Security Directory

G

GC Rieber Minerals

gcrieber-minerals.com

58

GC Rieber Minerals is a Norwegian-based company specializing in the supply and development of mineral and salt products for diverse industrial markets including road maintenance, aquaculture, food production, and agriculture. The company emphasizes sustainability and circular economy principles by innovating in waste-to-mineral processes. Their market position is supported by strong brand ownership of Norsal and Stradasalt, targeting B2B customers in Northern Europe. The website infrastructure is built on WordPress with modern SEO and GDPR compliance tools, reflecting a mature digital presence. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a concern for domain legitimacy but is mitigated by professional site content and transparency. Overall, the company presents a trustworthy and professional online presence with room for technical security enhancements.

C

Carstore

carstore.eu

59

Carstore Europe operates as a pan-European platform specializing in the sale, auction, and international trading of used cars. The company leverages multiple country-specific websites to serve customers in Sweden, Finland, Norway, Slovakia, and plans expansion into other European markets. Their business model combines direct retail, auction services, and cross-border vehicle trading, positioning them as a growing player in the European automotive used car market. The website is professionally designed with consistent branding and clear messaging targeting European used car buyers and sellers. Technically, the site is built on modern frameworks including Next.js and Sitecore CMS, with GDPR-compliant cookie consent implemented via Usercentrics and analytics managed through Google Tag Manager. Security posture is solid with HTTPS enforced, though additional security headers and explicit security policies could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with the business's European presence. Overall, the site demonstrates a mature digital infrastructure and a credible business presence, though improvements in privacy policy transparency and contact information availability are recommended.

C

CINEsync

cinesync.io

71

CINEsync is a technology company specializing in cloud-based cinema POS and management software designed for independent cinemas and cinema circuits. Their product suite includes Box Office POS, Self Checkout KIOSK, Concession POS, mobile apps for iOS and Android, a web app, mobile scanner app, and digital signage solutions. The company positions itself as a robust and innovative provider aiming to streamline cinema operations and enhance customer loyalty. The website is professionally designed, mobile-optimized, and rich in content, targeting cinema exhibitors globally. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Facebook Pixel, Hotjar, and Google reCAPTCHA, indicating a mature digital infrastructure. Security posture is good with HTTPS and form protections, but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service pages. WHOIS data is unavailable due to a malformed response, limiting domain trust assessment. Overall, the website presents a credible and professional business with room for improvement in transparency and security documentation.

Minimlékárna pod Řípem is a small family-owned dairy farm business based in the Czech Republic, specializing in fresh milk vending and production of various dairy products such as yogurts, kefir, and cheeses. The business leverages a combination of traditional farming heritage and modernized facilities funded partly by EU programs. Their market position is local and regional, supported by a recognized regional food award. The website serves as an informational and e-commerce platform targeting local consumers interested in fresh farm products. Technically, the website uses a simple but effective technology stack including HTML5, CSS3, jQuery, and Font Awesome. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. The hosting and domain registration are consistent with the business location and claims, with no signs of privacy protection or suspicious WHOIS data. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which are critical for protecting user data and trust. The presence of a cookie consent banner indicates some GDPR awareness, but the absence of a privacy policy and terms of service is a compliance gap. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is functional and trustworthy for its business purpose but would benefit from improved security practices, formal privacy documentation, and enhanced technical optimization to increase user trust and compliance with data protection regulations.

G

GEOVIA s. r. o.

geovia.cz

41

GEOVIA s. r. o. is a Czech Republic based small business specializing in geodetic services including geometric plans, mapping, construction geodesy, engineering network surveying, and GIS solutions. The company targets clients such as construction firms, municipalities, and private clients primarily in the Roudnice nad Labem region. Their website is professionally designed using WordPress CMS, integrating modern JavaScript libraries like jQuery and Swiper.js, and includes Google reCAPTCHA v3 for form security. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. Security posture is solid with HTTPS enforced and bot protection, though lacking some advanced security headers and formal privacy or cookie policies. Contact information is clearly presented with multiple channels including email, phone, and a contact form. No suspicious or malicious content was detected, and the domain registration data aligns well with the business history, supporting legitimacy. Overall, the website is functional, secure, and professional but could improve privacy compliance and security headers to enhance trust and regulatory adherence.

ASTUR Straškov a.s. is a medium-sized agricultural company based in the Czech Republic, specializing in both crop and livestock production. The company operates over 3,100 hectares of agricultural land and offers a range of services including mechanization and land leasing. The website reflects a well-established business with a history dating back to 2004 and a strong local presence supported by partnerships with reputable agricultural machinery and service providers. Technically, the website uses modern web technologies and frameworks, providing a good user experience with mobile optimization and clear navigation. However, there are gaps in privacy and security policies, with no visible privacy policy or incident response information, and missing security headers. The cookie consent mechanism is implemented, indicating some level of GDPR awareness. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

M

Ministerstvo životního prostředí

cr2030.cz

58

The website www.cr2030.cz serves as the official platform for the Czech Republic's sustainable development strategy, known as Česká republika 2030. It provides comprehensive information on national goals, strategic frameworks, projects, and public engagement opportunities related to sustainable development. The site is managed by the Ministry of the Environment of the Czech Republic, indicating a government-backed initiative with a focus on environmental and social governance. The platform targets a broad audience including citizens, government stakeholders, NGOs, and international partners. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies such as responsive design and accessibility features. The site demonstrates good SEO practices and mobile optimization, ensuring usability across devices. No blocking or WAF mechanisms were detected, and the site uses HTTPS with a secure SSL configuration. However, explicit security headers are not evident, suggesting room for security enhancements. From a security and compliance perspective, the site includes a cookie consent mechanism aligned with GDPR requirements and provides a privacy policy in Czech. Contact information is clearly presented with official government email and phone contacts, enhancing trust. The absence of WHOIS data limits domain registration trust analysis, but the official nature of the content and domain usage supports legitimacy. Overall, the website presents a professional, secure, and informative platform supporting the Czech Republic's sustainable development agenda. Strategic recommendations include improving security headers, publishing a vulnerability disclosure policy, and enhancing transparency around data collection and retention.

K

Knihovna Ervína Špindlera

mk-roudnice.cz

38

Knihovna Ervína Špindlera is a public library serving the community of Roudnice nad Labem, Czech Republic. It operates as an organizational unit of the city, providing access to physical and electronic books, cultural events, and educational programs. The website offers an online catalog, event calendar, and contact information, positioning the library as a local cultural and educational hub. The institution benefits from EU co-financing for modernization projects enhancing accessibility and community engagement. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Slick Carousel, ensuring a responsive and user-friendly experience. The site is mobile optimized with clear navigation and professional design. However, there is room for improvement in accessibility and SEO optimization. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. The WHOIS data is missing, which raises concerns about domain legitimacy, though the website content and official contact details support its authenticity. No tracking or analytics scripts were detected, indicating minimal user data collection. Overall, the website is functional and trustworthy for its intended audience but should address privacy compliance and security best practices to enhance its posture and user confidence.

I

Intrological

intrological.cz

50

Intrological is a Czech-based digital services provider specializing in website and e-shop development, graphic design, strategic consulting, and online marketing. The company targets businesses seeking to enhance their digital presence, branding, and marketing effectiveness. The website is professionally designed with a clear navigation structure and mobile optimization, reflecting a moderate level of digital maturity. Technically, the site uses modern JavaScript libraries such as jQuery, integrates Google reCAPTCHA for form security, and leverages Mapy.cz for mapping services. However, the absence of key security headers and incomplete analytics setup indicate room for improvement in technical implementation. Security posture is moderate; HTTPS is used, but no explicit security policies or headers are detected, and no privacy or cookie policies are present, which impacts compliance and trust. The lack of WHOIS registration data is a significant concern, reducing the overall trustworthiness and raising questions about domain legitimacy. Overall, the site is functional and professional but requires enhancements in security, compliance, and transparency to improve business credibility and user trust.

R

RoadMedia, s.r.o.

roadmedia.cz

44

RoadMedia s.r.o. is a Czech company specializing in comprehensive communication and PR services, primarily focused on transportation infrastructure projects. Founded in 2008, it serves both public institutions and private companies, offering editorial, photographic, printing, graphic design, web development, and video production services. The company positions itself as a trusted partner with long-term relationships in the transportation sector. Technically, the website is built on WordPress with modern web technologies such as jQuery and Yoast SEO, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and secure form handling, but lacks advanced security headers and visible privacy compliance mechanisms. The absence of WHOIS data reduces domain trust, though the website content and business information appear professional and credible. Overall, the site is safe, well-structured, and business-focused, but could improve privacy and security transparency.

I

InfraBuild

infrabuild.com

64

InfraBuild is a leading Australian steel manufacturer specializing in recycling, manufacturing, and distributing steel long products. It is uniquely positioned as the only fully vertically-integrated steel manufacturer in Australia, covering scrap metal recycling through to downstream distribution. The company emphasizes sustainability, demonstrated by its commitment to reducing embodied carbon and its multiple environmental certifications. InfraBuild targets construction, infrastructure, and industrial sectors within Australia, leveraging innovation such as the SENSE 600® product line. Technically, the website is built on WordPress with modern SEO and analytics integrations, providing a professional and accessible user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though public security policies and incident response contacts are not evident. Overall, InfraBuild presents a credible and trustworthy digital presence aligned with a large enterprise manufacturing business.

G

GFG Alliance

gfgalliance.com

58

GFG Alliance is a large industrial conglomerate specializing in steel, aluminium, and resource sectors with a global footprint of over 16,500 employees and 200+ industrial locations. The company positions itself as a provider of high-performance solutions with a focus on sustainability. The website reflects a professional and modern digital presence built on WordPress with SEO and accessibility considerations. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response information are missing. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified externally. Overall, the website is trustworthy and well-maintained, serving its corporate audience effectively.

K

Kreativní podnikání s.r.o.

kreativnipodnikani.cz

41

Kreativní podnikání s.r.o. is a Czech-based small business specializing in creating modern, functional WordPress websites tailored for small and medium enterprises, craftsmen, and consultants. With over 8 years of experience and more than 75 completed projects, the company positions itself as a reliable local web design and maintenance service provider. Their offerings include graphic design, website creation, and ongoing maintenance, emphasizing user-friendly interfaces and SEO optimization. The website reflects a professional digital presence with clear branding and client references. Technically, the site is built on WordPress using WPBakery Page Builder and integrates GDPR-compliant cookie consent and Google Analytics for tracking. Security posture is solid with HTTPS and CAPTCHA on forms, though some security headers could be enhanced. Overall, the site is well-structured, mobile-optimized, and compliant with privacy regulations, supporting a trustworthy business image.

N

nextbike Czech Republic

nextbikeczech.com

46

Nextbike Czech Republic operates the largest bikesharing service in the Czech Republic, serving over 40 cities with a mobile app-based rental system. The company offers partnerships with municipalities, universities, and firms, providing convenient and sustainable urban mobility solutions. The website is professionally designed, mobile-optimized, and rich in content, supporting multiple languages and featuring comprehensive user guidance and promotional campaigns. Technically, the site leverages WordPress CMS with modern JavaScript libraries and integrates Google Analytics, Facebook Pixel, and reCAPTCHA for analytics and security. Privacy and cookie policies are well implemented with user consent mechanisms, reflecting GDPR compliance. Security posture is good with HTTPS and form protections, though security headers could be improved. The domain WHOIS data is missing, which raises some concerns about transparency, but the overall business credibility and web presence indicate a legitimate and trustworthy operation.

B

Brilo Team s.r.o.

brilo.cz

51

Brilo Team s.r.o. is a Czech Republic based digital agency specializing in web development, e-commerce solutions, marketing, and branding services. The company positions itself as a regional leader helping businesses succeed online with a focus on long-term value and client satisfaction. The website is professionally designed, mobile optimized, and rich with client references and testimonials, indicating a mature business presence. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and Facebook Pixel for analytics and marketing. Security posture is good with HTTPS and secure forms, but lacks some security headers and cookie consent mechanisms. WHOIS data is privacy protected, which is common for this business type, and no suspicious patterns were detected. Overall, the site is trustworthy and well-maintained, suitable for its target audience of businesses seeking digital agency services.

The website energieag.cz is currently inaccessible, returning a 403 Forbidden error with minimal content, indicating that access is blocked likely due to security or firewall restrictions. The domain is registered since 2000 with a Czech registrar and hosting provider, consistent with an established energy sector business in the Czech Republic. Due to the lack of accessible content, no metadata, contact information, or business details can be extracted. The security posture cannot be fully evaluated, but the absence of HTTPS and security headers cannot be confirmed. Overall, the site appears legitimate based on WHOIS data but lacks publicly accessible content for further analysis.

S

stredohori-podripsko.cz

stredohori-podripsko.cz

46

The website stredohori-podripsko.cz operates as an online magazine focused on the beauty and cultural richness of the Středohoří and Podřipsko regions in the Czech Republic. It offers a variety of articles covering health, economy, culture, travel, and practical advice, targeting a general audience interested in local topics. The business model centers on content publishing with monetization through Google Adsense advertising. The site is relatively new, with a domain creation date indicating 2025, which appears inconsistent and may reflect a placeholder or data anomaly. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, Matomo analytics for user tracking, and Google Adsense for advertising. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Hosting is provided via vas-hosting.com, with domain registration through REG-GRANSY. Performance is moderate, and no content blocking or WAF mechanisms were detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible security or incident response policy, nor a vulnerability disclosure mechanism. Privacy compliance is partial; a privacy policy and terms of use are published, but no cookie consent mechanism is present, which is a compliance gap under GDPR. No direct contact emails or phone numbers were found, only a contact form. Overall, the website presents a professional and trustworthy front for a small regional media outlet, but the WHOIS data anomaly and lack of some security and privacy features suggest areas for improvement. Strategic enhancements in privacy compliance, security headers, and transparency would strengthen trust and regulatory adherence.

Labe Aréna Ústeckého kraje is a national water sports center in the Czech Republic focused on rowing and related aquatic sports. The website serves as an information portal for events, projects like Česko vesluje, and partner engagement. The business operates in the hospitality and government-supported sports sector, targeting sports enthusiasts, schools, and the general public. Technically, the site uses an older version of jQuery and the Fonio CMS platform, with moderate performance and basic mobile optimization. Security posture is moderate but weakened by outdated libraries and lack of visible security headers or privacy policies. The absence of WHOIS data limits domain trust assessment. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and technical modernization.

O

Obec Račice

racice.cz

46

Obec Račice operates as the official municipal website for the village of Račice in the Czech Republic, providing residents and visitors with essential local government information, news updates, official notices, and contact details. The site serves as a digital portal for municipal services and community engagement, targeting local citizens and stakeholders. The business model is typical of a government entity, focusing on transparency and public service rather than commercial activities. Technically, the website employs a modern but straightforward technology stack including jQuery, Bootstrap, Swiper.js, and Mmenu.js, likely built on the Galileo CMS platform. The site is mobile-optimized, accessible, and well-structured, offering a good user experience with clear navigation and relevant content. Performance is moderate, with no major technical issues detected in the HTML content. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy regulations. However, no explicit security headers were detected in the HTML source, and the WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. No vulnerabilities or malicious content were found, and the site appears safe and trustworthy for general audiences. Overall, the website is a credible and professional municipal portal with good content quality and privacy compliance. The main risk factor is the lack of WHOIS data, which slightly reduces the trust score. Strategic recommendations include enhancing security headers, publishing explicit security policies, and ensuring domain registration transparency to improve overall trustworthiness and compliance.

A

Africa Food Safety Summit

africafoodsafetysummit.com

44

Africa Food Safety Summit is a newly established event organizer specializing in food safety, quality, and food systems conferences and exhibitions across Africa. The website positions itself as the premier and largest platform for such events in the region, targeting food industry professionals and stakeholders. The business model revolves around organizing and hosting international trade shows and conferences to promote food safety and quality standards. Technically, the website is built on WordPress using the Divi theme, leveraging Google Fonts and Google Analytics for design and analytics respectively. The site is hosted with a reputable registrar and uses HTTPS with a valid SSL certificate, ensuring secure communications. However, DNSSEC is not enabled, and security headers are absent, indicating room for improvement in security hardening. The website lacks critical privacy and cookie policies, which impacts its compliance posture. No contact information or social media links were found, limiting direct communication channels. Overall, the site is professionally designed with good user experience but requires enhancements in privacy compliance and security practices to improve trust and regulatory adherence.

S

Säkularinstitute in Deutschland

saekularinstitute.de

40

The website www.saekularinstitute.de serves as an informational platform for the Arbeitsgemeinschaft Säkularinstitute Deutschland, focusing on Catholic secular institutes in Germany. It provides detailed content about the institutes' spirituality, history, theology, and current events, targeting individuals interested in religious life and community within Germany. The site is professionally designed with consistent branding and clear navigation, though mobile optimization and accessibility are basic. Technically, it runs on the concrete5 CMS (version 8.5.1) with common libraries like jQuery and Bootstrap, hosted by taenzer.hosting. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and safe, with no adult or explicit content detected.

D

Deutsche Ordensobernkonferenz e.V.

orden.de

41

The website www.orden.de serves as the official internet portal for the Deutsche Ordensobernkonferenz e.V., providing comprehensive information about religious orders in Germany. It targets members of religious communities and the interested public, offering news, educational resources, and organizational information. The site holds a strong position as a leading informational resource in its niche. Technically, the site is built on TYPO3 CMS, employs Matomo for analytics, and is hosted via domaincontrol.com nameservers. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. Security-wise, HTTPS is enforced and spam-protection for emails is implemented via JavaScript obfuscation, but lacks advanced security headers and explicit cookie consent mechanisms. No direct contact emails or phone numbers are visible, with contact likely managed through forms. Overall, the site is professional, trustworthy, and safe for general audiences.

M

MLP Finanzberatung SE

mlp-bielefeld.de

69

MLP Finanzberatung SE operates a professional financial advisory website for its Bielefeld location, offering a broad range of financial services including asset management, retirement planning, insurance, financing, and real estate investment. The website targets private customers and emphasizes a networked advisory approach. The company is positioned as a large, established player in the German financial advisory market with a consistent brand presence and comprehensive service offerings. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and Usercentrics for GDPR-compliant consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. No major CMS is detected, suggesting a custom or proprietary platform. From a security perspective, the site uses HTTPS with good SSL configuration and implements consent management. However, explicit security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the HTML content. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

M

MLP Finanzberatung SE

mlp-hamburg.de

69

MLP Finanzberatung SE operates a professional financial advisory website focused on the Hamburg region, offering a broad range of financial services including asset management, retirement planning, insurance, financing, and real estate investment. The site targets private customers, medical professionals, students, and corporate clients, positioning itself as a trusted partner in financial decision-making. The business model centers on personalized, networked financial consulting supported by an expert team. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and a GDPR-compliant cookie consent mechanism via Usercentrics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a published security policy are absent. Privacy compliance is strong with clear links to privacy and cookie policies. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear navigation and high-quality content.

A

Association Francophones des Soins Oncologiques de Support (AFSOS)

afsos-form.org

50

AFSOS FORM is a specialized digital training platform operated by the Association Francophones des Soins Oncologiques de Support (AFSOS), focusing on supportive oncological care education. The platform offers a variety of learning formats including e-learning modules, serious games, virtual classes, and thematic webinars aimed at healthcare professionals in oncology. The website is built on the Moodle LMS platform and hosted by Scaleway SAS, reflecting a modern and scalable technical infrastructure. The content is primarily in French, with some courses available in English, targeting a niche but important segment of healthcare education in France and French-speaking regions. Technically, the website employs a combination of Moodle, YUI, jQuery, and Bootstrap frameworks, ensuring a responsive and moderately performant user experience. The site is mobile-optimized and accessible at a basic level, with room for improvement in SEO and accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present but no explicit GDPR compliance statements or detailed data retention policies. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in security headers and DNSSEC would strengthen defenses. The business credibility is high due to the backing of a recognized association and expert validation of content. The website is safe for general audiences, with no adult or explicit content. Strategic recommendations include enhancing security configurations, expanding privacy compliance transparency, and improving SEO and accessibility to broaden reach and trust.

The Congrès AFSOS website serves as the official platform for the National Congress of AFSOS, a healthcare-focused event in France. It provides essential information about the congress, including registration, live retransmission, e-posters, and partnerships. The site is professionally branded and targets healthcare professionals interested in the congress. The business is organized by COMM Santé, a known event organizer in the healthcare sector. The website's market position is that of an official event portal, supporting the dissemination of congress-related content and services. Technically, the website is built on WordPress, utilizing modern libraries such as Bootstrap, jQuery, and Slick Carousel for UI components. It integrates Google Analytics via the MonsterInsights plugin for visitor tracking. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with no critical errors or broken elements detected. From a security perspective, the site enforces HTTPS and does not expose sensitive data in its HTML content. However, it lacks certain security headers and does not display a cookie consent mechanism, which may affect GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which slightly reduces trustworthiness. Overall, the website is a reliable and professional resource for its target audience but would benefit from enhanced privacy compliance measures and improved transparency regarding domain registration and security policies.

U

UNIFER alfa a.s.

unifer.cz

45

UNIFER alfa a.s. is a Czech-based design and digital agency established in 2012, offering a broad range of services including web and digital marketing, design and video production, marketing and advertising, and strategic planning and consulting. The company targets businesses seeking professional digital and creative solutions and maintains a strong market position supported by a portfolio of reputable clients and references. Their website reflects a high level of professionalism, with excellent content quality, clear navigation, and mobile optimization. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools, demonstrating digital maturity. Security posture is strong with HTTPS enforcement, reCAPTCHA integration, and cookie consent management, though explicit security headers could be further verified and enhanced. Overall, the website and business exhibit high credibility and compliance with GDPR, with clear contact information and transparent cookie policies.

E

Eugen Korda

eugeneugen.eu

53

Eugen Korda is a creative professional specializing in design and art direction, focusing on sustainable and socially responsible branding. The website serves as a portfolio showcasing various projects including identity design, exhibitions, and campaigns. The target audience includes brands and individuals who value ethical and environmental considerations in their creative collaborations. Technically, the website is built on WordPress with modern libraries such as jQuery and Flickity, hosted by WebSupport s.r.o. The site demonstrates good mobile optimization and user experience, with moderate performance and basic SEO. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and policies are lacking. Privacy compliance is partial, with a privacy policy page present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

G

Gesellschaft für Informatik e.V.

gi.de

55

Gesellschaft für Informatik e.V. (GI) is a well-established German non-profit association dedicated to the field of informatics. The organization provides a broad range of services including membership, publications, events, and educational projects aimed at informatics professionals, academics, and students. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site is built on TYPO3 CMS with Bootstrap, employs Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. WHOIS data aligns with the website's legitimacy, showing consistent domain registration without privacy protection, appropriate for a professional association. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional online presence for the GI association.

5

50Hertz Transmission GmbH

50hertz.com

63

50Hertz Transmission GmbH operates as a leading transmission system operator in Germany, focusing on integrating renewable energy sources into the power grid and ensuring reliable electricity supply to approximately 18 million people in East Germany and Hamburg. The company maintains a professional and well-structured website that serves multiple stakeholders including partners, customers, investors, and the general public interested in energy transition. The business model centers on grid infrastructure development, system control, market facilitation, and customer services within the energy sector. The website content is relevant and well-organized, reflecting the company's market position and key services effectively. Technically, the website is built on ASP.NET WebForms with a modern front-end stack including jQuery, Kendo UI, and other JavaScript libraries. The site uses DNN CMS and integrates Usercentrics for cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. SEO optimization is basic but functional. The site is served over HTTPS with a good SSL configuration, though security headers are not explicitly detected. From a security perspective, the site enforces HTTPS and uses a consent management platform, indicating attention to privacy compliance. However, there is no published security policy or incident response contact, and no vulnerability disclosure or security.txt file is found. The absence of WHOIS data for the domain www.50hertz.com is a notable anomaly, potentially indicating domain registration issues or use of alternative domains. Overall, the security posture is solid but could be improved with enhanced transparency and security best practices. The overall risk assessment is moderate with a recommendation to improve domain registration transparency, publish security policies, implement security headers, and enhance accessibility and SEO. These steps will strengthen trust, compliance, and security culture, supporting the company's strategic goals in the energy sector.

G

GETPIONEERS

getpioneers.com

45

GETPIONEERS is a German-based technology service provider specializing in visual and interactive digital solutions for B2B communication. Their offerings include interactive applications, AR/VR training, high-end visualization and design, film and video production, virtual events, and consulting services. The company positions itself as an innovative partner enabling clients to enhance their marketing, sales, and training through cutting-edge digital experiences. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. The domain registration aligns well with the company's founding date and business claims, indicating legitimacy and transparency. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for animations and interactive elements. Hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. Performance is moderate with good mobile optimization, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and explicit security policies on the site. Privacy compliance is partial; a privacy policy is present and GDPR compliant, but no cookie consent mechanism or terms of service are found. Contact information including phone and email is clearly provided, along with active social media profiles. No analytics or tracking scripts were detected in the provided HTML content, indicating minimal user tracking. Overall, GETPIONEERS presents a trustworthy and professional digital presence with room for improvement in security headers, privacy compliance, and SEO. The business is well-positioned in the technology visualization sector with a clear focus on B2B clients.

W

Wannseeschulen für Gesundheitsberufe e.V.

wannseeschulen.de

44

Wannseeschulen für Gesundheitsberufe e.V. is a well-established non-profit educational institution based in Berlin, Germany, specializing in vocational training and continuing education in healthcare professions such as nursing, physiotherapy, and occupational therapy. With over 50 years of experience and partnerships with 15 Berlin hospitals, the organization offers practical and comprehensive training programs. The website reflects a professional and consistent brand image, targeting prospective students and healthcare professionals seeking quality education. Technically, the site is built on WordPress using the Avada theme and integrates modern tools like Yoast SEO and Google Tag Manager, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the entity.

X

XMG

xmg.gg

63

XMG is a German-based company specializing in high-performance gaming laptops and desktop PCs, targeting the gaming community with a focus on quality and community-driven development. The company positions itself as a premium manufacturer with multiple service awards, emphasizing products made in Germany. The website is built on WordPress with Elementor and integrates modern web technologies, including cookie consent management via Usercentrics. The technical infrastructure supports good performance and mobile optimization, with SEO best practices implemented through structured data and meta tags. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response information are absent. Overall, the website is professional, trustworthy, and aligned with the company's business claims.

S

Spreadshop

spreadshop.com

61

Spreadshop is a well-established e-commerce platform specializing in print-on-demand merchandise creation and sales, targeting creators, influencers, and small to medium businesses. The platform offers a comprehensive suite of services including custom merch shop creation, product printing, shipping, and integration with major social media and e-commerce platforms. The website demonstrates a high level of digital maturity with modern technologies such as React and Next.js, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms. The absence of WHOIS data for the domain is a notable concern but does not detract significantly from the overall legitimacy and professionalism of the site. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and transparency.

S

Spreadshop

spreadconnect.app

63

Spreadshop operates a print-on-demand ecommerce platform branded as Spreadconnect, enabling merchants to create and sell custom merchandise integrated with major ecommerce platforms and marketplaces such as Shopify, WooCommerce, TikTok, Amazon, and eBay. The business emphasizes fast fulfillment within 48 hours, high-quality printing, and worldwide shipping, targeting growing brands and seasoned sellers. The website is professionally designed with clear navigation, mobile optimization, and comprehensive content including FAQs and testimonials. Technically, the site uses modern frameworks like Next.js and React, with integrations for cookie consent and analytics. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the domain WHOIS data is missing, which slightly reduces trustworthiness. Overall, the platform presents a mature, reliable ecommerce service with room for improvement in transparency and security communication.

P

Planeta manželství

planetamanzelstvi.cz

43

Planeta manželství is a small Czech Republic based business specializing in custom designed wedding announcements and related printed and digital materials. The company offers personalized services that allow couples to express their unique style and personality through bespoke wedding stationery. The website reflects a niche market position with a focus on quality and customization, supported by a portfolio of past work and active social media presence. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, providing a good user experience and SEO optimization. Performance is moderate with good mobile responsiveness. Security posture is adequate with HTTPS enabled and secure forms, but lacks security headers and formal privacy and cookie policies, which are compliance gaps. Overall, the domain registration data aligns well with the business information, indicating legitimacy and consistency. Recommendations include adding privacy and cookie policies, implementing security headers, and publishing a security.txt file to improve security and compliance posture.

A

ARIX CZECH HOP

arixczechhop.cz

52

ARIX CZECH HOP is a Czech-based global distributor and producer of high-quality Czech hops, specializing in the renowned Žatecký poloraný červeňák (SAAZ) variety. With nearly two decades of experience, the company operates a comprehensive production cycle from breeding and cultivation to processing and storage, serving prominent breweries domestically and internationally. The website reflects a mature digital presence built on WordPress with Elementor and WooCommerce, offering a professional and content-rich experience primarily in Czech language. Contact channels including phone, email, and a secure contact form with Google reCAPTCHA v3 are provided, supporting customer engagement and inquiries. However, the absence of publicly available WHOIS data raises concerns about domain registration transparency, which should be addressed to enhance trust. Security posture is generally good with HTTPS and reCAPTCHA, but could be improved by implementing additional security headers and explicit privacy and cookie policies. Overall, the site demonstrates a solid business and technical foundation with room for compliance and security enhancements.

OBRAZ – Obránci zvířat is a Czech non-profit organization dedicated to the protection and advocacy of animal rights. Established in 2014, the organization runs multiple campaigns aimed at improving animal welfare, educating the public, and pushing for systemic reforms. Their website reflects a mature digital presence with clear calls to action, active social media integration, and comprehensive content about their initiatives. The organization targets a general audience interested in animal protection and ethical treatment of animals. Technically, the website is built on WordPress, leveraging popular plugins for SEO, forms, and GDPR compliance, hosted via WEDOS with Cloudflare DNS services.

M

Marthy’s Kitchen

marthyskitchen.cz

57

Marthy’s Kitchen is a small hospitality business based in Prague, Czech Republic, specializing in high-quality breakfasts and brunches served in a cozy French-style interior. The website reflects a local restaurant with a focus on quality ingredients, home-style preparation, and friendly service. The business targets general audiences seeking elegant dining experiences. Technically, the website is built on the Wix platform, leveraging modern web technologies and providing a mobile-optimized experience. However, the site lacks comprehensive privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is enabled, but security headers are missing, and no incident response or vulnerability disclosure information is provided. The use of Facebook Pixel indicates moderate user tracking for marketing purposes. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.