Security Directory

T

Teamio

teamio.com

53

Teamio is a leading Czech recruitment and talent management SaaS platform serving over 1000 companies. It offers a modern ATS system that streamlines recruitment processes, automates communication, and helps build talent databases. The website is professionally designed, mobile-optimized, and provides comprehensive information about the product, client testimonials, and company background. Technically, it is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and analytics for performance and marketing insights. Security posture is strong with HTTPS, security headers, and GDPR compliance, although no explicit vulnerability disclosure or incident response contacts are published. The WHOIS data for the subdomain cz.teamio.com is unavailable, likely because it is a subdomain of the main teamio.com domain owned by Alma Career, a reputable HR services provider. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

A

Arnold Robot

arnold-robot.com

58

Arnold Robot is a technology company offering a chatbot platform designed to enhance employee engagement and feedback collection through conversational surveys. The website presents a professional and well-structured digital presence, leveraging WordPress with modern plugins such as Elementor and Yoast SEO, indicating a mature digital infrastructure. The platform targets companies and HR teams aiming to improve workplace communication and employee satisfaction. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are not evident. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the overall legitimacy given the association with the established parent company Alma Career. Strategic recommendations include enhancing security headers, publishing incident response information, and providing clearer direct contact details to improve trust and compliance.

N

Nelisa s.r.o.

nelisa.com

61

Nelisa s.r.o. operates a SaaS platform specializing in recruitment campaign automation, leveraging programmatic job advertising to connect companies with the right candidates efficiently. Positioned as a leading solution with over 700 satisfied companies, Nelisa offers multi-channel job ad distribution, copywriting services, and detailed reporting to optimize recruitment efforts. The company is part of the Alma Career family, indicating a strong market presence in Central Europe. Technically, the website employs modern frameworks such as Vue.js and Tailwind CSS, hosted on DigitalOcean, with extensive use of analytics and marketing tools including Google Tag Manager, TikTok Analytics, and Piwik PRO. Security posture is solid with HTTPS enforced and secure script handling, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Nelisa presents a professional, trustworthy, and technically mature digital presence.

A

Atmoskop.cz

atmoskop.cz

66

Atmoskop.cz is a Czech online platform specializing in employee reviews of companies and job offers, providing authentic insights into workplace environments. It is part of the Alma Career group, a reputable entity in the Central European job market. The website offers a user-friendly, modern interface with comprehensive content aimed at job seekers and employees looking to evaluate potential employers. Technically, the site employs modern frameworks such as Next.js and React, integrates Google Tag Manager and Google Identity Services for analytics and authentication, and demonstrates good performance and mobile optimization. Security-wise, the site enforces HTTPS, includes standard security headers, and shows no signs of vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear GDPR-aligned policies and cookie consent mechanisms. However, WHOIS data for the domain is unavailable, which slightly impacts trust but is mitigated by the professional presentation and corporate affiliation. Overall, Atmoskop.cz presents a secure, trustworthy, and well-maintained platform for employment-related services.

A

Alma Career

pracezarohem.cz

61

Práce za Rohem is a Czech job search platform focused on helping users find employment opportunities close to their homes, reducing commuting time. It is part of the Alma Career family, a reputable network of job portals in Central Europe. The platform offers a modern web interface and mobile applications for both job seekers and employers, enhancing accessibility and user engagement. The website features comprehensive privacy and cookie policies, aligning with GDPR requirements, and employs modern web technologies including Next.js and Google Tag Manager for analytics and marketing. Technically, the site is well-structured with good mobile optimization and security practices such as HTTPS enforcement and security headers. However, the absence of WHOIS registration data is a notable transparency concern. No direct company contact emails or phone numbers are publicly visible, which may affect user trust. User testimonials and the affiliation with Alma Career provide strong trust signals. Security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is good, with clear policies and consent mechanisms. Overall, the site presents a professional and trustworthy platform for job search in the Czech Republic, though improvements in domain transparency and contact information disclosure are recommended. Strategic recommendations include enhancing domain registration transparency, publishing explicit security policies and incident response contacts, and improving accessibility features to broaden user inclusivity.

A

Alma Career Oy

pracazarohom.sk

62

Práca za Rohom is a Slovak job portal focused on helping users find employment opportunities close to their homes, reducing commuting time. It is part of the Alma Career group, a well-established player in the Central European online career market. The website offers a modern, mobile-optimized platform with a strong emphasis on user experience, including a mobile app for instant job alerts and easy application processes. The business targets job seekers in Slovakia, providing localized job listings and career advice.

A

Alma Career Oy

prace.cz

60

Prace.cz is a prominent Czech job portal offering a comprehensive and up-to-date listing of job opportunities across the Czech Republic and abroad. It is part of the Alma Career group, a well-established entity in the Central European recruitment and career services market. The platform targets job seekers and employers, providing search functionalities by profession, location, and employment type, along with advisory content to assist users in their job search journey. The website demonstrates a professional design and consistent branding aligned with its parent company.

P

Profesia, spol. s r. o.

profesia.cz

61

Profesia.cz is a leading Czech job portal operated by Profesia, spol. s r. o., affiliated with the Alma Career group. The website offers comprehensive job listings, CV creation tools, career advice, salary comparisons, and online courses, targeting job seekers and employers primarily in the Czech Republic. The site is professionally designed, mobile-optimized, and provides a rich user experience with clear navigation and relevant content. Technically, it employs modern web technologies including Vue.js, Bootstrap, and integrates analytics and advertising tools such as Google Tag Manager and Microsoft Clarity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with GDPR-aligned policies and transparent cookie management. The absence of WHOIS data limits domain registration trust analysis, but the website's affiliation with Alma Career and professional presentation support its legitimacy. Overall, Profesia.cz represents a mature, trustworthy online employment platform with good technical and security standards.

P

Profesia, spol. s r. o.

profesia.sk

63

Profesia.sk is a leading Slovak online job portal operated by Profesia, spol. s r. o., a subsidiary of Alma Career Oy. The platform offers comprehensive job listings, CV creation tools, career advice, salary comparison, and multimedia content such as podcasts and blogs, targeting job seekers and employers primarily in Slovakia and the surrounding region. The website demonstrates a strong market position supported by a broad network of partner and subsidiary sites across Central Europe and the Baltics. Technically, the site employs modern web technologies including Vue.js, Bootstrap, and multiple analytics and tracking tools, ensuring a responsive and user-friendly experience across devices. Security-wise, the site enforces HTTPS, uses standard security headers, and implements cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, Profesia.sk presents a professional, trustworthy, and well-maintained digital presence with good compliance to privacy regulations and a solid business credibility profile.

J

Jobs.cz

jobs.cz

61

Jobs.cz is a leading Czech online job portal offering a comprehensive platform for job seekers and employers. It provides extensive job listings, temporary job opportunities, career advice, employer profiles, and educational courses through partnerships such as Seduo.cz. The website is professionally designed, mobile-optimized, and features strong branding consistent with its parent company Alma Career. The platform targets primarily Czech job seekers and employers, positioning itself as a market leader in the Czech Republic's employment sector. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and Bing Ads SDK, ensuring a moderate to fast performance with good SEO and accessibility features. Security posture is solid with HTTPS enforced and privacy policies in place, though security headers could be improved. The absence of WHOIS data reduces transparency but is likely due to registry policies. Overall, Jobs.cz demonstrates a mature digital presence with strong business credibility and compliance with GDPR.

A

Alma Career

almacareer.com

68

Alma Career is a leading recruitment services provider operating across multiple European regions including the Adriatic, Central Europe, the Baltics, and Finland. The company offers a broad portfolio of HR and recruitment solutions such as job postings, CV databases, salary and HR data, employer branding, applicant tracking systems, online education, employee satisfaction tools, and recruitment services. Their platform attracts over 5 million visits monthly and connects a network of over 70 million people, positioning them as a market leader in their sector. Technically, the website is built on a modern stack using Next.js and React, ensuring fast performance and excellent mobile optimization. The site employs Google Tag Manager and Google Analytics for tracking and marketing purposes, with appropriate privacy and cookie policies in place that include consent mechanisms. The website demonstrates good SEO and accessibility practices, contributing to a professional and user-friendly experience. From a security perspective, the site enforces HTTPS and includes multiple security headers, reflecting a strong security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and readiness. The WHOIS data is unavailable, which slightly impacts trust but does not detract from the overall legitimacy based on website content and business presence. Overall, Alma Career presents a professional, secure, and well-structured online presence suitable for its business model. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure information, and verifying domain registration details to improve trust and compliance.

A

Alma Career Croatia d.o.o.

mojposao.hr

60

MojPosao.hr is a leading Croatian online job portal operated by Alma Career Croatia d.o.o., offering a comprehensive platform for job seekers and employers. The website provides extensive job listings, employer profiles, salary calculators, and career advice, positioning itself as a key player in the Croatian employment market. The site is part of the Alma Career family, which operates multiple regional job portals, enhancing its market reach and credibility. Technically, the website leverages modern frameworks such as Vue.js and Nuxt.js, ensuring a responsive and performant user experience across devices. Integration with major analytics and marketing tools like Google Analytics and Facebook SDK supports data-driven decision-making and targeted advertising. Security-wise, the site enforces HTTPS, employs standard security headers, and implements cookie consent mechanisms, reflecting a mature security posture. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, MojPosao.hr demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable platform for employment services in Croatia.

H

HubChannel

hubchannel.com.br

64

HubChannel is a Brazilian startup specializing in digital content publication and monetization, targeting media companies and content creators. The platform offers a hub of solutions designed to help media vehicles and creators manage and monetize their digital content effectively. Positioned as a startup, HubChannel leverages modern web technologies and SEO best practices to establish its online presence. The website is built on WordPress with integrations such as Yoast SEO, Elementor, and Google marketing tools, indicating a mature digital infrastructure for a small-sized company. Technically, the website employs a modern tech stack including WordPress CMS, Bootstrap framework, jQuery, and FontAwesome icons, hosted behind Cloudflare DNS services. The site is mobile-optimized and uses structured data for enhanced SEO and social media integration. Google Analytics and Google Tag Manager are actively used for user tracking and marketing analytics, complemented by a Leadster chatbot for customer engagement. From a security perspective, the site uses HTTPS with a good SSL configuration and includes Google reCAPTCHA scripts to protect forms. However, it lacks explicit security headers and published security or incident response policies. No privacy or cookie policies were detected, which is a compliance gap especially under GDPR. The WHOIS data is consistent with the website's claims, showing no privacy protection or suspicious registration patterns, supporting the legitimacy of the domain. Overall, HubChannel presents a professional and functional website with good technical and business credibility but needs to improve privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process to enhance trust and compliance.

<

<IT>rockt!

itrockt.ch

56

The website www.itrockt.ch represents <IT>rockt!, a regional ICT cluster and job platform focused on the Ostschweiz region of Switzerland. It provides a skill-based job matching service, event listings, courses, and networking opportunities for ICT professionals and job seekers. The platform positions itself as a key regional player facilitating digital transformation and workforce development in the ICT sector. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Borlabs Cookie for consent management, and Google Analytics for tracking. It employs reCAPTCHA for form security and Google Tag Manager for marketing and analytics integration. The site is mobile optimized and has good SEO practices implemented. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner, indicating GDPR awareness. Business credibility is supported by consistent branding, active social media presence, and transparent event and partner information. Overall, the website is professional, trustworthy, and well-maintained, serving its target audience effectively.

B

be-digital

be-digital-basel.ch

51

be-digital is a regional platform focused on promoting digital entrepreneurship and competence in the Basel area, primarily targeting SMEs and the local ICT sector. The platform offers services such as AI-focused initiatives, cybersecurity checklists, ICT provider directories, and community events to support digital transformation. The website is built on TYPO3 CMS and integrates modern tracking and analytics tools, reflecting a moderate to good level of digital maturity. Security posture is strong with HTTPS and security headers implemented, though privacy compliance could be improved by adding cookie consent mechanisms and clearer security policies. Overall, the site presents a professional and trustworthy image with strong regional partnerships and community engagement.

I

ICT-Berufsbildung Schweiz

ict-berufsbildung.ch

55

ICT-Berufsbildung Schweiz is a national organization dedicated to vocational education and training in the ICT sector within Switzerland. It serves as the official body representing the ICT professional field, focusing on workforce development and industry standards. The website reflects a medium-sized organization with a clear focus on technology education and professional development. The digital infrastructure employs common web technologies such as jQuery, Google Tag Manager, and Microsoft Clarity for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and uses lazy loading for images to enhance performance. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the website is professional and trustworthy, with no signs of malicious content or blocking mechanisms.

S

spm

spm.ch

55

The Swiss Project Management Association (spm) operates as the leading professional association for project management experts in Switzerland. It offers membership services, internationally recognized IPMA certifications, educational events, and a platform for professional exchange. The website is well-structured, professionally designed, and targets project management professionals within Switzerland. The organization has a strong market position as a key facilitator of project management knowledge and networking in the region. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Tag Manager. It integrates security features like HTTPS and Google reCAPTCHA for form protection. The site is mobile-optimized and accessible, with good performance and SEO practices. However, some security best practices such as security headers and explicit incident response policies are missing. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and a published security policy or vulnerability disclosure mechanism. Privacy compliance is partially addressed with a comprehensive privacy policy, but no cookie consent mechanism is evident. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance trust and compliance.

D

Digitalswitzerland

digitalswitzerland.com

58

Digitalswitzerland is a Swiss non-profit umbrella organisation dedicated to advancing digital transformation across Switzerland by uniting business, science, civil society, and government sectors. It holds a leading market position with over 160 member organisations and offers services including digital initiatives, cross-sector collaboration, education, policy advocacy, and digital health programs. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools, maintaining good performance and mobile optimization. Security posture is strong with HTTPS, Content Security Policy, and reCAPTCHA protections, though some security headers could be enhanced and DNSSEC enabled. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, with no critical vulnerabilities or suspicious indicators detected.

S

SEWOBE GmbH

sewobe.de

62

SEWOBE GmbH is a German-based technology company specializing in providing online software solutions for member organizations, such as associations and clubs. Their SaaS platform focuses on membership management and digital transformation, targeting German-speaking markets. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to their niche audience. The company maintains a consistent brand presence and offers multiple contact channels including email, phone, and contact forms. Privacy and cookie policies are comprehensive and GDPR-compliant, reflecting a mature approach to data protection. Technically, the website is built on WordPress with modern tools such as Yoast SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting appears to be with 1&1 IONOS, supported by stable DNS infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is strong with HTTPS enforced and multiple security headers present, although no explicit security policy or incident response information is published. No vulnerabilities or suspicious domains were detected. Overall, SEWOBE demonstrates a solid digital maturity with a secure and compliant web presence. The absence of a public security policy and vulnerability disclosure are areas for improvement. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The website content is safe for general audiences and free from adult or questionable material.

Curator.io is a technology company operating a free social media aggregation platform that enables users to collect and display social media content easily. The company, Digital Privacy Corporation, founded in 2013 and based in the US, targets businesses and individuals seeking to enhance their websites with social media feeds. The platform is positioned as an easy-to-use, free service with a modern web presence and notable client logos displayed, indicating a solid market position. Technically, the website is built using modern frameworks such as Next.js and React, hosted on AWS infrastructure, and employs common marketing and analytics tools like Google Tag Manager and LinkedIn Insight. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security practices include HTTPS enforcement and domain transfer protections, but DNSSEC is not enabled, and some security headers are missing. From a security perspective, the site shows a good baseline posture with no critical vulnerabilities detected. However, the absence of explicit privacy and cookie policies, as well as lack of incident response contacts and security.txt, indicates gaps in compliance and transparency. Tracking scripts are present, suggesting moderate user tracking without clear data retention disclosures. Overall, Curator.io presents a trustworthy and professional online presence with room for improvement in privacy compliance and security hardening. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear incident response information to enhance trust and compliance.

W

Woman.Comm Club

womancomm.club

49

Woman.Comm Club is a regional platform dedicated to empowering women in the communications industry through education, networking, and events. Founded in 2022, it targets successful business women and young professionals in the communications sector within the region. The platform offers mentorship programs, conferences, awards, podcasts, and webinars to foster professional growth and industry advancement. Technically, the website is built on WordPress with Elementor and WooCommerce, hosted with GoDaddy and using Cloudflare DNS services. The site demonstrates good SEO practices and mobile optimization but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS and some security headers, but DNSSEC is not enabled and no incident response or security policies are published. Overall, the platform is credible and professionally presented but would benefit from enhanced privacy and security disclosures.

T

Telegraf.rs - Najnovije vesti

telegraf.rs

67

Telegraf.rs is a well-established Serbian online news portal founded in 2011, offering a wide range of news content including politics, business, sports, culture, technology, and lifestyle. It targets a general audience in Serbia and the surrounding region, operating primarily on an advertising-supported business model. The website demonstrates consistent branding and good content quality with a professional design and clear navigation structure. Technically, it employs modern JavaScript libraries, Google Tag Manager, and multiple analytics and advertising platforms, indicating a mature digital infrastructure. Mobile optimization is good, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and implements a GDPR-compliant cookie consent mechanism. However, it lacks DNSSEC for DNS security and does not publish explicit security policies or incident response contacts. No security blocking mechanisms or WAF challenges were detected, and no critical vulnerabilities were found in the visible content. Privacy compliance is basic, with room for improvement in publishing privacy policies and terms of service. Overall, Telegraf.rs presents a moderate risk profile with a solid business presence and technical foundation but could enhance its security posture and privacy transparency. Strategic recommendations include enabling DNSSEC, publishing security and privacy policies, and improving accessibility compliance.

M

Metropolis Media

metropolis-media.me

36

Metropolis Media is a well-established outdoor advertising company based in Montenegro, operating since 2001 with a domain registered since 2010. The company offers a wide range of advertising services including traditional billboards, backlights, city lights, bigboards, megaboards, and modern digital LED displays. Their extensive network covers major cities and transit points in Montenegro, targeting advertisers seeking broad and effective outdoor media exposure. The website demonstrates a solid technical infrastructure with modern web technologies, multimedia integration via YouTube, and standard analytics tools such as Google Analytics and Tag Manager. Mobile optimization and user experience are good, supporting accessibility and navigation. However, the site lacks privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. WHOIS data confirms legitimacy and consistency with the business claims. Overall, the website is professional and trustworthy but could improve in privacy compliance and security hardening.

M

Media Marketing

media-marketing.com

61

Media Marketing is an online media publishing platform focused on delivering the latest news, interviews, and insights related to media, communications, marketing, and advertising across Bosnia and Herzegovina and the broader Adriatic region. The website positions itself as a leading source of industry news for marketing professionals and stakeholders in the region. Technically, the site is built on WordPress with modern web technologies including jQuery, Google Tag Manager, and OneSignal for push notifications. The site is mobile optimized and employs caching plugins to enhance performance. Security-wise, the site enforces HTTPS and uses some security-related scripts, but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is unavailable, which reduces transparency and trust, though the active and professional web presence suggests legitimate operation. Overall, the site is a valuable resource for its target audience but should enhance its privacy disclosures and security posture to improve trust and compliance.

Go2Digital is a Croatian digital outdoor advertising company offering measurable advertising solutions with a significant daily reach. The company positions itself as a leading media provider in Croatia's outdoor advertising market, emphasizing effectiveness and digital innovation. The website reflects a professional business presence with clear contact information and active social media channels. Technically, the site uses modern analytics and tracking tools such as Google Analytics and LinkedIn Insight Tag, and employs standard web technologies including HTML5 video and Google Fonts. However, the site lacks publicly accessible privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS usage and CSRF protections in forms, but missing explicit security headers and incident response information. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security transparency.

D

Dnevnik Mediji d.o.o.

dnevnik.si

57

Dnevnik.si is a well-established Slovenian news media website operated by Dnevnik Mediji d.o.o., providing a broad range of news, opinion, cultural, and sports content targeted at the general Slovenian public. The website operates on an advertising-supported model with subscription options, leveraging multiple ad networks and tracking technologies to monetize content. Technically, the site uses modern tracking and advertising frameworks including Google Tag Manager, DoubleClick, Marfeel SDK, and DotMetrics analytics, indicating a mature digital infrastructure. The site is mobile optimized and employs HTTPS with appropriate caching headers, contributing to a secure and performant user experience. However, explicit privacy and terms of service pages were not found in the provided content, which is a gap in privacy compliance. The site includes a consent management platform for cookie and data processing consent, aligning with GDPR requirements to some extent. Overall, the security posture is good with no visible vulnerabilities or blocking mechanisms detected. The domain is long-standing and registered to a Slovenian registrar consistent with the business, supporting legitimacy. Strategic recommendations include publishing clear privacy and security policies, adding vulnerability disclosure information, and improving contact information visibility to enhance trust and compliance.

C

CRNOBELO.com

crnobelo.com

49

CRNOBELO.com is a Macedonian lifestyle and news portal offering a wide range of content including news, horoscopes, entertainment, recipes, and interviews. The site targets Macedonian-speaking audiences interested in lifestyle and cultural topics. It operates on a Joomla CMS platform with modern web technologies and integrates multiple advertising networks for monetization. The website is professionally designed with good navigation and mobile optimization. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks explicit security policies and cookie consent mechanisms. WHOIS data is unavailable, which raises concerns about domain legitimacy, although the website content and branding appear consistent and trustworthy. Overall, the site is a functional and relevant media portal with room for improvement in privacy compliance and security transparency.

C

cubes d.o.o

bloombergadria.com

62

Bloomberg Adria is a media company focused on delivering multi-platform business news content tailored for Southeast Europe. The website serves as a gateway to country-specific subdomains targeting Serbia, Croatia, Bosnia and Herzegovina, Slovenia, and North Macedonia. The business model centers on news publishing with advertising revenue streams, leveraging the Bloomberg brand under license from Bloomberg L.P. The company is a property of Mtel Swiss SA and uses a custom CMS developed by Cubes d.o.o. The website demonstrates a moderate level of digital maturity with modern JavaScript libraries and tracking technologies integrated for analytics and advertising purposes. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance in the region. Security posture is adequate with HTTPS and domain transfer protections but could be improved by enabling DNSSEC and adding security headers. Overall, the site is professional and trustworthy but requires enhancements in privacy compliance and security best practices to reduce risk and improve user trust.

A

ADLUUX

adluux.com

62

The website 'ADLUUX' appears to be a small-scale business or service entity established around 2019, as indicated by the domain registration date. The site uses modern web technologies such as Bootstrap 4 for styling and Google Analytics for visitor tracking, hosted under Amazon Registrar, Inc. The content available is minimal and primarily technical, lacking detailed business descriptions, contact information, or privacy and terms policies. The cookie consent mechanism is implemented, indicating some attention to privacy compliance, though no explicit privacy policy is found. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers, which are recommended for enhanced protection. Overall, the site is accessible without WAF or security challenges, but the lack of comprehensive content and contact details limits its business credibility and privacy compliance scores.

Coca-Cola HBC AG is a leading consumer packaged goods company and a strategic bottling partner of The Coca-Cola Company. The company operates across multiple countries primarily in Europe and Africa, offering a broad portfolio of beverages. The website reflects a mature enterprise with extensive market presence, multiple country-specific sites, and a customer portal, indicating a well-established business model focused on bottling and distribution. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and compliance tools such as OneTrust for cookie consent and UserWay for accessibility. The infrastructure appears robust with good performance, mobile optimization, and SEO practices. Hosting is likely via Akamai, enhancing content delivery and security. Security posture is strong with HTTPS enforced, presence of key security headers, and no visible vulnerabilities or exposed sensitive data. The site demonstrates compliance with GDPR and other privacy regulations, supported by comprehensive privacy and cookie policies. However, the absence of a public vulnerability disclosure policy and incident response contact details suggests areas for improvement. Overall, the website and business present a low-risk profile with high trustworthiness. Strategic recommendations include enhancing transparency on security incident response, maintaining up-to-date third-party components, and formalizing vulnerability disclosure processes to further strengthen security and compliance.

L

LEDO plus d.o.o.

ledo.hr

57

LEDO plus d.o.o. is the largest domestic producer of industrial ice cream and the leading distributor of frozen food in Croatia, with a strong market presence and a comprehensive product portfolio. The company targets general consumers in Croatia and surrounding regions, offering a variety of frozen food products and culinary inspiration through recipes. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and Google Tag Manager, hosted likely by Hrvatski Telekom, ensuring good performance and SEO. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained.

U

UNIP

unip.hr

43

UNIP is a Croatian association established in 2022 to promote and protect the rights of publishers of informational publications. It focuses on collective rights management, advocacy, and professional development within the media sector. The website reflects a small but professional organization targeting media publishers and related legal entities in Croatia. Technically, the site is built on WordPress with Elementor, using modern web technologies and SEO best practices. Security posture is solid with HTTPS and cookie consent implemented, though it lacks explicit security policies and headers. Overall, the site is trustworthy and well-aligned with its stated business purpose.

H

Hrvatski Telekom d.d.

kekspay.hr

62

KEKS Pay is a Croatian financial technology service offering a mobile application for fast, no-fee money transfers, bill payments, parking payments, and other financial transactions. Sponsored by Erste Banka and registered under Hrvatski Telekom d.d., the platform targets both individual consumers and business users, providing a convenient and secure payment ecosystem. The website is professionally designed, mobile-optimized, and provides clear information about its services and privacy practices. Technically, it leverages modern JavaScript frameworks (Vue.js, Nuxt.js) and integrates with major app stores for broad platform support. Security practices include encryption, biometric and PIN protection, and compliance with EU standards, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and compliant with GDPR, with a strong market position in Croatia's fintech sector.

L

LAQO by Croatia osiguranje

laqo.hr

64

LAQO by Croatia osiguranje is a pioneering digital insurance provider in Croatia, offering fully digital insurance products including vehicle, property, travel, and pet insurance. The company leverages modern web technologies and a user-friendly mobile app to deliver seamless insurance contracting and claims processes. Positioned as an innovative market player, LAQO targets Croatian residents seeking convenient and cost-effective insurance solutions. The website demonstrates strong digital maturity with Angular framework, Google Tag Manager, and integration of live chat support. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, LAQO presents a trustworthy and professional online presence aligned with its business objectives.

Z

Zavarovalnica Triglav, d.d.

triglav.si

56

Zavarovalnica Triglav, d.d. is a leading Slovenian insurance company offering a broad range of insurance products including vehicle, home, life insurance, and pension savings. The company targets both individual and business customers within Slovenia, leveraging a strong online presence and digital platforms for service delivery. The website reflects a mature business with consistent branding and comprehensive service offerings. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and IBM WebSphere Portal, with integrations for analytics and cookie consent management. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms in place, although explicit security policy and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's market position as a reputable insurer.

P

Privredna banka Zagreb

pbz.hr

64

Privredna banka Zagreb (PBZ) is a well-established Croatian bank founded in 1996, offering a comprehensive range of retail banking services including accounts, cards, loans, savings, and digital banking solutions. The website reflects a mature digital presence with clear navigation, professional design, and detailed product information targeting retail customers in Croatia. The domain age and registration details align with the bank's history and legitimacy, reinforcing trustworthiness. Technically, the site employs modern web technologies, CDNs, and analytics tools such as Google Tag Manager and Google Analytics, ensuring a robust infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies could be enhanced. Overall, the site demonstrates high professionalism, compliance with GDPR, and a strong business credibility profile.

F

Fonoa

fonoa.com

66

Fonoa is a technology company specializing in tax intelligence solutions for innovators and e-businesses managing indirect taxes globally. Their platform offers integrated services including tax ID validation, tax calculation, e-invoicing, and tax return reporting and filing. Positioned as a trusted tax automation platform, Fonoa targets businesses needing to comply with complex and evolving global tax laws. The website reflects a mature digital presence with modern technologies, comprehensive content, and strong branding consistency. The technical infrastructure leverages Webflow CMS, advanced analytics, and multiple marketing and tracking tools, indicating a high level of digital maturity and performance optimization. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, the website presents a professional, trustworthy, and well-maintained digital asset supporting Fonoa's business objectives.

E.ON Hrvatska is a large energy company focused on providing sustainable energy solutions including electricity, gas, solar power, and electric vehicle charging for households and businesses in Croatia. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site uses modern web technologies such as Adobe Experience Manager, Usercentrics for consent management, and integrates multiple marketing and analytics tools while maintaining GDPR compliance. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy and well-positioned to support E.ON's business objectives in the Croatian energy market.

J

Jadran-galenski laboratorij d.d. JGL d.d.

jgl.hr

62

Jadran-galenski laboratorij d.d. (JGL) is a well-established Croatian pharmaceutical company specializing in sterile products for ophthalmology, ENT, and medicines targeting senses and cardiovascular health. The company has a strong market presence in Croatia and operates multiple subsidiaries and partner entities, including pharmacies, specialized labs, and educational portals. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to both general consumers and healthcare professionals. Technically, the site uses modern CMS (eZ Platform), integrates Google Tag Manager and Meta Pixel for analytics and marketing, and is hosted with Cloudflare DNS services, ensuring good performance and security. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not publicly disclosed. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is trustworthy, compliant with GDPR, and professionally managed.

A

Aleph

alephholding.com

65

Aleph is a global digital advertising enabler focused on emerging markets, providing innovative advertising, payment, and technology solutions to empower businesses worldwide. The company holds a strong market position with partnerships across major digital platforms and a presence in over 140 local markets. Their offerings include proprietary technology, credit and payment solutions, and educational programs to foster digital marketing expertise. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and analytics, with good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and consent management, though explicit privacy and terms policies are missing. The absence of WHOIS data reduces domain trustworthiness, but the website content and partnerships indicate a legitimate and professional business. Overall, Aleph demonstrates a mature digital presence with room for improvement in transparency and contact information.

P

PushPushGo

pushpushgo.com

68

PushPushGo is a mature technology company founded in 2016, specializing in multichannel user engagement platforms including web push, mobile push, onsite notifications, and WhatsApp channels. The company positions itself as a GDPR-compliant, feature-rich solution provider targeting businesses seeking to improve customer retention and conversion through personalized messaging. The website demonstrates a high level of professionalism, with comprehensive content, clear navigation, and strong branding consistency. Technically, the site uses modern frameworks and third-party marketing and analytics tools, hosted on reputable infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS enforced and a bug bounty program, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website and business present a trustworthy and professional image suitable for its target market.

G

giosg

giosg.com

76

Giosg is a technology company specializing in flexible digital experience solutions, including AI assistants, live communication tools, and interactive content aimed at automating support and boosting sales. The company targets businesses seeking to enhance customer engagement and lead capture through advanced SaaS offerings. The website is professionally designed, leveraging HubSpot CMS and modern web technologies, with good SEO and mobile optimization. Privacy compliance is well addressed through Cookiebot integration, providing granular cookie consent management. Security posture is strong with HTTPS enforcement and standard security headers, though explicit incident response and vulnerability disclosure information are absent. WHOIS data is unavailable, which slightly impacts trust but does not detract from the professional presentation and legitimate business focus. Overall, Giosg presents a credible and technically mature digital presence with room for improvement in transparency and contact accessibility.

E

Elementor Website Builder

elementor.com

68

Elementor is a leading technology company specializing in WordPress website building solutions. Their platform offers a comprehensive suite of products including a drag-and-drop website builder, AI-powered design tools, hosting services, ecommerce solutions, and accessibility enhancements. The company targets web professionals such as developers, designers, and marketers, positioning itself as a market leader with a strong brand presence and a large enterprise-scale operation founded in 2004. Technically, the website is built on WordPress with Elementor plugins and integrates modern analytics and marketing tools such as Google Tag Manager, Cookiebot for GDPR compliance, and Visual Website Optimizer for A/B testing. The site demonstrates excellent SEO, accessibility, and mobile optimization, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses Cloudflare DNS, and implements cookie consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly visible in the provided content, representing areas for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, Elementor's website is professional, secure, and compliant with privacy regulations to a good extent. The business is credible and well-established with a strong market position. Strategic recommendations include publishing explicit privacy and security policies, providing clear contact information, and adding a security.txt file to enhance transparency and trust.

D

Degordian

degordian.com

60

Degordian is a well-established digital-first agency founded in 2013, specializing in brand communication, performance marketing, digital production, and employer branding. The company operates through multiple specialized agencies focusing on marketing, technology, and HR verticals, positioning itself as a performance-driven partner for businesses aiming to advance digitally. The website reflects a professional and modern digital presence with consistent branding and clear navigation, targeting business clients seeking integrated digital solutions. Technically, the website is built on WordPress and leverages modern web technologies including Google Tag Manager, GSAP for animations, and CleanTalk for anti-spam protection. Hosting and DNS services are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized and accessible, with SEO best practices implemented through Yoast SEO. GDPR compliance is partially addressed with a cookie consent mechanism, though explicit privacy and terms policies are not found. From a security perspective, the site uses HTTPS with a valid SSL certificate and employs anti-spam and cookie compliance plugins. However, it lacks advanced security headers and does not publish a security policy or incident response contacts. DNSSEC is not enabled, which is a recommended improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Degordian's website demonstrates a strong digital maturity and business credibility with room for improvement in privacy transparency and security policy publication. The domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

W

Wicked Reports

wickedreports.com

70

Wicked Reports is a technology company specializing in multi-touch marketing attribution software designed primarily for digital marketing agencies. Their platform offers advanced AI-driven marketing attribution and analytics to help marketers optimize campaigns and understand customer journeys. The website is built on HubSpot CMS and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response details are not publicly available. The absence of WHOIS data introduces a minor trust concern, but overall the site presents a professional and credible business presence.

A

Ant International

ant-intl.com

60

Ant International is a prominent global fintech and digital payment provider headquartered in Singapore, with operations spanning Asia, Europe, the Middle East, and Latin America. The company offers a suite of unified payment platforms and financial services designed to enable inclusive growth for merchants and consumers worldwide. Their portfolio includes brands such as AlipayPlus, Antom, Bettr, and WorldFirst, each targeting specific market needs from cross-border payments to embedded financial services. The website reflects a mature digital presence with a strong emphasis on sustainability, trust, and compliance.

S

Singapore Airlines

singaporeair.com

69

Singapore Airlines operates a comprehensive and professional online platform for booking international flights, targeting a global audience with a focus on Singapore and international travelers. The website demonstrates a mature digital infrastructure leveraging modern technologies such as service workers, CDN delivery via Akamai, and advanced analytics tools. The presence of structured data and social media integration enhances brand visibility and user engagement. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available, representing an area for improvement. The absence of WHOIS data is unusual but does not detract from the overall legitimacy given the brand's global recognition. Strategic recommendations include enhancing transparency around security and compliance, and publishing vulnerability disclosure information.

A

ACMobility - We empower you to move forward

acmobility.ph

63

The website acmobility.ph presents a minimal online presence with very limited content. It appears to be related to the transportation sector, as indicated by the branding and title 'ACMobility - We empower you to move forward'. The site uses modern frontend technologies such as Vuetify and Google Tag Manager for analytics, but lacks substantive business information, contact details, or user engagement features. The absence of privacy, cookie, and terms of service policies indicates low compliance maturity. Security posture is basic with no visible security headers or incident response information, and no forms or input fields to assess input security. Overall, the site is accessible but provides minimal information, limiting trust and business credibility.

T

The Rockefeller Foundation

rockefellerfoundation.org

68

The Rockefeller Foundation is a well-established philanthropic organization dedicated to promoting the well-being of humanity through innovative solutions, partnerships, and grantmaking. With a history dating back to 1913, it holds a strong market position as a global non-profit leader focused on health, food security, energy, economic equity, and innovation. The website reflects a professional and comprehensive digital presence, featuring rich multimedia content, clear navigation, and consistent branding that aligns with its mission. Technically, the site is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, New Relic monitoring, and various analytics tools. It is optimized for performance and mobile responsiveness, with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and use of monitoring tools, though explicit security headers and a public security policy could enhance trust further. Overall, the site demonstrates a mature security and privacy compliance stance, including comprehensive privacy and cookie policies with consent mechanisms. The absence of WHOIS data is attributed to privacy protection, which is justified for this type of organization. No critical vulnerabilities or suspicious indicators were found, supporting a high trustworthiness rating. Strategically, the foundation should consider publishing explicit security policies and vulnerability disclosure information to further enhance transparency and security culture. Continued investment in technical modernization and privacy compliance will support its mission and stakeholder trust.