking tools like Google Analytics, Hotjar, and Azure Application Insights. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS with a robust Content Security Policy, uses reCAPTCHA to mitigate bot activity, and maintains privacy and cookie policies with consent mechanisms. While DNSSEC is not enabled, the domain's WHOIS data confirms government ownership with strong registrar protections, indicating a high trust level. No critical vulnerabilities or exposed sensitive data were detected. Overall, business.gov.au presents a low-risk profile with excellent content quality, strong business credibility, and good security posture. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy or incident response page, and adding a security.txt file to facilitate vulnerability disclosures.

E

European Association for the Study of Obesity (EASO)

easo.org

66

The European Association for the Study of Obesity (EASO) is a well-established non-profit federation representing obesity science and healthcare professionals across Europe. Founded in 1986 and headquartered in the UK, EASO provides education, research support, policy advocacy, and professional networking services. The website reflects a mature organization with a strong market position as the leading voice in European obesity research and care. The content is comprehensive, professionally presented, and targeted at healthcare professionals, researchers, and policy makers.

W

World Obesity Federation

worldobesity.org

70

The World Obesity Federation is a globally recognized non-profit organization dedicated to reducing, preventing, and treating obesity through education, advocacy, and data services. Their website reflects a mature digital presence with comprehensive resources, training programs like SCOPE, and a global membership network. The organization targets healthcare professionals, researchers, policymakers, and individuals with lived experience of obesity, positioning itself as a leader in the healthcare and non-profit sectors. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Pardot marketing automation, built likely on the ExpressionEngine CMS. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. Performance is moderate with good SEO and accessibility features. From a security perspective, the site uses HTTPS and secure forms with CSRF tokens, but lacks explicit security headers and a public security policy or incident response information. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and safe for general audiences. The lack of WHOIS data due to privacy protection is justified for this type of organization. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

L

Liwlig Conference AS

gyroconference.no

62

Liwlig Conference AS is a Nordic leader in event and conference planning, delivering memorable and impactful experiences across Norway and the broader Nordic region. As part of the Liwlig Group, the company leverages local expertise and a strong network to provide comprehensive event services including budgeting, participant management, hotel booking, transport, and project management. Their website reflects a professional and consistent brand image, targeting corporate clients and event organizers. Technically, the site is built on WordPress with modern frameworks like UIkit and integrates Google Analytics and Ads for marketing and tracking purposes. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data due to privacy protection is common and does not detract significantly from the site's legitimacy. Overall, the website is well-designed, user-friendly, and compliant with GDPR, supporting the company's credible market position.

L

Liwlig Conference AS

liwligconference.no

61

Liwlig Conference AS is a Nordic event management and experience agency specializing in planning and executing national and international conferences and events. As part of the Liwlig Group, it leverages local expertise across Nordic countries to deliver memorable experiences that strengthen relationships, cultures, and brands. The company positions itself as the largest and only experience agency in the Nordics, serving a broad range of clients with services including budget control, participant services, hotel booking, transport, exhibition, and project management. The website reflects a professional and consistent brand image with clear contact information and environmental certification, supporting its market credibility. Technically, the website is built on WordPress with the Yootheme theme and uses modern web technologies such as UIkit, SVG animations, and integrates Google Analytics and Google Ads for marketing and tracking. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. The absence of WHOIS data limits full domain trust analysis, but the website's content quality, certifications, and contact transparency support legitimacy. No signs of malicious activity or adult content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, Liwlig Conference presents a credible and professional digital presence suitable for its business domain.

O

Oriental Motor U.S.A. Corp.

orientalmotor.com

64

Oriental Motor U.S.A. Corp. operates as a manufacturer specializing in motion control products, targeting industrial and manufacturing sectors requiring motors and automation solutions. The website presents a professional and consistent brand image, integrating modern marketing and analytics tools such as HubSpot and Google Analytics. The technical infrastructure is based on standard web technologies with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, though security headers and incident response information are lacking. Privacy and cookie policies are not evident in the provided content, indicating room for compliance improvement. The absence of WHOIS data limits domain legitimacy verification, but the website's professional presentation suggests a legitimate business presence.

HugeDomains operates as a specialized domain marketplace offering premium domain names for sale, including SpinRobotics.com. The business model focuses on direct domain sales with options for immediate purchase or payment plans, supported by a 30-day money back guarantee and quick domain delivery. The website targets individuals and businesses seeking valuable domain assets, positioning itself as a trusted reseller with a history dating back to 2005. Technically, the site employs modern web technologies including jQuery, Google Analytics, and Google reCAPTCHA Enterprise, ensuring a secure and user-friendly experience. The presence of cookie consent mechanisms and privacy policies indicates attention to privacy compliance. Security posture is solid with HTTPS enforced and SSL encryption, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the site is professional, trustworthy, and well-optimized for its e-commerce purpose.

D

Deutsche Gesellschaft für Gastroenterologie, Verdauungs- und Stoffwechselkrankheiten (DGVS) and Deutsche Gesellschaft für Allgemein- und Viszeralchirurgie (DGAV)

viszeralmedizin.com

50

The website www.viszeralmedizin.com represents a professional congress platform for the Viszeralmedizin 2025 event, organized by reputable German medical societies DGVS and DGAV. It serves as a comprehensive resource for medical professionals specializing in gastroenterology and visceral surgery, offering detailed program information, registration, and participation services. The site is well-branded, content-rich, and targets a specialized audience with a focus on education and networking. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile responsiveness, and SEO optimization. Security posture is solid with HTTPS, cookie consent, and secure login forms, although explicit security headers and incident response information are lacking. The absence of WHOIS data is a notable anomaly that warrants further verification but does not detract from the site's professional appearance and trustworthiness. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

G

GIG Karasek GmbH

gigkarasek.at

48

GIG Karasek GmbH is an Austrian-based industrial plant construction company specializing in thermal separation and environmental technologies. The company operates globally and offers a range of services including engineering, production, and technical center support. Their market position is that of a specialized medium-sized enterprise with a strong focus on innovation and quality. The website is built on the HubSpot CMS platform, leveraging modern web technologies and marketing tools, providing a professional and user-friendly experience. Security posture is solid with HTTPS and consent mechanisms in place, though some security headers and policies could be improved. The absence of WHOIS data reduces domain trustworthiness slightly, but the overall business credibility remains high based on website content and branding.

B

BFT GmbH

bft-pumps.com

38

BFT GmbH is an Austrian owner-managed company specializing in manufacturing and supplying high-pressure pumps and accessories for waterjet cutting technology. Positioned as the only independent global supplier in this niche, BFT offers innovative ready-to-use solutions and emphasizes quality, sustainability, and customer service. The website reflects a professional industrial business targeting companies requiring advanced waterjet cutting equipment. Technically, the site is built on WordPress with modern plugins and tracking technologies, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though lacks some advanced security headers and explicit incident response information. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. The domain WHOIS data is missing, which raises some legitimacy concerns, but the business references and content support authenticity. Overall, the site is trustworthy with room for security and compliance improvements.

L

LANACO

techhosted.ba

58

TechHosted is a well-established annual IT conference organized by LANACO, a prominent technology company in Bosnia and Herzegovina. The conference serves as a key platform for IT professionals, business leaders, and students to connect, share knowledge, and explore innovative technologies. With a decade-long history, TechHosted has positioned itself as a leading event in the regional IT industry, supported by reputable partners and media outlets. The website reflects a professional and modern digital presence with strong branding and clear communication of its services and event details. Technically, the website employs modern web technologies including jQuery, HTML5 video, and SVG graphics, alongside robust analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is optimized for performance, mobile responsiveness, and SEO, providing a smooth user experience. Security practices include HTTPS enforcement and secure form handling, although formal security policies and incident response contacts are not publicly documented. From a security perspective, the site demonstrates good baseline protections with no visible vulnerabilities or exposed sensitive data. Privacy compliance is addressed through a cookie consent banner and a privacy policy page, indicating awareness of GDPR requirements. However, the absence of a published security policy or vulnerability disclosure mechanism suggests room for improvement in transparency and incident readiness. Overall, TechHosted presents a trustworthy and credible online presence aligned with its business objectives. Strategic recommendations include enhancing security documentation, publishing incident response contacts, and implementing additional security headers to further strengthen the security posture and user trust.

L

LANACO

tehnoloskicentar.ba

49

LANACO Tehnološki centar is a prominent technology hub located in Banja Luka, Bosnia and Herzegovina, operated by LANACO, the largest private IT system integrator in the country. The center hosts a Tier 4 standard data center, conference facilities, and an educational center offering IT courses and seminars. The website reflects a professional and consistent brand image targeting businesses and IT professionals in the region. Technically, the site uses modern web technologies including Bootstrap and Google Analytics, with moderate performance and good mobile optimization. Security posture is moderate but lacks visible security headers and published privacy or cookie policies, indicating room for improvement in compliance and security best practices. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is a reliable digital presence for LANACO's technology center but should enhance privacy and security disclosures to improve trust and compliance.

L

LANACO

station-24.com

48

Station24 is a specialized software solution developed by LANACO, targeting the hospitality industry in Bosnia and Herzegovina and surrounding regions. The platform offers comprehensive modules for order management, administration, kitchen display, and loyalty programs, aiming to streamline restaurant and cafe operations. The website presents a professional image with detailed product descriptions, client testimonials, and partner logos, reflecting a medium-sized business with a solid regional presence. Technically, the site employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3, ensuring functional and secure user interactions. Security posture is generally good with HTTPS enforced and spam protection on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, though terms of service and security policies are absent. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.

L

Lanaco

eduisonline.com

51

Eduis, operated by Lanaco, offers a comprehensive cloud-based school management system tailored for K12 and higher education institutions. The platform supports over 500,000 users worldwide and integrates with Microsoft Office 365 to enhance educational workflows. The website demonstrates a mature digital presence with professional design, clear navigation, and relevant content targeting educational stakeholders including school staff, parents, and students. Technically, the site uses modern JavaScript libraries and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enabled and cookie consent implemented, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is addressed with a clear privacy policy and cookie banner, supporting GDPR requirements. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business.

L

LANACO

ecoone.ba

47

EcoOne.ba is a professional business software website offering cloud-based ERP and accounting solutions primarily targeting small and medium enterprises in Bosnia and Herzegovina. The platform emphasizes accessibility, security, and ease of use, providing multiple packages tailored to different business needs. The website is well-structured, uses modern web technologies, and includes essential privacy and cookie policies, reflecting a mature digital presence. Security posture is adequate with HTTPS and data center security claims, though explicit security headers and incident response policies are not publicly documented. Overall, the site presents a trustworthy and professional image suitable for its target market.

Q

QZ-online

qz-online.de

62

QZ-online is a specialized German-language online portal dedicated to quality management and quality assurance. It serves professionals and experts in the manufacturing and technology sectors by providing industry news, expert articles, job listings, product announcements, and subscription services for the Fachzeitschrift QZ. The website is positioned as a niche market leader in quality management content within German-speaking regions, supported by a reputable publishing house (Carl Hanser Verlag). The portal targets quality management professionals seeking up-to-date information and expert insights. Technically, the website is built on modern web technologies including React and Next.js, with integrations for cloud-based image hosting (Cloudinary) and multiple analytics and marketing tools such as Google Analytics, LinkedIn Insight Tag, and eTracker. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous loading of scripts to optimize user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It respects user privacy by defaulting to denied consent for tracking cookies and provides a comprehensive privacy policy compliant with GDPR. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, QZ-online presents a professional, trustworthy, and content-rich platform with a solid security posture and privacy compliance. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and enhancing accessibility to further strengthen trust and compliance.

L

LANACO

lanaco.com

59

LANACO is a well-established technology company based in Bosnia and Herzegovina, specializing in innovative software solutions, platforms, data infrastructure, communication systems, cloud services, hosting, and education. The company targets business and technology users in the region, offering a diversified portfolio that positions it as a key player in the local technology market. The website reflects a mature digital presence with professional design, clear navigation, and compliance with privacy regulations including GDPR. Technically, the site is built on WordPress with modern plugins and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of public WHOIS data slightly reduces trust but is offset by consistent branding and active social media engagement. Overall, LANACO presents a credible and professional online presence aligned with its business objectives.

B

Bank Norwegian – en filial av NOBA Bank Group

banknorwegian.no

74

Bank Norwegian is a Norwegian branch of the Swedish NOBA Bank Group, providing a range of financial products including credit cards, consumer loans, refinancing options, savings accounts, and insurance products. The company targets Norwegian consumers seeking accessible and competitive financial services. The website reflects a professional and consistent brand presence with clear product offerings and pricing transparency. Technically, the site leverages modern web technologies such as React and Material-UI, with media assets hosted on Cloudinary and analytics via Google Tag Manager and Google Analytics. The site is mobile-optimized and accessible, with good SEO practices in place. Security posture is strong with HTTPS enforced and cookie consent mechanisms implemented, though explicit security headers and incident response information are not publicly visible. WHOIS data is privacy protected, which is typical and justified for a financial institution. Overall, the website demonstrates a mature digital presence with solid business credibility and compliance.

P

PORR Bau GmbH

porr.at

56

PORR Bau GmbH is a large, well-established Austrian construction company with over 150 years of experience, offering comprehensive construction and engineering services across Austria. The company operates under the parent entity PORR AG and maintains a professional digital presence with a well-structured website powered by TYPO3 CMS. The site features extensive service descriptions, project references, and multiple language options, targeting construction industry clients, investors, and job seekers. Technically, the website employs modern web technologies, including Google Analytics and embedded YouTube videos, with good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers could be added. Privacy compliance is robust, with clear GDPR-aligned policies and cookie management. Overall, the website reflects a high level of professionalism, trustworthiness, and business credibility.

T

TruPhysics GmbH

truphysics.com

55

TruPhysics GmbH operates a specialized platform focused on general purpose robotics, offering a configurator that integrates over 100 hardware, electronics, and software modules. The company targets businesses and developers in the robotics and automation sectors, positioning itself as a niche technology provider with a professional and consistent online presence. The website is built on WordPress with modern plugins and includes essential privacy and cookie policies, indicating a mature approach to compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy and age, which should be further investigated. Technically, the site employs standard technologies and tracking tools like Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and explicit incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced transparency regarding domain registration and security policies.

The website 'Meldestelle Neuenhauser' serves as an internal whistleblowing and compliance reporting portal for the Neuenhauser Gruppe Holding SE & Co. KGaA, a medium-sized German corporate group. It provides channels for employees and stakeholders to report legal and compliance violations, particularly related to human rights and environmental obligations in the supply chain. The site emphasizes confidentiality, protection of whistleblowers, and legal compliance, reflecting a mature compliance culture. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and Font Awesome for UI, and integrates Google Analytics with IP anonymization for visitor statistics. The site is mobile-optimized and includes a comprehensive cookie consent mechanism in German, supporting GDPR compliance. Hosting is via domaincontrol.com nameservers, indicating a commercial hosting provider. From a security perspective, HTTPS is enforced and cookie consent is implemented properly. However, no advanced security headers or explicit security policies are published, and no incident response or vulnerability disclosure information is available. The site does not expose sensitive data and appears free of vulnerabilities in the visible content. Overall, the security posture is good but could be enhanced with additional headers and transparency. The overall risk profile is low with a trustworthy business presence and professional content. Strategic recommendations include adding explicit security policies, incident response contacts, and a security.txt file to improve transparency and readiness. The site is suitable for its compliance-focused audience and maintains good privacy standards.

Neuenhauser Maschinenbau GmbH is a medium-sized manufacturing company based in Germany, focusing on providing career opportunities across various segments including apprenticeships, direct employment, internships, and support for career changers. The website serves as a professional career portal emphasizing a family-like work environment, modern workplaces, and employee development. The company holds recognized certifications such as the IHK AusbildungsSiegel, enhancing its credibility in vocational training. Technically, the website is built on TYPO3 CMS, employs modern front-end libraries like Font Awesome and Slick Slider, and integrates Google Analytics with IP anonymization to balance analytics needs with privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the website is well-designed, mobile-optimized, and provides clear navigation and contact information, supporting a high level of trustworthiness and professionalism.

G

GERDAU AÇOS LONGOS S.A.

gerdau.com.br

64

Gerdau Brasil is a well-established steel manufacturing company operating primarily in Brazil, specializing in long steel products. The company has a strong market presence as indicated by its long domain registration since 1995 and consistent corporate branding. The website reflects a professional and industrial focus, targeting business clients in construction and manufacturing sectors. The digital infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, integrated with a consent management platform to ensure privacy compliance. Security posture is solid with HTTPS enforced and no evident vulnerabilities, although some security headers could be improved. Overall, the website demonstrates a mature digital presence aligned with corporate standards and regulatory compliance.

C

CBMM

cbmm.com

74

CBMM is a leading supplier and technology partner specializing in niobium products, primarily serving the energy and structural sectors. Established in 2004, the company has a strong market position supported by a professionally designed website that highlights its expertise and product offerings. The website targets industrial and technology sectors interested in leveraging niobium's benefits. Technically, the site uses a modern tech stack including Google Tag Manager, OneTrust for cookie consent, and analytics tools such as Hotjar and LinkedIn Insight, hosted on Azure DNS with Sitecore CMS. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and safe for general audiences.

Royal Bank of Canada (RBC) is a leading global financial institution headquartered in Canada, offering a broad spectrum of financial services including personal and commercial banking, wealth management, capital markets, insurance, and investor services. The website reflects RBC's strong market position as one of the largest banks in Canada and globally by market capitalization, targeting a diverse audience from individual consumers to multinational corporations and governments. The site content is professionally presented with consistent branding and clear navigation, supporting RBC's corporate image and business objectives. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools such as Google Tag Manager, Bing Ads, and Conductrics. The site is mobile optimized and accessible, with good SEO practices and performance. Privacy and cookie policies are present with a consent mechanism, indicating compliance with GDPR and other privacy regulations. However, no explicit security policy or incident response information is publicly available. From a security perspective, the site uses HTTPS and employs best practices such as controlled script loading and consent management. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration transparency but is likely due to registry restrictions or privacy protection common for large enterprises. Overall, the security posture is strong but could be improved by publishing security policies and vulnerability disclosure information. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with privacy standards. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and establishing a vulnerability disclosure program to further strengthen trust and security culture.

H

hefraTEC GmbH

hefratec.de

51

hefraTEC GmbH is a specialized telecommunications company based in Germany, focusing on wireless communication solutions such as Richtfunk (microwave radio links), WLAN, and carrier services. The company offers end-to-end services including consulting, planning, installation, and maintenance, targeting businesses and organizations requiring reliable and high-availability communication infrastructure. The website presents a professional image with detailed service descriptions, customer testimonials, and partnerships with reputable technology vendors, positioning hefraTEC as a trusted regional and international system integrator in the telecommunications sector. Technically, the website is built on WordPress CMS, utilizing modern technologies such as jQuery and Bootstrap, and integrates Google Analytics for visitor tracking alongside a GDPR-compliant cookie consent mechanism powered by consentmanager.net. The site is mobile-optimized with good SEO practices and basic accessibility features, providing a positive user experience. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and anonymizes IP addresses in analytics, employs a cookie consent banner, and avoids exposing sensitive data. However, it lacks visible security headers and does not publish explicit security or incident response policies, which could be improved to enhance trust and compliance. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear consistent and professional. Overall, hefraTEC GmbH's website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security transparency and domain registration verification are recommended to strengthen trust and reduce risk.

T

Tramino

tramino.de

57

Tramino is a small German technology company specializing in web-based software solutions for the tourism industry. Founded in 2008 and based in Oberstdorf, Germany, the company offers a broad portfolio of products including content management systems, reservation and hotel management software, digital signage, customer loyalty programs, and event booking systems. Their market position is that of a regional specialist with a strong focus on tourism-related digital services. The website is professionally designed, mobile-optimized, and provides clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern JavaScript libraries and asynchronous loading to ensure good performance and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers and explicit security policies are missing. Overall, the website and business present a trustworthy and professional image suitable for their target audience.