Security Directory

C

Conexus

conexus.lv

65

Conexus is a Latvian energy sector company specializing in natural gas transmission and storage services, including management of the Inčukalna underground gas storage facility. The company serves energy market participants and the general public with a focus on infrastructure and market services. The website reflects a medium-sized enterprise with a professional and consistent brand presence. Technically, the site uses modern web technologies such as Bootstrap and jQuery, hosted behind Cloudflare, ensuring good performance and security. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism implemented via Cookiebot. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.

O

OffSec

offsec.com

75

OffSec is a professional cybersecurity training and certification provider specializing in hands-on learning through live labs and industry-recognized certifications such as OSCP. The company targets cybersecurity professionals and enterprises seeking to enhance their defensive capabilities against real-world threats. The website demonstrates a mature digital presence with modern technologies and a strong social media footprint. Technically, the site is well-implemented with HTTPS, cookie consent mechanisms, and integration of analytics and marketing tools, although explicit security headers and privacy policies are not evident in the provided content. Security posture is solid but could be improved by publishing detailed security and incident response policies. Overall, the site is professional, trustworthy, and well-positioned in the cybersecurity education market.

B

Byd Cichy Zasada

cichy-zasada.pl

47

Byd Cichy Zasada operates a regional automotive dealership website focused on the BYD Atto 2 DM-i model, targeting Polish customers interested in electric and hybrid vehicles. The site provides detailed vehicle specifications, pricing, and options to schedule test drives, positioning itself as a local point of contact for BYD car sales. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, integrating multiple third-party analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Analytics, and LinkedIn Insight Tag. The site employs HTTPS and a cookie consent mechanism, reflecting a basic level of digital maturity and compliance with cookie regulations.

I

iPro

ipro.lv

71

iPro is a Latvia-based IT solutions provider specializing in enterprise-grade security and IT infrastructure services. The company offers a range of services including cybersecurity, data center infrastructure, networking, and cloud solutions, targeting businesses that require scalable and secure IT environments. Their market position is that of a reliable and established technology partner within the Latvian and regional markets. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored for business clients. Technically, the site is built on WordPress with modern SEO and privacy compliance tools such as Yoast SEO and Cookiebot, indicating a mature digital presence. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and does not expose sensitive data, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, well-maintained, and compliant with GDPR, making it a credible digital asset for the company.

C

Camicetta

camicetta.pl

54

Camicetta.pl is a Polish small business specializing in the production of branded clothing such as sweatshirts, t-shirts, and hats, primarily serving corporate clients and educational institutions. The website presents a professional image with consistent branding and clear business focus. The technical infrastructure is based on Joomla CMS with Yootheme templates, integrating modern marketing and analytics tools including Google Analytics, Facebook Pixel, LinkedIn Insight, and Sales Manago marketing automation. Cookie consent is managed comprehensively via Cookiebot, indicating good privacy compliance. Security measures include HTTPS and Google reCAPTCHA, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data confirms domain legitimacy and appropriate registration history.

L

Litigato | Kancelaria Prawno-Podatkowa

litigato.pl

66

Litigato is a small Polish legal and tax advisory firm specializing in supporting taxpayers during tax audits, proceedings, and criminal tax defense. The website targets Polish taxpayers and businesses seeking expert legal and tax advice, positioning itself as a niche service provider in Warsaw. The digital infrastructure is built on WordPress with modern technologies such as Bootstrap, jQuery, and Google services, indicating a moderate to good level of digital maturity. The site is mobile optimized and includes a comprehensive cookie consent mechanism, reflecting awareness of privacy compliance requirements. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and policies could be improved. Overall, the website is professional and trustworthy but lacks explicit privacy and terms of service pages, as well as direct contact details, which slightly impacts privacy compliance and business credibility scores.

K

Kancelaria LexWibor

lexwibor.pl

50

Kancelaria LexWibor is a Polish legal consultancy specializing in invalidating WIBOR variable interest clauses in credit agreements. Founded in 2022, it targets individuals affected by WIBOR-related credit issues, offering niche legal services. The website is built on WordPress with Elementor and integrates modern tools like Google Tag Manager and Cookiebot for analytics and GDPR compliance. Hosting is provided by home.pl, a reputable Polish hosting provider. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks security headers and explicit privacy and terms policies. No contact emails or phone numbers are directly visible, which may impact user trust. Overall, the site is professional and focused but could improve transparency and security documentation.

K

Kancelaria Prawna Szeffner Wspólnicy

kancelaria-szeffner.pl

53

Kancelaria Prawna Szeffner Wspólnicy is a Warsaw-based legal firm offering comprehensive legal services to both companies and private individuals. Established in 2022, the firm positions itself as a local trusted provider specializing in areas such as divorce and legal advice. The website reflects a professional image with clear contact information and a focus on client engagement. Technically, the site is built on WordPress using Elementor, supported by Google Tag Manager and Cookiebot for analytics and privacy compliance. The hosting is provided by dhosting.pl, with domain registration consistent with the firm's founding date. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and security headers are not explicitly detected. Overall, the site demonstrates good digital maturity and compliance with GDPR requirements through Cookiebot integration.

C

Circle K

circlek.lv

63

Circle K Latvia operates as a prominent fuel and convenience retail provider, offering quality fuel products, food, and beverages to private individuals and businesses. The website demonstrates a mature digital presence with integration of modern marketing and analytics tools such as Google Analytics, Adobe Launch, and Salesforce Pardot. The technical infrastructure is based on Drupal CMS with additional third-party services enhancing user experience and marketing capabilities. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and bot detection, although some security headers could be explicitly confirmed and enhanced. Privacy compliance is well addressed with detailed cookie policies and GDPR-aligned consent management. Overall, the website reflects a professional and trustworthy business with a clear focus on customer convenience and digital engagement.

O

Olaines novada pašvaldība

olaine.lv

61

Olaines novada pašvaldība operates a municipal government website serving residents, businesses, and visitors of the Olaine municipality in Latvia. The site provides comprehensive local information including news, events, governance, social services, culture, and sports. It targets a broad audience including youth and visitors, positioning itself as an essential local government information portal. The website demonstrates a consistent and professional design with clear navigation and mobile optimization, reflecting a mature digital presence for a government entity. Technically, the site employs modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and Google Analytics for traffic analysis. Security measures include HTTPS enforcement and CSRF protection cookies, although explicit security headers and incident response policies are not evident in the provided data. Cookie management is robust with detailed categorization and user consent mechanisms compliant with GDPR principles. Overall, the website is safe, trustworthy, and well-aligned with its government function, though it would benefit from publishing explicit privacy and security policies and enhancing security headers. The domain registration data is consistent with the website's government nature and Latvian location, supporting its legitimacy.

N

NOS

nos.pt

57

NOS is a major Portuguese telecommunications company offering a wide range of services including 5G mobile networks, fixed and mobile internet, television, telephone, and alarm systems. The website reflects a mature digital presence with a comprehensive online store and customer support resources. The company targets general consumers in Portugal and maintains a strong market position as a leading telecom operator. Technically, the site leverages Adobe Experience Manager, Salesforce SDKs, and Google marketing and analytics tools, indicating a modern and integrated infrastructure. Security posture is solid with HTTPS, cookie consent, and bot protection, though explicit security policies and vulnerability disclosure mechanisms are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting NOS's credibility and customer engagement.

C

Chemi-Pharm

chemi-pharm.com

51

Chemi-Pharm is a well-established company founded in 2000, specializing in the development, production, and sale of disinfection agents, cleansing and skincare products, and detergents. The company positions itself as an industry leader in antiseptic and disinfection products, targeting professional and industrial customers. The website reflects a professional business model focused on manufacturing and sales within the healthcare sector. Technically, the website is built on WordPress CMS, utilizing modern technologies such as jQuery, Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. Hosting is provided by Radicenter, and the site is secured with HTTPS, showing a good level of digital maturity. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and DNSSEC could be improved. Privacy compliance is good with a clear cookie consent mechanism, but no explicit privacy policy or terms of service pages were detected in the provided content. Overall, the website is professional, trustworthy, and safe for general audiences.

M

Maxima Latvija

maxima.lv

67

Maxima Latvija operates one of the leading retail chains in Latvia, focusing on providing retail services to a broad consumer base. The website presents a professional and consistent brand image with a clear business description emphasizing family values and customer care. The technical infrastructure leverages modern JavaScript libraries and third-party services such as Cookiebot for cookie consent, Google Analytics for analytics, and Cloudflare for hosting and security. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and use of Cloudflare's protection, though explicit security policies and incident response contacts are not publicly visible. Privacy compliance is well addressed with comprehensive cookie and privacy policies and active consent mechanisms. Overall, the website is trustworthy and professionally maintained, with extensive use of analytics and marketing tools to optimize user engagement and advertising effectiveness.

R

Rimi Latvia

rimi.lv

64

Rimi Latvia operates a comprehensive retail and e-commerce platform serving the Latvian market. The website offers detailed information about their stores, promotions, loyalty programs, and corporate services, positioning itself as a leading supermarket chain in the region. The digital infrastructure leverages modern JavaScript libraries, asynchronous loading, and cloud-based image hosting to deliver a responsive and user-friendly experience. Privacy and cookie compliance are well implemented with Cookiebot and GDPR-aligned policies. Security posture is strong with HTTPS enforced and CSRF protections in place, though explicit security headers and incident response contacts could be improved. Overall, the website reflects a mature, professional retail business with a solid online presence and trustworthy domain registration.

M

MyFitness spordiklubi

myfitness.lv

49

MyFitness is the largest sports club network in Latvia, offering gym facilities, group classes, private training, and wellness services such as saunas. The website demonstrates a mature digital presence with a WordPress CMS, integrated WooCommerce for e-commerce capabilities, and advanced marketing and analytics tools including Google Analytics, Facebook Pixel, TikTok Pixel, and Hotjar. The site employs a comprehensive cookie consent mechanism compliant with GDPR, enhancing user privacy and transparency. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security and incident response policies are not publicly available. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

R

Red Sift

redsift.com

10

Red Sift is a cybersecurity company specializing in proactive security solutions across email, web, and PKI infrastructures. Their platform leverages AI to help businesses deploy and manage security protocols such as DMARC and TLS, aiming to create a fundamentally safer internet. The company has established a solid market presence with over 1,200 teams worldwide trusting their services. The website reflects a modern, professional digital presence built on Next.js and React, hosted with Cloudflare DNS services, and includes privacy compliance mechanisms such as Cookiebot for cookie consent. However, explicit privacy policies and terms of service are not clearly found in the provided content, which could be improved for transparency and compliance.

Marke Eifel is a regional branding and marketing platform operated by Eifel Tourismus (ET) GmbH, focused on promoting the Eifel region as a strong economic and tourism location. The website highlights the integration of economic development, tourism, and quality regional products under a unified brand supported by European and regional government funding. The target audience includes regional businesses, tourists, and quality product providers. Technically, the website uses modern web technologies including JavaScript, CSS, and Cookiebot for cookie consent management, hosted on netpeak.de infrastructure. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a professional and trustworthy regional brand presence.

CONVINUS is a Swiss-based company specializing in global mobility solutions, offering a comprehensive range of services including international employee assignments, visa and work permit assistance, tax and social security consulting, compliance, payroll, HR, and relocation. The company positions itself as an established player with a global network spanning over 100 countries, targeting corporate clients with international mobility needs. The website is professionally designed, primarily in German with English options, and provides clear navigation and relevant business content. Technically, the site uses a combination of jQuery, Bootstrap, and other JavaScript libraries, with hosting and domain registration consistent with the business claims. Security posture is good with HTTPS enabled and PCI DSS certification displayed, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with a comprehensive GDPR privacy policy and cookie consent managed via Cookiebot. Overall, the website is trustworthy and professional, with moderate to good technical and security maturity.

2

21Shares

21shares.com

10

21Shares operates as a pioneering issuer of exchange-traded crypto products (ETPs), providing institutional and retail investors with regulated and accessible investment vehicles for cryptocurrencies. The company positions itself as the world's first and largest crypto ETP issuer, offering a broad portfolio including single asset, diversified index, smart index, and staking products. Their market approach leverages existing brokerage and banking infrastructure to simplify crypto investments. Technically, the website is built on Webflow with modern JavaScript frameworks and integrates privacy and analytics tools such as Cookiebot, Hotjar, and Google Tag Manager. The site demonstrates excellent design, mobile optimization, and user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly detailed. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the website is professional and trustworthy, but the lack of WHOIS data and direct contact information slightly reduce business credibility.

V

Van Geenen

van-geenen.com

50

Van Geenen is a Dutch metal finishing company specializing in high-tech, esthetic, and industrial metal processing solutions. The company positions itself as a comprehensive partner offering services such as polishing, grinding, coating, and cleanroom assembly. The website is professionally designed with multilingual support and clear navigation, targeting business clients in manufacturing sectors. Technically, the site uses modern JavaScript frameworks including Alpine.js and Livewire, integrates Google Tag Manager and Cookiebot for analytics and consent management, and is hosted on TransIP infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks DNSSEC and explicit security headers. WHOIS data shows inconsistencies with a future domain creation date, which may be a data anomaly but slightly impacts trust. Overall, the website is credible, well-maintained, and compliant with GDPR requirements.

C

Conexiant

conexiant.com

63

Conexiant is a well-established healthcare content and education platform, founded in 2001, positioning itself as a leading global destination for trusted clinical content and educational resources. The website targets healthcare professionals and organizations, offering deep audience engagement and a broad education library. Technically, the site employs a modern technology stack including Google Tag Manager, Matomo, Hotjar, Microsoft Clarity, and Marketo, hosted on AWS infrastructure with Bootstrap and jQuery for frontend. The site demonstrates good mobile optimization and SEO practices but could improve accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit security policies. Privacy compliance is moderate, with a comprehensive cookie consent banner but no visible privacy policy or terms of service. Business credibility is high, supported by consistent branding and a long domain history. Overall, the site is professional, trustworthy, and safe for general audiences.

C

Conexiant

broadcastmed.com

63

Conexiant is a well-established healthcare content and education platform, founded in 2001, positioning itself as a leading global destination for trusted clinical content and healthcare education. The website targets healthcare professionals and organizations, offering a broad library of educational resources and audience engagement services. Technically, the site employs a modern technology stack including Bootstrap, Google Tag Manager, Matomo, Hotjar, Microsoft Clarity, and Cookiebot for analytics and privacy compliance. Hosting appears to be on Amazon AWS infrastructure, with a CMS likely based on Umbraco. The website demonstrates good mobile optimization and SEO practices, though accessibility could be improved. Security posture is solid with HTTPS enforced and domain status protections, but DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, contact information and terms of service are not clearly presented, which could impact user trust and legal compliance. Overall, the website is professional, trustworthy, and safe for general audiences.

Sihlcity is a prominent urban entertainment and shopping center located in Zurich, Switzerland. The website presents a well-structured digital presence with a focus on retail, dining, and entertainment services targeting the general public and visitors in Zurich. The business model revolves around providing a comprehensive shopping and leisure experience in a large-scale urban environment. The site is professionally designed with consistent branding and good content quality, supporting its market position as a major retail hub. Technically, the website leverages modern JavaScript frameworks, notably Vue.js, and is managed via Magnolia CMS. It integrates Cookiebot for cookie consent management and Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and performs moderately well, with good SEO practices observed. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies such as incident response or vulnerability disclosure. No critical vulnerabilities or suspicious content were detected. Privacy compliance is basic, with no visible privacy policy or terms of service on the homepage, which is a notable gap. Overall, the website is trustworthy and professional, with a solid business credibility score. Strategic improvements in privacy policy publication, security header implementation, and incident response transparency would enhance the security posture and compliance standing.

P

Plakatdyr.dk

plakatdyr.dk

71

Plakatdyr.dk is a Danish e-commerce retailer specializing in posters and home decor products, targeting a broad audience including families and individuals interested in decorative prints. The company has been operational since 2014 and maintains a strong online presence with active social media accounts and a high Trustpilot rating, indicating good market positioning within its niche. The website is built on a modern WordPress and WooCommerce infrastructure, utilizing popular plugins and page builders such as Elementor and Yoast SEO to optimize user experience and search engine visibility. The technical setup includes multiple third-party marketing and analytics tools, with cookie consent managed by Cookiebot, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and some security headers present, though improvements such as enabling DNSSEC and publishing a security policy would enhance trust. Privacy compliance is basic but present, with a privacy and cookie policy accessible and GDPR considerations implied. Overall, the website is professional, trustworthy, and well-structured, with room for enhancement in security and compliance documentation.

The Pathologist is a well-established healthcare media platform specializing in pathology and related scientific disciplines. Founded in 2006, it provides a range of content including news, insights, case studies, and educational resources targeted at pathologists, medical scientists, and healthcare professionals. The platform is part of the Conexiant network, indicating a solid business foundation and partnership ecosystem. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and marketing tools including Google Tag Manager, Matomo, and Cookiebot for consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and DNSSEC is not enabled. No explicit privacy policy or terms of service were detected in the provided content, which is a compliance gap. Overall, the website is professional and trustworthy with room for improvement in security and privacy transparency.

Q

Quickpay

quickpay.net

62

Quickpay is a well-established payment service provider founded in 1999, offering flexible and scalable online payment solutions to over 30,000 merchants with more than 4 million transactions processed monthly. The company provides a comprehensive product portfolio including payment method integrations, API access for developers, and a partner program, positioning itself as a reliable player in the European fintech and e-commerce market. The website reflects a professional and modern digital presence, leveraging technologies such as Hugo for static site generation, Cookiebot for consent management, and Google Tag Manager for analytics, ensuring good performance, accessibility, and SEO optimization. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, Quickpay demonstrates high business credibility and technical maturity with minor areas for improvement in security transparency and DNS security.

B

Boom Box |

boombox.eu

55

The website boombox.eu appears to be a small-scale business or project using WordPress with the Divi theme. The site is technically mature with modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and marketing tools like ConvertKit. However, the site lacks visible business descriptive content, contact information, and formal privacy or terms of service pages, which limits its transparency and user trust. The security posture is moderate with cookie consent implemented and tracking minimized, but no advanced security headers or incident response information is present. Overall, the site is accessible and functional but would benefit from enhanced compliance and transparency to improve trust and security.

H

HealthStream

cloud-cme.com

69

HealthStream is an established enterprise healthcare technology company specializing in learning and performance management solutions, including Continuing Education management. Their website presents a comprehensive suite of tools aimed at healthcare organizations and professionals to enhance educational programs and compliance. The digital infrastructure leverages modern web technologies such as Webflow CMS, Google Tag Manager, and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers and published security policies are absent. Overall, the website is professional, well-branded, and trustworthy, targeting healthcare institutions with a focus on education and credentialing.

Z

ZHERO Media

zheromedia.com

64

ZHERO Media is a professional digital communication and marketing agency offering a broad range of services including performance marketing, SEO, social media marketing, branding and design, content marketing, and art design. The company targets businesses seeking to enhance their brand positioning and ROI through strategic marketing campaigns. The website demonstrates a mature digital infrastructure with Webflow CMS, Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Security posture is solid with HTTPS and anti-CSRF cookies, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, but the professional presentation and client trust signals mitigate this risk. Overall, the website is well-designed, user-friendly, and compliant with GDPR cookie consent requirements.

B

Blis

blis.com

69

Blis is a technology company specializing in location data and analytics, providing businesses with consumer behavior insights to enhance marketing effectiveness. The company operates a professional and well-structured website built on WordPress with modern technologies such as Elementor and Bootstrap, hosted on AWS infrastructure. The site employs Google Tag Manager and LinkedIn Insight for analytics and marketing tracking, alongside Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and domain transfer protection enabled; however, the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is partial, with cookie consent mechanisms present but lacking explicit privacy and terms of service pages. Overall, the website reflects a credible and established business with a solid technical foundation but could enhance transparency and security practices.

L

Level27 BV

level27.eu

46

Level27 BV operates a professional hosting service website targeting agencies and businesses seeking reliable and hassle-free web hosting solutions. The company has been established since 2004 and positions itself as a niche provider offering fast, stable hosting with direct support. The website is built on modern technologies including Next.js and React, with a CMS likely based on Strapi. It employs Cookiebot for GDPR-compliant cookie management and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel. The site demonstrates good mobile optimization and SEO practices, with a clean and professional design.

E

euroAWK

euroawk.sk

64

euroAWK is a well-established international advertising company specializing in outdoor advertising media such as billboards, megaboards, citylights, and urban furniture across Slovakia, Czech Republic, and Hungary. With over two decades of market presence since 2001, euroAWK holds a leading position in the Slovak outdoor advertising sector, offering a comprehensive portfolio of advertising surfaces in prime locations. The website reflects a professional business model focused on providing effective advertising solutions to corporate clients seeking visibility in these regions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential marketing and analytics tools such as Google Analytics, Google Tag Manager, and Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization, SEO practices, and accessibility at a basic level. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though it lacks explicit incident response or security policy disclosures. Overall, the domain registration data aligns well with the business claims, showing a long-standing and legitimate presence. Strategic recommendations include adding explicit security and incident response policies, enhancing accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

T

Ton a.s.

ton.cz

65

Ton a.s. is a well-established furniture manufacturer specializing in designed chairs and tables, with a heritage spanning over 160 years. The company targets a general audience interested in quality handcrafted furniture, positioning itself as a reputable player in the manufacturing sector. The website reflects this with professional design and clear branding, emphasizing craftsmanship and design excellence. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and includes SEO best practices such as meta tags and structured data. However, some technical improvements could be made, such as adding security headers to enhance protection. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism, indicating good privacy compliance. The extensive use of third-party analytics and marketing tools suggests a moderate to extensive user tracking level, but the presence of consent mechanisms aligns with GDPR requirements. The lack of a visible privacy policy or terms of service page is a minor gap. Overall, the website is professional and trustworthy, with no signs of malicious content or security risks. The domain WHOIS data is privacy protected, which is standard for .eu domains, and does not raise concerns. Strategic recommendations include publishing explicit privacy and security policies, enhancing security headers, and providing more direct contact information to improve transparency and trust.

I

International Society of Nephrology

theisn.org

57

The International Society of Nephrology (ISN) is a globally recognized non-profit professional association dedicated to advancing kidney health worldwide through education, research, advocacy, and collaboration. The organization targets healthcare professionals, researchers, and nephrologists, providing key services such as training, conferences, publications, and global health initiatives. The website reflects a mature and professional digital presence consistent with a large healthcare non-profit entity. Technically, the website is built on WordPress with a modern technology stack including popular plugins and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for privacy compliance. The site is mobile-optimized, SEO-friendly, and uses structured data to enhance search visibility. Performance is moderate with good accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. While explicit security headers are not fully evident, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for organizations of this nature, and does not raise immediate concerns. Overall, the security posture is solid but could be improved by adding explicit security headers and publishing a security policy. The overall risk assessment is low, with the website demonstrating strong business credibility, good privacy compliance, and a trustworthy online presence. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and formalizing incident response contacts to further strengthen security and trust.

BIS Bremerhaven is a regional economic development organization focused on supporting businesses and sustainable growth in the Bremerhaven area of Germany. The website presents a professional and well-structured digital presence, offering information on business services, networking, sustainability initiatives, and sector-specific support. The company targets local businesses, entrepreneurs, and investors, positioning itself as a key regional economic facilitator. Technically, the website uses modern web technologies including JavaScript and Cookiebot for GDPR-compliant cookie management, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks published security policies and advanced security headers. Privacy compliance is basic, with no explicit privacy policy or terms of service pages found in the provided content. Overall, the website is trustworthy and professional, with room for improvement in security transparency and privacy documentation.

F

Future of Festivals GmbH

futureoffestivals.com

50

Future of Festivals GmbH operates a professional event and networking platform focused on the festival industry, targeting festival organizers, service providers, associations, decision-makers, and trainees. The website provides comprehensive event information, exhibitor registration, a festival campus for job seekers, and a delegates database, positioning itself as a niche but important player in the festival event sector in Germany. The company was founded in 2019 and maintains a consistent and professional brand presence online. Technically, the website is built on WordPress with a modern plugin ecosystem including Contact Form 7, Cookiebot for consent management, WP Statistics for analytics, and Wistia for video hosting. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Hosting is likely provided by InterNetX GmbH, consistent with WHOIS data. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Strategic improvements in security headers, incident response transparency, and terms of service publication would enhance trust and compliance further.

S

SOLEN, s. r. o.

mudr.online

54

mudr.online is an online platform operated by SOLEN, s. r. o., providing online events, webinars, and AD tests primarily for medical professionals in Slovakia. The website is professionally designed with a clear focus on educational services in the healthcare sector. The platform leverages modern web technologies including jQuery, Vimeo API, and Cookiebot for consent management, ensuring GDPR compliance. The domain registration and business information are consistent and legitimate, supporting the credibility of the service. Security posture is good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers could be improved. Overall, the site presents a trustworthy and compliant online educational service.

M

Materials innovation institute (M2i)

m2i.nl

46

Materials innovation institute (M2i) is a well-established network organization specializing in materials research, connecting industry, academia, and research institutes primarily in The Netherlands and Europe. The website reflects a professional and focused business model aimed at facilitating collaboration and innovation in materials science. The organization targets industry professionals and academic researchers, providing support in product development and production processes. The site is built on a mature WordPress infrastructure using the Avada theme and integrates modern web technologies and analytics tools with privacy considerations.

C

CEFIC

tdma.info

69

The website www.tdma.info represents TDMA under the European Chemical Industry Council (CEFIC), serving as an industry association platform focused on the chemical sector in Europe. The site targets industry professionals and stakeholders, providing information and advocacy services. The technical infrastructure is based on WordPress CMS with the Divi theme, enhanced by popular plugins such as Yoast SEO, Slider Revolution, and Cookiebot for cookie consent management. Google Analytics is used for visitor tracking. The site is multilingual, supporting several European languages, indicating a broad regional audience. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and explicit privacy or security policies. WHOIS data is unavailable due to privacy protection, which is typical for such organizations. Overall, the site is professional and trustworthy but could improve transparency by publishing privacy and security policies and contact information.

V

Van Geenen

vangeenen-metallschleiferei.de

43

Van Geenen is a specialized B2B company offering comprehensive metal finishing and processing solutions targeting industrial, high-tech, and aesthetic sectors. The company positions itself as a one-stop-shop for metal refinement services including polishing, grinding, coating, and cleanroom packaging. The website reflects a professional and consistent brand image with clear service offerings and a project portfolio, catering primarily to industrial clients in the Netherlands and surrounding regions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Livewire, integrates Google Tag Manager for analytics, and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks advanced security headers and published security policies. The domain is newly registered in 2025 with minimal WHOIS registrant information, which slightly reduces trust but is offset by the professional website presentation and clear contact details. Overall, the website is well-structured, user-friendly, and business-focused, with room for improvement in privacy and security transparency.

Böllinghaus Steel GmbH is a family-owned manufacturing company specializing in the production of high-quality stainless steel profiles, nickel alloys, and titanium products. Operating its own factory in Portugal, the company serves demanding industrial sectors including pharmaceutical, chemical, medical technology, aerospace, and energy. The website reflects a professional business with a clear focus on quality and customer-specific solutions. The company maintains a moderate digital maturity with a CMS-based website, cookie consent compliance, and integration of analytics and marketing tools. Security posture is adequate with use of CSRF tokens and cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is well-structured, GDPR compliant, and targets industrial clients effectively.

C

Castelli-Cycling

castelli-cycling.com

71

Castelli-Cycling is a premium cycling apparel brand offering high-performance and custom cycling clothing targeted at cycling enthusiasts and athletes globally. The website is professionally designed with a clear focus on e-commerce retail, providing a broad range of products and custom options. The company maintains a consistent brand presence with multilingual support and strong social media integration. Technically, the site uses modern web technologies including Google Analytics, HubSpot forms, Cookiebot for consent management, and Matomo analytics, hosted on a CMS platform named Kleecks. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced, use of reCAPTCHA Enterprise, and cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS domain registration data is a notable concern for domain transparency and trustworthiness. Overall, the site is reliable and professional but would benefit from enhanced domain registration transparency and explicit security policies.

E

Ekopak

ekopak.be

54

Ekopak is a medium-sized Belgian company specializing in sustainable industrial water and wastewater treatment solutions. The company focuses on circular water use to help industrial clients reduce costs and address water scarcity. Their business model is B2B, offering services such as water treatment, wastewater treatment, operational support, and green energy solutions. The website is professionally designed, multilingual, and optimized for SEO and mobile use. Technically, it is built on WordPress with modern plugins and integrates analytics and marketing tools like Google Tag Manager, Hotjar, and Cookiebot for consent management. Security posture is good with HTTPS and domain transfer protection, but lacks explicit security policies and headers. Privacy compliance is supported by a cookie consent mechanism, though no privacy policy or terms of service were found in the provided content. Overall, the domain registration is consistent and legitimate, supporting the business credibility.

O

Outokumpu

outokumpu.com

79

Outokumpu is a globally recognized leader in sustainable stainless steel manufacturing, offering a broad range of stainless steel products tailored for various industrial applications. The company positions itself strongly in the manufacturing sector with a clear focus on sustainability and innovation. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation aimed at industrial clients, investors, and sustainability-conscious businesses. Technically, the site employs modern marketing and analytics technologies such as Google Tag Manager, Cookiebot, Eloqua, and Hotjar, indicating a sophisticated digital marketing infrastructure. Security-wise, the website enforces HTTPS, employs cookie consent mechanisms, and uses CSRF protection tokens, reflecting good security hygiene. However, explicit security policies and incident response information are not publicly available, which could be improved. The WHOIS data is not publicly accessible, likely due to privacy protection, which is common for large enterprises but reduces transparency. Overall, the website is professional, secure, and compliant with privacy regulations, with minor areas for enhancement in security transparency and incident response readiness.

O

Obeta

obeta.de

70

The website obeta.de appears to be a German-language e-commerce or product catalog platform, leveraging modern web technologies such as Next.js and custom JavaScript frameworks like Sirius and Oxomi. It integrates third-party services including Cookiebot for cookie consent management and Google Maps API for location services. The site is accessible without any blocking or WAF challenges, indicating good availability. However, the absence of explicit privacy policies, terms of service, and contact information on the main page limits transparency and user trust. The WHOIS data is minimal and shows an unusual domain status 'connect', which may indicate incomplete registration or a parked domain, raising concerns about domain legitimacy. Overall, the technical infrastructure is modern and moderately optimized for performance and mobile use, but security posture could be improved by implementing security headers and explicit policies.

K

Kardioakademie IKEM

kardioakademie.cz

64

Kardioakademie IKEM is a specialized educational platform focused on postgraduate training in cardiology, offering modular courses targeted at medical professionals and cardiology specialists primarily in the Czech Republic. The website presents a professional and consistent brand image with good content quality and relevant educational information. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The infrastructure is hosted via a Czech registrar and hosting provider, ensuring regional consistency and domain legitimacy. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, although there is room for improvement in security headers and explicit privacy policy documentation. Overall, the site is safe, trustworthy, and well-positioned within its niche educational market.

V

Verkehrsverbund Rhein-Mosel

vrminfo.de

55

The Verkehrsverbund Rhein-Mosel (VRM) operates as a regional public transportation network in Germany, coordinating 47 transport companies across a large geographic area serving approximately 1.3 million residents. The website provides comprehensive information about public transport lines, ticketing, and network services, targeting regional commuters and travelers. The site is built on the TYPO3 CMS platform, indicating a mature and professional technical infrastructure. Integration with Cookiebot and Google Analytics demonstrates a commitment to privacy compliance and user analytics. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and policies could enhance protection. Overall, the website is accessible, well-structured, and trustworthy for its intended audience.

L

Luzerner Kantonalbank

lukb.ch

75

Luzerner Kantonalbank (LUKB) is a leading regional bank based in Luzern, Switzerland, providing a broad range of financial services including retail banking, mortgages, investment products, and personalized financial advisory. The website targets private customers primarily in the Luzern and Central Switzerland region, emphasizing personal service and innovative banking solutions. The bank maintains a strong market position as a trusted cantonal bank with a professional digital presence. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, and HTMX for dynamic content. It is well-optimized for mobile devices and accessibility, with good SEO practices and comprehensive metadata. The site uses HTTPS with strong security headers, ensuring secure communications and protecting user data. From a security perspective, the site demonstrates good practices including secure cookie handling, consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly detailed, representing an area for improvement. The privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website is professional, trustworthy, and secure, with extensive content relevant to its audience. It integrates multiple analytics and marketing tools responsibly, maintaining transparency and user control over data. Strategic recommendations include publishing detailed security policies, vulnerability disclosure mechanisms, and enhancing transparency around data protection officers to further strengthen trust and compliance.

S

safetytest

safetytest.eu

50

safetytest.biz is a German-based business specializing in providing complete solutions for VDE electrical safety testing. The company offers products, support portals, and a knowledge database targeting professionals and businesses requiring compliance with electrical safety standards. The website is built on WordPress and uses modern web technologies including jQuery, FontAwesome, and Cookiebot for cookie consent management. The presence of support and service portals indicates a mature service model. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response information. WHOIS data is unavailable, which reduces trustworthiness but the website content and external references support legitimacy. Overall, the site is professional, well-structured, and compliant with GDPR cookie consent requirements.

S

safetytest

safetytest.biz

50

safetytest.biz is a German-based business specializing in providing complete solutions for VDE electrical safety testing. The company offers a range of products and services including testing equipment and support portals, targeting professionals and businesses in the electrical safety sector. The website is professionally designed using WordPress CMS and integrates modern technologies such as Cookiebot for consent management and Matomo for analytics. The site is well-structured, mobile-optimized, and provides clear navigation to service and support resources. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the overall website content and external links indicate a legitimate and professional operation.