Security Directory

The website for the Segreteria di Stato per la Giustizia e la Famiglia serves as the official digital presence of San Marino's Secretariat of State for Justice and Family. It provides citizens and stakeholders with access to information on justice policies, family mediation, judicial council activities, and official communications. The site targets local citizens, legal professionals, and government officials, positioning itself as a trusted government information portal. The business model is purely informational and public service-oriented, with no commercial activities. Technically, the site runs on an Apache server with a Magnolia CMS backend, utilizing jQuery and Font Awesome for frontend functionality and styling. While the site is functional and content-rich, it suffers from slow DNS resolution and lacks HTTPS, which is a significant security and trust concern. Mobile optimization and accessibility are basic but present, and SEO practices are minimal. From a security perspective, the absence of a valid SSL certificate and HTTPS is a critical vulnerability, exposing users to potential interception risks. The site lacks modern security headers such as HSTS and does not implement DNS security extensions like DNSSEC or DMARC. No cookie consent mechanisms or privacy compliance features are evident, which may pose regulatory risks under GDPR. However, the site does not appear to collect personal data via forms on the homepage, reducing immediate privacy risks. Overall, the website is a credible and authoritative government resource but requires urgent improvements in security infrastructure and privacy compliance to protect users and maintain trust. Strategic recommendations include implementing HTTPS, enhancing DNS security, adding cookie consent mechanisms, and improving security headers to align with best practices.

D

Detas SpA

detas.com

35

Detas SpA is a mature Italian manufacturing company specializing in electronic devices for industrial automation, LED lighting, traffic signaling, and electric mobility solutions. The company operates multiple specialized divisions and subsidiaries, serving a broad industrial client base. Their website reflects a professional and consistent brand presence with clear business information and certifications such as ISO9001 and ISO14001. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, and uses analytics tools like Hotjar and Plausible Analytics. However, the site suffers from slow load times and lacks a valid SSL certificate, exposing users to security risks. Security posture is weak with no HTTPS, no security headers, and no domain protection locks. Privacy compliance is minimal, with no cookie consent mechanism despite GDPR applicability. Overall, the website is functional and credible but requires urgent security and privacy improvements to protect users and enhance trust.

S

Stichting De Friesland

stichtingdefriesland.nl

40

Stichting De Friesland is a Dutch non-profit foundation focused on supporting innovative healthcare projects that improve the quality of care and life for people. The website presents clear information about their mission, supported projects, and application procedures, targeting healthcare organizations and innovators. The foundation appears to have a solid market position within the regional healthcare sector in the Netherlands, with consistent branding and trust indicators such as ANBI status and links to reputable partners like Achmea. Technically, the website is built on Sitecore CMS with Vue.js and jQuery, hosted likely on Microsoft Azure. However, the site suffers from a lack of a valid SSL certificate and does not support modern TLS protocols, which significantly impacts its security posture. Performance is slow, with a high page load time, and some DNS misconfigurations are present. Privacy compliance is basic but present, with privacy and cookie policies available. Contact information is limited to a contact form, with no direct emails or phone numbers found. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

D

De christelijke zorgverzekeraar

prolife.nl

40

De christelijke zorgverzekeraar is a Dutch health insurance provider focused on integrating Christian values with healthcare services. It operates as part of the larger Zilveren Kruis and Achmea insurance group, offering a range of basic and supplementary insurance products, including dental and mental health care. The website targets the Dutch Christian community, providing comprehensive information, online self-help resources, and customer service support. The company maintains a strong market position with positive customer ratings and active social media engagement. Technically, the website uses modern web technologies including jQuery, Vue.js, and Coveo search integrated with Sitecore CMS. The hosting is managed through Brandshelter DNS services. While the site is well-structured and mobile-optimized with good SEO and accessibility basics, it suffers from critical security shortcomings due to the absence of a valid SSL certificate and disabled TLS protocols, which severely impacts its security posture. Security headers are properly configured, and privacy policies are comprehensive and GDPR compliant, reflecting a mature privacy stance. However, the lack of HTTPS and secure SSL/TLS configuration poses significant risks to user data and trust. The site employs extensive analytics and marketing tools, indicating a high level of user tracking and data collection. Overall, the website is professional and credible from a business perspective but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and enhancing security configurations to meet industry best practices.

Z

Zorgkantoor Friesland

zorgkantoorfriesland.nl

40

Zorgkantoor Friesland is a regional healthcare office responsible for the execution of the Long-term Care Act (Wlz) in Friesland, Netherlands. The organization provides long-term care advice, manages personal budgets (PGB), and coordinates care providers for consumers in the Friesland region. The website is professionally designed, well-structured, and targets consumers seeking long-term care services. It uses modern technologies including Sitecore CMS, Vue.js, and Coveo search integration, indicating a mature digital infrastructure. However, performance metrics are missing and inferred to be slow, suggesting room for optimization. Security posture is weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which is a critical vulnerability for a healthcare-related site. Privacy policies and cookie policies are present and GDPR compliant, but no explicit consent mechanism is detected. Contact information is clear with a phone number and contact form available, enhancing business credibility. Overall, the site is trustworthy but requires urgent security improvements to protect user data and comply with best practices.

S

Surfly

surfly.com

55

Surfly is a technology company specializing in universal co-browsing software that enables real-time web collaboration without requiring code changes or downloads. The platform targets enterprises across industries such as insurance, banking, healthcare, and e-commerce, offering APIs and integrations with major CRM and contact center software. Surfly positions itself as a market leader with over 3,000 organizations using its services, emphasizing ease of integration, security, and compliance. Technically, the website is built on Webflow CMS, uses modern JavaScript libraries like Swiper.js and jQuery, and is hosted behind Cloudflare CDN. The site is well-designed, mobile-optimized, and includes comprehensive privacy and cookie consent mechanisms. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. The company demonstrates strong compliance with ISO 27001, SOC, and HIPAA standards, reinforcing trust for enterprise customers. Overall, the website is professional and credible but requires urgent remediation of SSL issues to ensure secure user interactions.

A

Achmea Pensioenservices

achmeapensioenservices.nl

40

Achmea Pensioenservices is a Dutch pension services provider specializing in pension administration, actuarial, legal advice, and communication services. The company supports pension funds and employers in transitioning to the new Dutch pension system, emphasizing practical and transparent solutions. The website is professionally designed with consistent branding aligned with the Achmea group, targeting pension stakeholders in the Netherlands. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Microsoft Application Insights for analytics. However, the site suffers from a critical security issue: the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Additionally, no security headers or advanced TLS protocols are configured, and the site performance is slow with a load time exceeding 21 seconds. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. Contact information is available via contact pages but lacks explicit emails or phone numbers in the HTML content. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

D

De christelijke zorgverzekeraar

dechristelijkezorgverzekeraar.nl

40

De christelijke zorgverzekeraar is a Dutch health insurance provider focused on integrating Christian values with healthcare services. It operates as part of the larger Zilveren Kruis group, offering basic and supplementary insurance products tailored to its target audience. The website is professionally designed, well-structured, and provides comprehensive information about insurance options, Christian care, and customer services. Technically, the site uses modern technologies including Sitecore CMS, Vue.js, and Coveo search integration, ensuring a good user experience and SEO optimization. However, the security posture is weakened by the absence of a valid SSL/TLS certificate and disabled TLS protocols, which is a critical issue that must be addressed to protect user data and maintain trust. Privacy policies and cookie statements are present and GDPR compliance is indicated, though no explicit consent mechanism was detected. Overall, the site is credible and trustworthy but requires urgent security improvements.

D

De Friesland

defriesland.nl

40

De Friesland is a well-established Dutch health insurance provider offering a range of insurance products including basic, supplementary, dental, and collective insurances. The company targets consumers, employers, and healthcare providers, positioning itself as a large regional insurer under the Achmea group umbrella. The website provides comprehensive information about insurance products, claims, and customer services, supported by a professional design and clear navigation. Technically, the site uses modern technologies such as Vue.js, jQuery, and Coveo Search integrated with Sitecore CMS, hosted likely on Microsoft Azure. However, the website suffers from a critical security issue: the absence of a valid SSL certificate and HTTPS support, which severely impacts its security posture. While email authentication mechanisms like SPF and DMARC are properly configured, the lack of HTTPS exposes users to potential risks. The site includes privacy and cookie policies, and a responsible disclosure page hosted on the parent company’s domain, indicating some security awareness. Overall, the site is professional and trustworthy but urgently needs to address its SSL/TLS configuration to ensure secure user interactions.

Z

Zilveren Kruis

zilverenkruis.nl

40

Zilveren Kruis is a leading Dutch health insurance provider, part of the Achmea group, offering a wide range of insurance products including basic health insurance, supplementary insurance, dental, travel, car, and home insurance. The website targets consumers primarily in the Netherlands and provides comprehensive information and services related to health insurance. Technically, the site is built on Sitecore CMS with modern JavaScript frameworks like Vue.js and jQuery, and integrates Coveo for search functionality. While the site is well-designed, mobile-optimized, and rich in content, it suffers from critical SSL certificate issues that severely impact its security posture. The presence of strong security headers and extensive privacy policies indicates a mature approach to compliance, but the lack of valid HTTPS and modern TLS protocols is a significant risk. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the site. Strategic improvements in SSL configuration and security practices are recommended to enhance trust and security.

C

Cloudflare

cloudflarestatus.com

68

Cloudflare is a leading enterprise technology company specializing in web performance and security services delivered via a global intelligent network. The company provides a broad range of services including CDN, DNS, DDoS protection, serverless computing, and Zero Trust security solutions. Their system status page offers transparent, real-time insights into the operational status of their extensive global infrastructure, reflecting a mature and customer-focused approach to service reliability. The website is well-designed, mobile-optimized, and uses modern technologies such as jQuery and Atlassian Statuspage, hosted on Cloudflare's own infrastructure with strong security headers and HTTPS enforcement. However, some improvements can be made in privacy compliance, such as explicit cookie policies and enhanced HSTS settings. The domain registration data is consistent with the company's identity, showing no signs of suspicious activity or privacy protection that would obscure legitimacy. Overall, Cloudflare demonstrates a strong technical and security posture with clear communication and operational transparency.

F

FORMILYTICS LLC

bdow.com

65

BDOW! (formerly Sumo) is a mature SaaS company specializing in email capture and lead generation tools, offering a variety of pop-ups, forms, and targeting features to help website owners grow their email lists effectively. The platform is well-positioned in the marketing technology space, with a strong user base and integrations with popular marketing tools. The website demonstrates a high level of digital maturity, leveraging modern web technologies such as GSAP animations, jQuery, and integration with analytics and marketing platforms like Google Analytics, Facebook Pixel, and Google Tag Manager. Hosting is managed via WP Engine with Cloudflare CDN and security services, ensuring good performance and availability. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though improvements like enabling HSTS and OCSP stapling would enhance security further. Privacy compliance is basic, with privacy and terms documents hosted externally on Google Docs, and no explicit cookie consent mechanism detected. Contact information is limited to a web form, with no direct emails or phone numbers publicly listed. Overall, BDOW! presents as a professional and trustworthy service with a strong market presence and good technical implementation.

S

Showit, Inc.

showit.com

50

Showit, Inc. operates a specialized drag & drop website builder platform tailored for creatives such as designers, marketers, and content creators. The company has established a strong market position by offering creative freedom, seamless WordPress integration, and a comprehensive template marketplace. Their business model is SaaS-based, providing both website building and hosting services. The website content is rich, professional, and well-structured, targeting a broad creative audience. Technically, the site uses modern web technologies including jQuery, Vimeo, YouTube embeds, and is hosted on WP Engine, indicating a mature digital infrastructure. However, a critical security gap is the absence of HTTPS, which significantly impacts the security posture. While the site includes privacy and cookie policies with consent mechanisms, GDPR compliance is not clearly indicated. The company demonstrates strong business credibility with clear branding, testimonials, and active social media presence. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

F

FramerElements

framerelements.com

51

FramerElements is a small technology-focused business specializing in the design and development of premium Framer website templates. The company positions itself as a provider of high-quality, fast-loading, and fully customizable templates aimed at businesses and individuals seeking professional web design solutions. The website content is professional and well-structured, emphasizing design quality and responsiveness, but lacks comprehensive business and legal disclosures such as privacy or cookie policies. Technically, the website is built using Webflow CMS, leveraging Google Fonts and jQuery for frontend functionality. Hosting and DNS services are managed via Cloudflare, but critically, the site lacks a valid SSL/TLS certificate and does not serve content over HTTPS, exposing it to security risks. Performance is moderate with a load time of approximately 3.5 seconds, and mobile optimization is good. SEO and accessibility features are basic but present. From a security perspective, the absence of HTTPS, security headers, and DNS security records significantly weakens the site's security posture. No privacy or cookie policies are present, indicating poor privacy compliance. Contact information is limited to a single company email address with no phone numbers or physical addresses. No incident response or vulnerability disclosure policies are found. Overall, the site demonstrates moderate business credibility and good content quality but suffers from critical security and privacy compliance deficiencies. Strategic improvements in SSL implementation, security headers, and privacy policies are essential to enhance trust and protect users.

L

lempire

lempire.com

65

lempire is a mature technology company offering a suite of SaaS products focused on sales and marketing automation, including cold email outreach, email deliverability, meeting scheduling, and social media personal branding tools. The company targets SMBs and sales teams globally, boasting over 125,000 users and a consistent brand presence. Technically, the website is built on modern web technologies such as Webflow CMS, jQuery, and Swiper.js, with Cloudflare DNS hosting. While the site delivers excellent content quality, user experience, and SEO, its security posture is weakened by an invalid SSL certificate and lack of HTTPS support, which poses a significant risk. Privacy compliance is well addressed with clear privacy and cookie policies and user consent mechanisms. Overall, the business credibility is strong, supported by domain age, testimonials, and partner integrations.

L

lempire

lemwarm.com

70

lemwarm is a specialized SaaS platform focused on improving email deliverability through automated warm-up, monitoring, and deliverability boosting tools. It operates as part of the lempire ecosystem, targeting sales teams, agencies, and founders who rely on cold email outreach. The platform offers tiered subscription plans and integrates with various marketing and analytics tools to provide a comprehensive email performance solution. Technically, the website is built on Webflow and uses modern JavaScript libraries and analytics services, though performance optimization is needed due to slow load times. Security posture is solid with HTTPS and OAuth-based authentication, but could be improved by enabling HSTS, OCSP stapling, and additional security headers. Privacy compliance is well addressed with cookie consent mechanisms and clear privacy and terms policies. Overall, lemwarm presents a professional and trustworthy service with room for technical and security enhancements.

L

LEMPIRE

lempire.co

54

Lempire is a French-based technology company offering a suite of SaaS tools designed to help small and medium-sized businesses (SMBs) enhance their sales and marketing efforts. Their product portfolio includes lemlist for cold email outreach, lemwarm for email deliverability, lemcal for meeting scheduling, Taplio for LinkedIn personal branding, and Tweet Hunter for Twitter audience growth. The company positions itself as a comprehensive solution provider for ambitious businesses aiming to scale their outreach and brand presence. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, and Swiper JS, with good design quality and user experience. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which poses significant risks. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, while the business and technical maturity are strong, the security weaknesses require urgent remediation to protect user data and maintain trust.

B

BRIX Agency

brixagency.com

40

BRIX Agency is a mature and established web design and development agency specializing in delivering high-quality websites and digital products for tech companies and startups. Their service portfolio includes web design, web development, UI/UX design, branding, automation, AI services, and conversion optimization. The company has a strong market position supported by a professional website, client testimonials, and a portfolio featuring notable clients. Technically, the website is built on Webflow with modern technologies and integrates multiple marketing and analytics tools, though performance is somewhat slow and security headers are lacking. The security posture is basic but functional with HTTPS and OCSP stapling enabled, but improvements such as HSTS and security headers are recommended. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

B

BRIX Templates

brixtemplates.com

61

BRIX Templates is a specialized provider of premium Webflow templates and UI kits designed to enhance the workflow of designers and developers. The company operates a professional website showcasing a broad catalog of templates across various industries such as technology, finance, health, and e-commerce. They hold a reputable market position, evidenced by their Webflow Template Partner Award, and offer additional services including a Webflow agency and template customization. Technically, the website is built on the Webflow platform, leveraging modern technologies like TLS 1.3, Jetboost for search and filtering, and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Twitter Tag, and LinkedIn Insight. The site is mobile-optimized with excellent design and user experience but suffers from slow load times due to a high number of resources and large page size. Security-wise, the site uses HTTPS with no known SSL vulnerabilities but lacks advanced security headers, HSTS, DNSSEC, and OCSP stapling, which are recommended for enhanced security. Privacy compliance is minimal, with no visible privacy or cookie policies, which could pose compliance risks. Overall, the website is professional and trustworthy but would benefit from improved security and privacy practices.

A

AB180 Inc.

airbridge.io

51

Airbridge is a technology company specializing in mobile measurement platform (MMP) solutions that unify attribution across multiple platforms including Android, iOS, web, PC, and console. Positioned as a transparent and cost-effective alternative to major competitors, Airbridge offers comprehensive services such as predictive LTV analytics, fraud protection, deep linking, and real-time marketing analytics. The company targets app marketers and developers seeking granular insights without paywalls or upsells. Technically, the website is built on Webflow and integrates modern JavaScript libraries and analytics tools like Google Tag Manager and Amplitude, demonstrating a mature digital infrastructure. However, a critical security concern is the invalid SSL certificate and lack of TLS protocol support, which significantly impacts the security posture. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the business presents a professional and trustworthy front but must urgently address SSL and TLS issues to ensure secure user interactions.

T

twoday Oy

signom.com

65

Signom is a Finnish electronic signature service operated by twoday Oy, providing users with a platform to sign documents digitally using bank credentials. The service targets Finnish-speaking individuals and businesses seeking a quick and easy way to sign documents electronically. The website offers basic content with language options and clear navigation for login and registration. Technically, the site uses standard web technologies including jQuery and Google Fonts, hosted on Google Cloud infrastructure. Performance is moderate with some room for optimization. Security posture is adequate with HTTPS enabled and valid SPF and DMARC DNS records; however, improvements are needed in security headers, HSTS, and certificate transparency compliance. Privacy and cookie policies are present but lack advanced consent mechanisms. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy features to improve compliance and user trust.

V

Visible Hands

visiblehands.vc

56

Visible Hands is a specialized venture capital platform focused on investing in early-stage, underrepresented founders building high-growth startups. The company operates fellowship programs such as VHNYC and VHBOS to support diverse entrepreneurs, leveraging partnerships with major corporations like Meta and AWS. Their market position is niche but strong within the diversity and inclusion segment of the technology investment space. Technically, the website is built on Webflow with integrations for fonts and email marketing, but suffers from slow load times and lacks a valid SSL certificate, impacting security and user trust. Security posture is weak due to missing HTTPS and modern TLS protocols, although SPF and DMARC records are properly configured. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

P

PowerDNS

powerdns.com

63

PowerDNS is a well-established provider of secure open-source and commercial DNS software solutions, targeting large-scale DNS service providers such as mobile operators, broadband providers, enterprises, and hosting companies. The company emphasizes stability, security, and performance, boasting a decade without a Severity 1 support case. Their offerings include DNS resolving, infrastructure DNS, parental controls, malware protection, and DNS solutions tailored for 5G networks. The website is professionally designed, content-rich, and well-branded, with active blog updates and case studies highlighting partnerships with major industry players. Technically, the site uses HubSpot CMS, Cloudflare CDN, and modern web technologies, but suffers from a critical security issue due to an invalid SSL certificate and lack of modern TLS protocol support. Security headers and policies are well implemented, but the absence of a cookie consent mechanism and visible contact information slightly reduce privacy compliance and user trust. Overall, the site demonstrates a strong market position and technical maturity but requires urgent SSL and privacy improvements.

C

Crossware Limited

crossware.co.nz

64

Crossware Limited is a New Zealand-based enterprise software company specializing in email signature management solutions for medium to large organizations. Positioned as a world-leading provider, Crossware offers SaaS products that integrate with Microsoft 365, Google Workspace, Microsoft Exchange, and HCL Domino to ensure consistent, compliant, and centrally managed email signatures. The website demonstrates a mature digital presence with professional design, comprehensive content, and multiple customer engagement points such as free trials and demo requests. Technically, the site is hosted on Cloudflare with Webflow CMS, uses modern web technologies, and implements good security practices including HTTPS and OCSP stapling. However, there is room for improvement in SPF record validity and DMARC policy enforcement. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are not evident. Overall, the site reflects a high level of business credibility and technical maturity.

Team Farner is a prominent European alliance of independent, owner-led management consultancies specializing in integrated communication. The alliance combines expertise in strategy, creativity, behavioral science, and technology to provide comprehensive communication solutions across various sectors. With a strong presence in Switzerland and multiple partner companies across Europe, Team Farner positions itself as a leading consultancy network focused on impactful and agile communication strategies. Technically, the website is built on modern web technologies including Webflow CMS, HTML5, CSS3, JavaScript, jQuery, and Lottie animations. The hosting is managed by world4you.at, and the site employs TLS 1.2 for secure HTTPS connections. However, performance is somewhat slow, and there are opportunities to enhance security by enabling HSTS, OCSP stapling, and upgrading to TLS 1.3. From a security perspective, the site has valid SPF and DMARC DNS records, uses HTTPS, and shows no signs of subdomain takeover vulnerabilities. Yet, it lacks several security headers and advanced SSL features, which could be improved to strengthen its security posture. Privacy compliance is good with a comprehensive privacy policy, but no explicit cookie consent mechanism was detected. Overall, the website demonstrates a high level of professionalism, rich content, and strong business credibility. The security posture is adequate but can be enhanced. The risk assessment suggests moderate risk with recommendations to improve SSL configurations and implement additional security headers to protect user data and enhance trust.

C

Crossware Limited

crossware365.com

54

Crossware Limited is an enterprise-focused technology company specializing in email signature management software designed for medium to large organizations. Their flagship product, Crossware Mail Signature, offers centralized management of email signatures across multiple platforms including Microsoft 365, Google Workspace, Microsoft Exchange, and HCL Domino. The company positions itself as a world-leading solution provider with strong trust signals such as certifications (Microsoft Gold, ISO, GDPR, AICPA) and positive customer testimonials. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, Google Tag Manager, and integrates marketing tools like G2 chatbot and review widgets. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture and user trust. Privacy compliance is partially addressed with a privacy policy and GDPR alignment, but lacks cookie consent mechanisms. Overall, the website demonstrates strong business credibility and marketing maturity but requires urgent security improvements to protect user data and maintain trust.

I

iwoca Deutschland GmbH

iwoca.de

40

iwoca Deutschland GmbH is a medium-sized fintech company specializing in providing fast and flexible business loans to small enterprises and self-employed individuals in Germany. The company positions itself as an alternative lender with a strong digital presence, offering loans up to 500,000 € with transparent, credit-based interest rates. Their website demonstrates a professional design with clear navigation and comprehensive content tailored to their target audience. Technically, the site leverages modern web technologies including Webflow CMS, Visual Website Optimizer for A/B testing, and integrates consent management tools to ensure privacy compliance. Security measures include HTTPS with TLS 1.3, SPF and DMARC email protections, though improvements such as enabling HSTS and DNSSEC could enhance their posture further. Overall, iwoca maintains a good balance of usability, compliance, and security, supporting their market position as a trusted fintech lender.

A

Afya Participações S.A

afya.com.br

72

Afya Participações S.A operates as the largest hub for medical education and digital solutions in Brazil, targeting medical students, professionals, and healthcare providers. The company offers a broad portfolio including undergraduate medical courses, postgraduate education, continuing medical education, and digital health solutions. It holds a strong market position with over 20,000 medical students and multiple subsidiaries and partners enhancing its ecosystem. Technically, the website is built on Webflow, hosted via Cloudflare, and integrates modern analytics and marketing tools, demonstrating a mature digital infrastructure with fast performance and good mobile optimization. Security posture is solid with HTTPS, strong security headers, and cookie consent mechanisms, although improvements in HSTS and vulnerability disclosure could be made. Privacy compliance is well addressed with comprehensive policies and consent management. Overall, the website reflects a professional, trustworthy, and well-managed digital presence aligned with its enterprise scale and sector focus.

L

Los Angeles Walks

losangeleswalks.org

53

Los Angeles Walks is a small non-profit organization dedicated to promoting safe and walkable communities in Los Angeles. The organization focuses on community training, policy advocacy, and pedestrian safety initiatives, supported by donations and partnerships, notably with Community Partners as their fiscal sponsor. Their target audience includes local residents, families affected by traffic violence, and community advocates. Technically, the website is built on Webflow, uses Cloudflare CDN, and integrates Google Fonts and jQuery. The site is mobile optimized with good design and navigation but lacks advanced SEO and accessibility features. Security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which is a critical issue. Privacy compliance is minimal, with no visible privacy or cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent improvements in security and privacy compliance to enhance trust and protect users.

B

Boxmyjob SAS

taleez.com

60

Taleez, operated by Boxmyjob SAS, is a French-based SaaS company specializing in recruitment management software (ATS). The company offers a comprehensive platform that centralizes recruitment processes, including job offer multi-diffusion, candidate sourcing, process automation, and analytics. With over 15,000 users and a strong presence in the French market, Taleez positions itself as a reliable and user-friendly solution for HR teams, managers, and candidates. The website reflects a professional and consistent brand image, supported by numerous client testimonials and case studies. Technically, the website is built on Webflow CMS and integrates multiple marketing and analytics tools such as HubSpot, Google Analytics, Amplitude, and ConvertBox. Hosting is managed via OVH with CDN support from Cloudfront. Despite a rich content offering and good mobile optimization, the site suffers from slow load times and lacks a valid SSL certificate, which critically impacts its security posture. Security-wise, the absence of a valid SSL certificate and HTTPS enforcement is a major vulnerability, exposing users to potential data interception risks. Additionally, the lack of security headers and modern TLS protocols further weakens the site's defense. Privacy compliance is well addressed with comprehensive GDPR-aligned policies and cookie consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, while Taleez demonstrates strong business credibility and content quality, its technical and security shortcomings, especially regarding SSL/TLS, pose significant risks. Addressing these issues is paramount to safeguarding user data and maintaining trust.

G

Gaia-X 4 Future Mobility

gaia-x4futuremobility.de

40

Gaia-X 4 Future Mobility is a collaborative project family focused on developing and implementing future mobility applications based on the Gaia-X initiative. It is funded by the German Federal Ministry for Economic Affairs and Climate Action and coordinated by the DLR Institute for AI Security. The initiative involves about 80 participants from industry and research, aiming to build an open, decentralized data and service ecosystem for mobility. The website provides detailed information about the six constituent projects, their goals, participants, and related initiatives. Technically, the site is built on the Webflow platform, uses Google Fonts and jQuery, and is hosted on a CDN. However, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical security concern. Privacy and terms of service pages are present, but no cookie consent mechanism is detected. Overall, the site is professionally designed with good content relevance and navigation but requires urgent security improvements.

H

Hamburg Institute for Innovation, Climate Protection and Circular Economy GmbH

hiicce.de

40

Hamburg Institute for Innovation, Climate Protection and Circular Economy GmbH (HiiCCE) is a specialized institute focused on advancing the circular economy and climate protection through integrated environmental consulting, project development, and research. The organization serves a diverse clientele including corporations, NGOs, government entities, and international organizations, positioning itself as a national and international pioneer in sustainable resource management. The website reflects a professional digital presence built on WordPress with multilingual support and SEO optimization, although performance data is limited. Security posture is weak due to the absence of HTTPS and modern TLS protocols, exposing the site to potential risks. Privacy compliance is strong with comprehensive cookie and privacy policies and consent mechanisms in place. Contact information is clearly presented, enhancing business credibility.

E

ECIU University

eciu.org

63

ECIU University is an international alliance of 13-14 universities focused on innovative education, research, and collaboration to address real-life challenges. The website serves as a platform to engage learners, researchers, and collaborators with news, events, and program information. Technically, the site is built on Webflow with integrations including Google Fonts, Vimeo, Microsoft Forms, and analytics tools like Plausible and Microsoft Clarity. Hosting and CDN services are provided via Cloudflare. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which severely impacts the site's security posture. While security headers and HSTS are configured, the lack of proper TLS protocols and certificate transparency compliance are significant vulnerabilities. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service detected. Contact information is primarily via web forms and social media, with no direct emails or phone numbers published. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect users and enhance trust.

A

Acrilys

acrilys.com.br

60

Acrilys is a Brazilian manufacturing company specializing in plastic technologies, particularly injection molding and vacuum forming with proprietary tooling. The company emphasizes sustainability and ecological awareness, investing in people and technology to deliver innovative and efficient solutions. Their market position is strengthened by certifications such as ISO 9001:2015 and IATF 16949:2016, indicating a commitment to quality and automotive industry standards. The website targets industrial clients and businesses requiring plastic manufacturing services, primarily in Brazil. Technically, the website is built on Webflow CMS, hosted and served via Cloudflare, and uses modern web fonts and libraries. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security flaw. The presence of a cookie consent mechanism and privacy policy indicates some privacy compliance, though GDPR compliance is not fully evident. Overall, the security posture is weak due to missing SSL and lack of incident response information. The website is professionally designed with good content quality and navigation but requires urgent security improvements to protect user data and enhance trust.

F

Fieldfisher

fieldfisher.com

70

Fieldfisher is a prominent European law firm with a strong market position in key dynamic sectors such as technology, financial services, energy, and life sciences. The firm operates through 25 offices across 13 countries, providing comprehensive legal services tailored to a diverse client base. Their website reflects a mature digital presence with a focus on user experience, accessibility, and international reach. Technically, the infrastructure leverages modern web technologies including Kentico CMS, Cloudflare for hosting and security, and Cloudinary for media delivery, ensuring moderate performance and good mobile optimization. Security posture is solid with strong TLS configurations, DMARC enforcement, and SPF records, although there are opportunities to enhance HTTPS security by enabling HSTS and TLS 1.3 support. Privacy and compliance are well addressed with visible cookie consent mechanisms and comprehensive privacy policies. Overall, Fieldfisher demonstrates a high level of professionalism and trustworthiness in both business and technical domains.

E

Edgar Ambient Media Group

edgarartscreen.de

51

Edgar Ambient Media Group operates the Edgar Art Screen, a digital communication channel targeting the gastronomy sector in Germany. The service provides free 42" LED screens to bars, bistros, cafes, and restaurants, allowing them to display their own content such as menus and events. The business model is supported by advertising and cultural content, positioning the company as a media provider within the hospitality industry. The website is professionally designed with consistent branding and good content quality, targeting primarily German-speaking users. Technically, the site uses modern web technologies including Webflow CMS, Google Tag Manager, and cloud hosting on AWS. However, the site performance is somewhat slow due to large page size and resource count. Security posture is basic with TLS 1.3 support and no critical vulnerabilities detected, but lacks advanced features like HSTS, DNSSEC, DMARC, and OCSP stapling. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the company demonstrates a solid digital presence with room for security and performance improvements.

E

Edgar Ambient Media Group GmbH

edgarfreecards.de

53

Edgar Ambient Media Group GmbH operates the Edgar Freecards platform, specializing in distributing free postcards as an innovative advertising medium targeting urban audiences, particularly generations Y and Z in Germany. With over 30 years of experience and a presence in more than 4000 locations, the company has established a strong market position in the media sector, leveraging creative and sustainable advertising solutions. The website reflects a mature digital presence with comprehensive content, structured data, and multiple analytics tools integrated for performance and user behavior insights. However, the absence of a valid SSL certificate and modern TLS protocols represents a significant security gap that undermines user trust and data protection. The company demonstrates compliance awareness through a dedicated privacy policy, cookie consent mechanisms, and a compliance hotline linked to its parent group, Ströer OOH. Strategic improvements in security infrastructure and performance optimization are recommended to enhance overall risk posture and user confidence.

E

Edgar Ambient Media Group GmbH

edgar.de

64

Edgar Ambient Media Group GmbH is a leading German media company specializing in integrated digital and analog advertising solutions across high-traffic indoor urban touchpoints. With over 60,000 advertising carriers, the company holds a strong market position as a premier provider of DOOH, Ambient, and Live Media campaigns. Their business model focuses on authentic communication solutions for advertisers targeting urban audiences. Technically, the website is built on Webflow with modern JavaScript libraries for animation and smooth user experience, supported by a managed hosting provider. However, the current SSL/TLS configuration is invalid, which poses a significant security risk despite the presence of HSTS and email authentication records. The company demonstrates good privacy compliance with GDPR-aligned policies and consent mechanisms. Overall, Edgar Ambient Media Group GmbH presents a professional and trustworthy digital presence with room for critical security improvements.

C

Cinex

cinex.com.br

55

Cinex is a Brazilian manufacturing company with Italian roots specializing in innovative glass and aluminum products for architectural and furniture applications. The company has a strong market presence with over two decades of experience, offering a diverse product portfolio including doors, frames, coatings, and partitions. Their business model focuses on combining technology, design, and sustainability to serve architects, designers, engineers, and end consumers. Technically, the website infrastructure leverages common web technologies such as jQuery, Glider.js, and Typekit fonts, hosted behind Cloudflare DNS services. However, the website suffers from critical security shortcomings, notably the absence of a valid SSL certificate and lack of modern TLS protocols, which exposes users to significant risks. The company has implemented SPF and DMARC DNS records, indicating some email security awareness. Overall, the digital maturity is moderate with room for improvement in performance, security, and privacy compliance.

C

CloserStill Media

dmexcoasia.com

70

The website dmexcoasia.com represents a major upcoming event, eCommerce Expo | DMEXCO Asia, scheduled for October 8-9, 2025 in Singapore. It is organized by CloserStill Media in partnership with Koelnmesse and BVDW, targeting eCommerce and digital marketing professionals in Southeast Asia. The event aims to provide a platform for exhibitors and attendees to connect, generate leads, and share industry insights. Technically, the site uses a variety of modern JavaScript libraries and frameworks including jQuery, Alpine.js, GSAP, and Swiper, hosted on ns-serve.net infrastructure. However, the website suffers from critical security issues including an invalid SSL certificate and lack of TLS protocol support, which significantly undermines its security posture. While HSTS is enabled, other security best practices are missing. The site employs extensive tracking and marketing tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity, indicating a high level of user tracking. Overall, the website is professionally designed with good content relevance and navigation clarity but requires urgent security improvements to protect user data and enhance trust.

C

ConnectPlug

connectplug.com.br

58

ConnectPlug is a Brazilian company providing integrated management solutions primarily for the food service and retail sectors. Their offerings include a comprehensive system combining PDV (Point of Sale), ERP, autoatendimento (self-service kiosks), and financial and stock control, targeting restaurants, bars, supermarkets, and various retail businesses. The company positions itself as a market reference with over 100,000 entrepreneurs using their solutions. Technically, the website is built on Webflow CMS, hosted on AWS infrastructure with Cloudflare CDN, and uses modern frontend libraries such as Swiper.js and jQuery. However, the site currently lacks a valid SSL certificate and proper TLS configuration, which is a critical security concern. Security headers are partially implemented, but important features like OCSP stapling, session resumption, and DNSSEC are missing. Privacy and cookie policies are present but basic, with cookie consent implemented via a popup. Contact information is clearly provided, including emails, phone numbers, and social media links. Overall, the company demonstrates a solid business model and digital presence but needs to urgently address security vulnerabilities to protect user data and maintain trust.

A

AdValue Group GmbH

epwr.com

65

EPWR is a German-based SaaS company specializing in Amazon Ads management tools, offering automated bidding, detailed reporting, and campaign management solutions. Positioned as an Amazon Advanced Partner with multiple industry awards, EPWR targets Amazon sellers, vendors, and agencies seeking to optimize their advertising performance. The platform provides comprehensive features including real-time data integration, AI-driven bid management, and campaign automation to enhance efficiency and ROI. Technically, the website is built on Webflow CMS, leveraging modern JavaScript frameworks and third-party services such as Google Tag Manager and CCM19 for cookie consent management. While the SSL certificate is valid and HSTS is enabled, the site lacks modern TLS protocol support and DNS security features like DNSSEC and CAA records, indicating room for security enhancements. The site demonstrates good privacy compliance with GDPR-aligned cookie consent mechanisms and detailed privacy policies. Overall, EPWR presents a professional, trustworthy digital presence with strong branding and customer testimonials, though performance optimization is recommended due to slow load times.

A

Aristocrat Technologies Australia PTY LTD

aristocrat-us.com

64

Aristocrat Technologies Australia PTY LTD operates the aristocrat-us.com website, providing information about their slot machine games and resources for casino operators. The company is positioned as a large, established player in the gaming technology sector, targeting casino players and operators with a comprehensive game catalog and brand experience. The website features modern design elements and integrates marketing tools such as Constant Contact and Google Tag Manager to engage users and collect marketing consents. Technically, the site is built on ASP.NET with Bootstrap and jQuery, hosted on Microsoft IIS behind Amazon CloudFront, but suffers from an invalid SSL certificate and disabled TLS protocols, which significantly impact its security posture. The security headers are partially implemented, but CORS settings are overly permissive, and no advanced security policies like HSTS or security.txt are present. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

A

Aristocrat Technologies Australia PTY LTD

aristocratgaming.com

86

Aristocrat Technologies Australia PTY LTD operates the website aristocratgaming.com, providing information and marketing for their slot machine games and casino operator resources. The company holds a strong market position in the gaming industry with a recognized brand and a large operational scale. Their website targets casino players and operators, offering game catalogs, brand experiences, and operator support. Technically, the site is built on Microsoft IIS with ASP.NET, uses Bootstrap and jQuery for front-end, and is hosted behind Amazon CloudFront CDN, indicating a modern and scalable infrastructure. However, the SSL configuration lacks modern TLS protocols, and security headers are partially implemented with overly permissive CORS settings. Privacy and terms policies are present but no cookie consent mechanism is detected. The security posture is moderate with room for improvement in encryption standards and security policy transparency. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

S

Soft2Bet

soft2bet-careers.com

61

Soft2Bet is a technology-driven company specializing in the iGaming sector, positioning itself as a market leader with a focus on innovation, diversity, and career growth opportunities. The website serves primarily as a careers portal, targeting job seekers interested in the iGaming industry. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Fonts, GSAP animations, and integrates job listings dynamically via the Greenhouse API. Hosting is provided through Cloudflare CDN and Webflow, ensuring fast performance and good mobile optimization. Security posture is moderate with valid SSL certificates and HSTS enabled; however, modern TLS protocols are not enabled, which is a notable gap. The site lacks explicit privacy, cookie, and terms of service policies, and does not provide direct contact emails or phone numbers, relying solely on a contact form for communication. Overall, the site demonstrates good design and user experience but requires improvements in compliance and security transparency.

S

Soft2Bet Invest

soft2bet-invest.com

61

Soft2Bet Invest is an investment fund focused on empowering iGaming and casual gaming startups by providing financial and strategic support. The fund targets growth-stage companies and mature enterprises with pioneering technologies, aiming to foster innovation and high-margin gaming solutions. The website positions Soft2Bet Invest as a leader in gaming technology investment with a substantial fund size of 50 million EUR and individual investments ranging from 500,000 to 1 million EUR per project. Technically, the website is built on Webflow, leveraging modern web technologies and CDN services for fast performance and good mobile optimization. However, the SSL configuration lacks modern TLS protocol support, which is a security concern. The site lacks explicit privacy, cookie, and terms of service policies, though it implements a cookie consent mechanism via CookieScript. Contact is facilitated through an external form hosted on heyflow.id, and social media presence is limited to LinkedIn. Overall, the security posture is moderate with room for improvement in compliance documentation and SSL/TLS configuration.

D

Dropbox Sign

helloworks.com

60

Dropbox Sign, formerly known as HelloSign, is a leading provider of electronic signature solutions designed to streamline contract signing and document workflows for businesses and developers. Positioned as a scalable and easy-to-use SaaS platform, it offers legally binding eSignatures, API integrations, and additional services such as fax. The company benefits from strong brand recognition as part of Dropbox and serves a broad enterprise audience with a comprehensive suite of features and integrations. Technically, the website is built on Webflow CMS, hosted on AWS CloudFront, and leverages modern marketing and analytics tools like Adobe DTM and Marketo. The site is well-optimized for performance, mobile, accessibility, and SEO, reflecting a mature digital presence. Security-wise, the site employs essential headers and valid SSL certificates but lacks modern TLS protocol support and DNS security extensions, indicating room for improvement. Overall, Dropbox Sign demonstrates a robust business and technical foundation with a strong market position in the eSignature industry.

D

Dropbox Sign

hellosign.com

69

Dropbox Sign, formerly HelloSign, is a leading electronic signature platform integrated with Dropbox, offering easy-to-use eSignature solutions for businesses and developers. The company provides SaaS-based services including document signing, API integration for embedded signatures, fax services, and multiple platform integrations. Their market position is strong, supported by a large enterprise customer base and consistent branding aligned with Dropbox. The website demonstrates excellent content quality, user experience, and trust indicators such as compliance badges and customer testimonials. Technically, the site is built on Webflow CMS, hosted on AWS CloudFront, and uses modern marketing and analytics tools like Adobe DTM and Marketo. Performance and mobile optimization are excellent, with good accessibility and SEO practices. Security posture is solid with valid SSL and security headers, but lacks modern TLS protocols and DNSSEC, and could improve with HSTS and security.txt publication. Overall, Dropbox Sign presents a mature digital presence with strong business and technical foundations, though some security enhancements are recommended.

G

GetCybr

getcybr.com

66

The website demonstrates a moderate security posture with no critical vulnerabilities but multiple high and medium severity issues, particularly in security headers, GDPR compliance, and NIS2 regulatory adherence. Key deficiencies include missing essential security headers, absence of cookie policy and consent mechanisms, and lack of formalized security and incident response policies. Email security and network security modules score relatively high, indicating solid controls in those areas. However, SSL/TLS configurations require attention due to impending certificate expiry and mixed content issues which can undermine user trust and data integrity. The low scores in GDPR and NIS2 compliance pose significant regulatory and legal risks, potentially leading to fines and reputational damage. Immediate remediation is needed to strengthen compliance posture and protect against common web-based attacks. Overall, while foundational security controls exist, significant gaps must be addressed to ensure robust protection and regulatory compliance.