Security Directory

P

PayZen

payzen.eu

61

PayZen is a French payment platform offering a comprehensive suite of payment solutions tailored for e-commerce and remote payment acceptance. Backed by the Lyra Network group, it holds a strong market position in France and internationally, providing services compliant with PCI DSS and 3DS2 protocols. The platform supports multiple payment methods and channels, including online, mobile, payment links, instant transfers, and virtual terminals, targeting merchants and public sector entities. Technically, the website is built on WordPress with modern JavaScript frameworks and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS, PCI DSS certification, and fraud prevention tools, though some security headers could be improved. Privacy compliance is well addressed with a clear GDPR policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

A

Agence Pan !

pan-lesite.com

52

Agence Pan ! is a French digital communication agency founded in 2011, specializing in bespoke website design, digital strategy, branding, and social media management. The agency targets a broad range of clients from small to large enterprises seeking creative and personalized digital solutions. Their market position is that of a creative and experimental agency with a recognized reputation for excellence. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted by OVH sas, and integrates WordPress CMS for content management. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the site uses HTTPS with domain protections but lacks some security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained.

S

StreetArtMap.eu

streetartmap.eu

54

StreetArtMap.eu is a niche community-driven platform dedicated to mapping and showcasing street art and graffiti in Strasbourg, France. It offers an interactive map, user submissions, categorized artworks, and a blog to engage local and visiting street art enthusiasts. The website leverages WordPress CMS with modern web technologies including Google Maps API and SEO optimizations. Social media integration and active content updates enhance its community presence. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and formal incident response policies. Privacy compliance is basic but present, with GDPR considerations evident in cookie management. Overall, the site is trustworthy and professionally maintained, serving a small but engaged audience.

R

Radio RBS

radiorbs.com

44

Radio RBS is a small, community-focused media entity based in Strasbourg, France, with a history dating back to 1980. It operates as a local FM radio station with 24/7 broadcasting and internet streaming, offering urban music and cultural programming. The website reflects a well-branded and consistent digital presence with active social media integration and event promotion. Technically, the site is built on WordPress 4.9.8 with common web technologies including jPlayer for audio streaming and social media SDKs. While the site is accessible and mobile-optimized, it lacks some modern security headers and up-to-date CMS versions, which could pose risks. The absence of WHOIS registration data and privacy policy pages reduces trust and compliance posture. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

S

Stradim : Promoteur alsacien de programmes immobiliers

stradim.fr

48

Stradim is a French real estate development company specializing in new residential properties such as apartments and houses across multiple French regions. Established in 1990, the company emphasizes eco-responsible construction, local engagement, and offers customizable residences. The website is built on Drupal 7 and integrates modern marketing and consent management tools such as Google Tag Manager and Didomi CMP. While the site is professionally designed and content-rich, it lacks explicit privacy and terms of service pages, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. Security posture is good with HTTPS and consent mechanisms but could be improved with additional security headers and updated CMS versions.

S

Socomec

socomec.fr

65

Socomec is a French-based manufacturer specializing in electrical equipment focused on the performance and safety of low voltage electrical networks. The company maintains a strong international presence with multiple country-specific domains and offers products and services tailored to industrial and commercial electrical network operators. The website is professionally designed using Drupal CMS and integrates modern analytics and marketing tools such as Piwik PRO and AB Tasty. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism in French. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The absence of WHOIS data limits full domain trust verification but the website content and structure support legitimacy. Overall, Socomec presents a mature digital presence suitable for its industry and audience.

B

Brasserie Meteor

brasserie-meteor.fr

39

Brasserie Meteor is a historic family-owned brewery based in France, established since 1640. The company produces a variety of beers and operates a hospitality venue called Villa Meteor. Their website is professionally designed using WordPress and Elementor, supporting multiple languages to cater to a broad audience. The digital infrastructure is modern with HTTPS enabled and integration of analytics tools such as Google Analytics and Metricool. However, the absence of visible privacy and cookie policies indicates room for improvement in compliance. Security posture is moderate with no evident vulnerabilities but lacks advanced security headers and vulnerability disclosure mechanisms. The domain WHOIS data is unavailable, limiting verification of domain legitimacy. Overall, the website presents a trustworthy and professional image but should enhance privacy compliance and security transparency.

F

Festival Musica

festivalmusica.fr

48

Festival Musica is an international contemporary music festival based in Strasbourg, France, founded in 2019. The organization focuses on cultural event programming, ticket sales, and community engagement through various media including podcasts and a magazine. The website reflects a professional and consistent brand presence with strong ties to regional and national cultural institutions. Technically, the site uses modern frontend technologies such as Alpine.js and Livewire, hosted by OVH, and integrates privacy-respecting analytics via Fathom. Security posture is good with HTTPS enforced and CSRF protections, though some security headers and explicit privacy mechanisms are missing. Contact is primarily via a web form, with no direct emails or phone numbers published. Overall, the site is trustworthy, well-designed, and serves a general audience interested in contemporary music and culture.

S

STUDIO MAX MEDIA SK, s.r.o.

maxmedia.sk

53

STUDIO MAX MEDIA SK, s.r.o. is a small Slovak technology company specializing in comprehensive web solutions, graphic design, and content management services. Founded in 2005, the company has a strong portfolio including localization and management of websites for major automotive brands and public institutions. Their expertise centers around the MODX CMS platform, multimedia production, and integration of data services. The website reflects a professional and consistent brand image with clear navigation and rich content tailored to a broad audience. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript with jQuery, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. However, no explicit hosting provider or advanced frameworks beyond MODX CMS are identified. From a security perspective, the site uses HTTPS (assumed from domain and modern standards though not explicitly confirmed in data), but lacks visible security headers and published security or privacy policies. No forms or sensitive data collection points are present, reducing immediate risk. The absence of privacy and cookie policies is a compliance gap, especially under GDPR. No vulnerability disclosures or incident response contacts are provided. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in privacy compliance, security headers, and transparency would enhance the security posture and regulatory adherence, supporting long-term business credibility.

The website drevojecesta.cz is a newly registered domain with minimal content, consisting solely of an iframe embedding an external site (parking.vedos.cz). There is no visible business information, metadata, or contact details on the site, which limits the ability to assess the company's market position or services. The domain registration is transparent and consistent with the website's newness, but the lack of content and business data reduces credibility and trust. Technically, the site is very basic with no detected CMS, frameworks, or analytics tools. The hosting provider is WEDOS, as indicated by the name servers. The website lacks SEO optimization, accessibility features, and mobile responsiveness. No security headers or SSL configuration details were found in the provided data, and the site does not present any privacy or cookie policies. From a security perspective, the site shows no signs of WAF or blocking mechanisms but also lacks fundamental security best practices such as HTTPS and security headers. There are no forms or data collection points, which reduces immediate risk but also indicates a lack of engagement or business functionality. The absence of privacy compliance documentation and contact information is a significant gap. Overall, the website appears to be in an initial or placeholder state with very limited content and no visible business or security maturity. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear contact and business information, and improving content quality and technical implementation to enhance trust and compliance.

A

AU-MEX s.r.o.

osmo.cz

57

The website www.osmo.cz represents AU-MEX s.r.o., a company specializing in natural wood coatings and protective products under the OSMO brand. The business targets both consumers and professionals interested in natural oils and waxes for wood protection, offering a range of products including interior and exterior wood paints, maintenance items, and accessories. The site supports e-commerce functions and provides educational content such as blogs and usage calculators. Technically, the website employs established frontend technologies like Bootstrap, jQuery, and integrates tracking tools such as Google Analytics and Facebook SDK. It is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit privacy policy documentation, which are areas for improvement. The absence of WHOIS registration data reduces domain trustworthiness, though the website content and business information appear legitimate and consistent. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.

O

OlivaCreativeFactory

olivacreativefactory.com

54

Oliva Creative Factory is a small business incubator based in São João da Madeira, Portugal, focused on supporting creative talents and proven market projects to build sustainable businesses. The website is built on the Wix platform, leveraging standard Wix technologies and polyfills to ensure compatibility and performance. The site content is primarily in Portuguese and targets entrepreneurs and startups in the creative sector. Technically, the site demonstrates moderate performance and mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS implied and some JavaScript security measures, but lacks explicit security headers and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust. No contact information or social media presence is evident, limiting direct engagement opportunities. Strategic recommendations include improving transparency with privacy and cookie policies, enhancing security headers, and providing clear contact channels to boost credibility and compliance.

S

Sanjotec

sanjotec.com

56

Sanjotec is a technology and science park based in São João da Madeira, Portugal, focused on supporting entrepreneurship and accelerating technology and creative projects. Positioned in a strongly industrial region, it aims to foster an ecosystem linked to Industry 4.0 and new product development. The website is professionally designed with good content quality and mobile optimization, but lacks critical compliance and security documentation such as privacy policies, cookie consent, and terms of service. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified. Technically, the site uses modern web standards but lacks visible security headers and analytics tools. Overall, the security posture is moderate with room for improvement in compliance and transparency.

E

Edubox

edubox.pt

57

Edubox is a Portuguese technology company specializing in the development and implementation of educational software solutions and services for municipalities and schools. Founded in 2010, it has established itself as a reputable provider of integrated management systems, educational resources, and consultancy services. The company maintains a professional online presence with clear branding, contact information, and social media engagement. Technically, the website employs modern JavaScript libraries and tracking tools, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and standard security headers, though there is room for improvement in privacy compliance, particularly regarding cookie consent and incident response disclosures. Overall, Edubox presents a trustworthy and credible business profile with a focus on education technology.

T

Turismo Industrial S. João da Madeira

turismoindustrialsjm.pt

50

Turismo Industrial S. João da Madeira is a small tourism promotion entity focused on industrial heritage tourism in São João da Madeira, Portugal. The website serves as a portal to promote the city's industrial past and cultural tourism offerings, targeting tourists interested in industrial and cultural experiences. The business operates primarily as a local/regional tourism promoter with a focus on heritage and visitor engagement. Technically, the website is built on WordPress using Bootstrap and Font Awesome, with moderate performance and good mobile optimization. It integrates Google Analytics and Facebook tracking for visitor insights but lacks comprehensive privacy and cookie policies, which impacts GDPR compliance. Security posture is moderate with HTTPS enabled but missing important security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

V

Vihta-ajanvaraus

vihta.com

61

Vihta-ajanvaraus is a Finnish technology company specializing in cloud-based appointment booking and customer flow management solutions. Their platform enables organizations, particularly in healthcare and small business sectors, to streamline appointment scheduling, reduce cancellations, and manage customer queues efficiently. The company leverages modern web technologies and offers multilingual support with dedicated domains for Finnish, English, and German markets. Technically, the website is built on WordPress with advanced plugins for SEO, analytics, and GDPR compliance, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Overall, Vihta presents a professional and user-friendly service with solid market positioning in healthcare technology.

S

STACKIT

stackit.cloud

67

STACKIT is a German cloud service provider offering enterprise-grade cloud infrastructure, colocation, and managed solutions with a strong emphasis on data sovereignty and GDPR compliance. The company positions itself as a trusted partner for businesses seeking EU-secure cloud services. The website demonstrates a mature digital presence built on WordPress, integrating modern SEO and privacy tools such as Rank Math and OneTrust. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a professional and trustworthy cloud service provider with a clear focus on compliance and customer trust.

M

mPulse

healthtrio.com

71

mPulse is a well-established company founded in 1998, specializing in digital health engagement solutions. Their product suite includes predictive analytics, omnichannel engagement, health portals, content management, acquisition and payments, and a HITRUST-certified Health Experience and Insights Platform (HXI). The company targets healthcare organizations such as health plans, providers, and related stakeholders, positioning itself as a leader in the healthcare technology sector. The website demonstrates professional design, clear navigation, and strong branding consistency, reflecting a mature digital presence. Technically, the website is built on WordPress using Elementor as the page builder, with integrations including jQuery, HubSpot Analytics, Google Tag Manager, and Warmly widgets. Hosting appears to be on Amazon AWS infrastructure. The site shows good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no publicly available security policy, incident response contact, or vulnerability disclosure information, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were found. Overall, the website and business present a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies with consent mechanisms, adding security and incident response information, and implementing security headers to enhance protection and compliance.

P

Prometeus

iperweb.com

44

IperWeb is a small, established hosting provider founded in 1997, offering a variety of hosting solutions including cloud infrastructure, virtual private servers, and business web hosting. The company emphasizes customer satisfaction, performance, and scalability. The website is professionally designed with clear navigation and relevant content targeting businesses and individuals seeking reliable hosting services. Technically, the site uses standard web technologies including jQuery and Flickity for UI components, and employs Google Analytics and Piwik for visitor tracking. However, there is no visible cookie consent mechanism, and privacy policies are hosted on a related domain rather than the main site. Security posture is moderate; the domain is protected with clientTransferProhibited status but lacks DNSSEC and visible security headers. WHOIS data is consistent with the business claims, showing a long domain age and no privacy protection, supporting legitimacy. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

Prometeus is a small, established Italian hosting provider offering a range of cloud, VPS, and web hosting services since 1997. Their market position is that of a niche provider focused on professional and corporate clients, with multiple data center locations in Europe. The website demonstrates a moderate level of digital maturity with use of standard web technologies and analytics tools. Security posture is adequate but could be improved with better security headers and explicit incident response contacts. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Strategic recommendations include verifying domain registration, enhancing security policies, and improving contact transparency.

The domain webb.se is registered since 2001 and is currently protected behind a Cloudflare security challenge page (Turnstile captcha), which blocks direct access to website content. Due to this, no business information, contact details, or policies are publicly accessible. The website appears to rely on Cloudflare for security and bot mitigation. The WHOIS data is consistent and indicates a legitimate registration with no privacy protection, suggesting transparency in ownership. However, the lack of accessible content and policies limits the ability to assess the business model, services, or compliance posture. The technical infrastructure is modern in terms of security tooling but lacks visible SEO and accessibility features. Overall, the site is currently inaccessible for full analysis and scores low on content quality and privacy compliance.

Z

Zimbra

zimbra.com

74

Zimbra operates as a provider of cloud-hosted collaboration software and email platforms, emphasizing open standards, low-risk alternatives, and data sovereignty. The company targets enterprises and businesses seeking integrated collaboration solutions with productivity add-ons. The website reflects a medium-sized technology business with a professional online presence, offering downloadable products, documentation, and trial options. Technically, the site is built on WordPress and leverages modern JavaScript libraries and analytics tools such as HubSpot, Google Tag Manager, and New Relic for performance monitoring. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is unavailable, which raises some trust concerns despite the professional appearance. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

F

FOSDEM

fosdem.org

55

FOSDEM is a well-established, non-profit event focused on free and open source software development, held annually in Brussels, Belgium. It serves thousands of developers worldwide, providing a platform for collaboration, knowledge sharing, and community building. The website reflects this mission with clear event information, schedules, and sponsor details, targeting software developers and open source enthusiasts. Technically, the website is built using the nanoc static site generator, delivering a simple and maintainable infrastructure. The site is moderately optimized for performance and mobile devices, with good SEO practices evident through meta tags and structured content. However, there is room for improvement in accessibility and modern security practices. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is trustworthy and professional, with strong business credibility supported by long domain age and reputable sponsors. The lack of privacy and security policies lowers the compliance score, but the site poses low risk given its informational nature and minimal data collection. Strategic improvements in security headers, privacy documentation, and DNS security would enhance the site's posture and user trust.

D

Die Klett Gruppe

klett-gruppe.de

60

Die Klett Gruppe is a leading European educational company operating with over 90 subsidiaries across 24 countries. The company focuses on publishing educational media, adult and continuing education, and managing kindergartens and schools. Their website reflects a professional and consistent brand image, targeting educational institutions and partners. Technically, the site is built on TYPO3 CMS and uses modern JavaScript libraries such as jQuery, lodash, and FullPage.js, providing a moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and uses a cookie consent mechanism with Matomo analytics, but lacks explicit security policies and advanced security headers. Overall, the website is trustworthy and well-maintained, though improvements in security transparency and incident response readiness are recommended.

M

MWAY DIGITAL GmbH

mway.io

75

MWAY DIGITAL GmbH is a German-based technology company specializing in innovative software solutions for enterprises and educational institutions. Their offerings include mobile solutions, enterprise applications, device management, and building automation. The company positions itself as a digital pioneer with a strong focus on modern, intuitive software and partnership-driven business. The website reflects a professional and consistent brand image, targeting business and education sectors with clear messaging and client references from reputable companies.

O

otris software AG

otris.com

66

otris software AG is a German-based technology company specializing in digital solutions for legal, compliance, contract, and data protection management. Founded in 1998, the company offers a comprehensive suite of software products designed to help organizations act legally compliant, minimize risks, and create transparency through digital processes. Their market position is supported by a broad customer base including large corporations and SMEs across various industries. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the website is built on WordPress CMS with modern plugins and performance optimizations such as WP Rocket and Borlabs Cookie for consent management. The tech stack includes JavaScript libraries like jQuery and Slick Carousel, and the site integrates Google Tag Manager and Matomo for analytics. Mobile optimization and SEO practices are good, contributing to a fast and user-friendly experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not fully detected, and no public security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data is consistent with the company’s claims, showing a legitimate and appropriately aged domain. Overall, otris software AG demonstrates a strong business and technical foundation with good security and privacy compliance. Strategic improvements could include publishing a dedicated security policy, enhancing security headers, and providing incident response information to further strengthen trust and compliance.

Trupanion is a leading pet insurance provider specializing in comprehensive medical coverage for dogs and cats across the United States, Canada, and Puerto Rico. The company emphasizes unlimited payouts, direct payment to veterinarians at checkout, and coverage for hereditary and chronic conditions. Their market position is strong, supported by veterinarian endorsements and a large member base. The website is professionally designed, mobile-optimized, and rich in relevant content, providing a seamless user experience with clear navigation and trust signals such as customer testimonials and third-party reviews. Technically, the website employs modern technologies including Bootstrap, jQuery, Google Tag Manager, Optimizely for A/B testing, and Osano for consent management, indicating a mature digital infrastructure. Performance is moderate with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not clearly disclosed. The WHOIS data is unavailable or privacy protected, which reduces transparency regarding domain ownership and registration details. Despite this, the website's content quality, external trust signals, and professional presentation support its legitimacy. Overall, the site demonstrates a strong security and privacy compliance posture with room for improvement in explicit security disclosures and WHOIS transparency.

A

Aflac Medicare Supplement

aflacmedicaresupplement.com

73

The website www.aflacmedicaresupplement.com represents a Medicare Supplement insurance offering underwritten by Tier One Insurance Company, a subsidiary of Aflac Incorporated, and administered by Aetna Life Insurance Company. It targets Medicare beneficiaries seeking supplemental insurance to cover gaps in Original Medicare. The site provides quote request forms, prominently displays contact phone numbers, and uses trusted branding and official Medicare resources. Technically, the site employs modern JavaScript frameworks (Vue.js), integrates multiple analytics and marketing tools, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit security policies and incident response information are absent. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and affiliation with reputable insurance entities. Overall, the site is functional, professional, and trustworthy from a user perspective but requires verification of domain registration to fully confirm legitimacy.

W

Wernigerode am Harz

wernigerode-tourismus.de

58

The website www.wernigerode-tourismus.de serves as a regional tourism portal for Wernigerode am Harz, Germany, providing information about local attractions such as Fachwerkhäuser, the Rathaus, the Schmalspurbahn, and the Brocken in the Nationalpark. The site targets tourists and visitors interested in exploring the Harz region. Technically, the site is built on TYPO3 CMS, a robust and professional content management system, and uses modern web technologies including CSS and JavaScript with Mapbox for mapping features. The hosting is provided by SchlundTech, a reputable hosting provider. Security posture is moderate; HTTPS is assumed but no explicit security headers or advanced security policies were detected. Privacy compliance is low due to the absence of privacy and cookie policies. No contact information or incident response details are present, limiting direct communication channels. Overall, the site is functional and professionally designed but would benefit from enhanced security and privacy compliance measures.

Z

Zoo Halle

magische-lichterwelten.de

52

Magische Lichterwelten is an event-focused website promoting a fantasy light exhibition titled 'Fantasy Island' hosted at Bergzoo Halle in Germany. The site targets families and visitors interested in immersive fantasy-themed light shows, offering ticket sales for both date/time-bound and flexible entry options. The business operates in the hospitality and event sector, leveraging partnerships with local media and sponsors to enhance its market presence. Technically, the website is built on WordPress using the OceanWP theme and integrates modern event calendar and UI libraries such as FullCalendar and SweetAlert2. SEO is enhanced via the Yoast SEO plugin, and the site demonstrates good mobile optimization and moderate performance. Hosting is provided by RZone, with secure HTTPS enforced. From a security perspective, the site employs HTTPS and cookie consent mechanisms, but lacks explicit advanced security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies in place, indicating GDPR adherence. Overall, the website presents a professional and trustworthy digital presence for the event, with good content quality and business credibility. Recommendations include enhancing security headers, adding a security.txt file, and improving accessibility features to further strengthen the security posture and compliance.

L

Lichterwelt Magdeburg – Eröffnung am 20. November 2025

lichterwelt-magdeburg.de

43

The website www.lichterwelt-magdeburg.de serves as the official online presence for the Lichterwelt Magdeburg, a large-scale public Christmas and winter lighting event in Magdeburg, Germany. The event features over a million LEDs illuminating the city with artistic light installations, free to the public from November 20, 2025, to February 2, 2026. The site targets local residents and tourists interested in cultural and festive events, providing event details, highlights, maps, and social media links. The business model focuses on event promotion and enhancing regional tourism appeal. Technically, the website is built on TYPO3 CMS, employing modern web standards including responsive design, optimized images, and JavaScript-based interactive elements such as countdown timers and image galleries. It integrates Matomo Analytics and Facebook Pixel for visitor tracking, alongside a GDPR-compliant cookie consent mechanism powered by Klaro. The site demonstrates good mobile optimization and SEO practices but lacks explicit security headers and detailed security or incident response policies. From a security perspective, the site uses HTTPS and implements cookie consent, indicating awareness of privacy regulations. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. No forms collecting personal data were detected, reducing immediate data protection risks. The WHOIS data shows a legitimate domain setup with UI-DNS name servers and no privacy protection masking, consistent with the event's public nature. Overall, the website is professionally designed and trustworthy, with moderate technical sophistication and good privacy compliance. The absence of contact emails or phone numbers is a minor limitation for direct communication. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve trust and compliance.

L

Lutherstadt Wittenberg Marketing GmbH

wittenberger-reformationsfest.de

47

The Wittenberger Reformationsfest website is a professionally designed and well-structured platform promoting the 2025 cultural festival in Wittenberg, Germany. It provides comprehensive event information, including schedules, locations, and highlights, targeting visitors interested in historical and religious celebrations. The site is managed by Lutherstadt Wittenberg Marketing GmbH, a small government-related marketing entity. Technically, the site uses modern web technologies including Craft CMS, Splide.js for sliders, and Alpine.js for interactivity, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is trustworthy, with verified contact details and active social media presence.

E

Eurométropole de Strasbourg

destination-meinau.eu

47

Destination Meinau is a public infrastructure project website managed by the Eurométropole de Strasbourg, focused on the renovation and expansion of the Meinau stadium. The site serves as an information hub for residents, visitors, and stakeholders, providing updates on construction progress and project details. The project is positioned as an ecological and community-oriented initiative with strong regional support. Technically, the website is built on WordPress, leveraging modern SEO and privacy tools such as Yoast SEO and Matomo analytics, hosted by OVH SAS. The site demonstrates good digital maturity with mobile optimization and GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Overall, the website is trustworthy, professional, and well-aligned with its public sector mission.

P

Planigy

planigy-par-es.fr

56

Planigy par ES is a commercial brand under the parent company ÉS Énergies Strasbourg S.A., specializing in renewable energy solutions focused on photovoltaic solar panels and electric vehicle charging infrastructure in the Alsace region of France. The company targets residential, professional, agricultural, and municipal customers, positioning itself as a trusted local expert with a strong track record of over 2500 installations since 2007. The website reflects a professional and modern digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern technologies including React components and Matomo analytics, optimized for mobile and SEO. Security posture is good with HTTPS and consent management implemented, though some security headers and explicit security policies are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Artefact

artefact.fr

66

Artefact is a well-established French technology group founded in 1991, specializing in digital agency services, datacenter hosting, IT services, and network operations. The company operates through three complementary business units: Artefact (digital agency), Arteone (datacenter and IT services), and Artewan (network operator). Their market position is strong regionally in the South-West of France, serving businesses and public sector clients with a comprehensive portfolio of digital and IT infrastructure solutions. The website reflects a professional and mature business with clear branding and client testimonials.

C

Collectivité européenne d'Alsace

bas-rhin.fr

68

The Collectivité européenne d'Alsace (CeA) is a regional government entity serving the Alsace region in France. The website provides comprehensive information about public services, social aid, cultural events, transport, environment, and citizen engagement initiatives. It targets residents, professionals, and associations within the region, positioning itself as the authoritative source for regional governance and services. The business model is governmental, focusing on public administration and community support. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of FontAwesome icons and the OreJime library for cookie consent management. Matomo analytics is used for user tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for government domains, and no suspicious patterns were found. Overall, the security posture is solid but could benefit from additional header configurations and a published security policy. The overall risk assessment is low, with a trustworthy and professional web presence that aligns with the organization's public service mission. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

C

Cnam

lecnam.net

62

The website analyzed is an authentication portal for the Conservatoire National des Arts et Métiers (Cnam), a well-established French educational institution. The portal provides secure login access to the Espace Numérique de Formation, targeting students and staff. The site uses standard web technologies including Bootstrap and jQuery, though some libraries are outdated, which may pose security risks. The design is professional and consistent with the institution's branding, offering a good user experience with mobile optimization. However, privacy compliance is limited, with no visible cookie consent mechanisms or detailed privacy policies on this page. Security posture is moderate; HTTPS is implied but no security headers were detected, and outdated JavaScript libraries present vulnerabilities. WHOIS data for the subdomain is unavailable, which is typical for subdomains but reduces transparency. Overall, the site is legitimate and functional but would benefit from security and privacy improvements.

F

Fondation ICAM

fondation-feron-vrau-icam.fr

53

The Fondation Feron-Vrau is a well-established non-profit foundation based in France, dedicated to supporting students of the Icam engineering school through financing honor loans and backing educational and campus development projects. With over 40 years of history, it plays a critical role in fostering solidarity and diversity within the Icam community. The website reflects a professional and consistent brand image, targeting students, alumni, donors, and educational partners. Technically, the site is built on WordPress with modern libraries and analytics tools, showing good digital maturity and mobile optimization. Security posture is strong with HTTPS and consent management, though some security headers and explicit policies could be enhanced. Overall, the foundation's online presence is trustworthy and compliant with GDPR, supporting its mission effectively.

A

Association des ingénieurs Icam

icam-alumni.fr

62

The Association des ingénieurs Icam operates as a non-profit alumni organization serving Icam engineering graduates and students primarily in France. The website offers a comprehensive platform for networking, career development, events, and community engagement, supported by a modern technical infrastructure including JavaScript libraries, map integration, and secure authentication mechanisms. The site demonstrates strong GDPR compliance with cookie consent management and privacy policies clearly presented. Security posture is solid with HTTPS, CSRF protection, and bot mitigation via hCaptcha, though additional security headers could enhance protection. Overall, the site is professional, trustworthy, and well-positioned within its educational and alumni community niche.

U

ULC-ICAM

ulc-icam.com

38

ULC-ICAM is an educational institution specializing in engineering education, aiming to develop technically skilled and socially responsible engineers. The website presents a professional and consistent brand image with clear navigation and partner affiliations, positioning it as a regional player in engineering education. Technically, the site is built on WordPress with modern plugins and frameworks, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and explicit privacy compliance documentation. The absence of WHOIS data raises some legitimacy concerns, though the website content and structure suggest a legitimate educational entity. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

I

Institut Ucac-Icam

ucac-icam.com

55

Institut Ucac-Icam is an established engineering school operating primarily in Congo and Cameroon, with a history dating back to 2002. The institution offers accredited engineering education recognized by CTI and the EUR-ACE label, positioning itself as a reputable educational provider in the region. The website reflects a medium-sized educational entity targeting prospective engineering students and companies seeking qualified engineers. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and hosting through OVH sas. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security practices.

I

Institut des Techniques d'Ingénieur de l'Industrie d'Alsace

itii-alsace.fr

51

ITII Alsace is a specialized educational institute focused on training engineers for the industrial sector in the Alsace region of France. The website offers detailed information on apprenticeship programs for young people under 30, continuing education for salaried employees, and training services for companies. The business model revolves around providing industry-relevant educational services and facilitating apprenticeships. The website is professionally designed using WordPress and Elementor, with good mobile optimization and clear navigation. Technical infrastructure includes modern web technologies and integration with Google Analytics and Tag Manager for analytics and marketing. From a security perspective, the website enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust verification, but the professional content and social media presence support legitimacy. Privacy and terms of service pages are not clearly found, indicating room for improvement in compliance. Overall, ITII Alsace presents a credible and professional online presence suitable for its educational mission. Strategic recommendations include enhancing security headers, publishing clear privacy and terms policies, and performing regular security audits to maintain compliance and trust.

Ö

Österbottens välfärdsområde

osterbottensvalfard.fi

66

Österbottens välfärdsområde is a regional government welfare organization in Finland providing comprehensive health, social, psychosocial, and emergency services to the Ostrobothnia region. The website serves as a digital portal offering access to various services including digital appointment booking, social welfare guidance, and emergency contacts. The organization is positioned as a key public sector entity with a strong regional presence and a focus on accessible, user-friendly digital services. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager, ReadSpeaker for accessibility, and an embedded chatbot for user assistance. The site is well-optimized for mobile and accessibility standards, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and vulnerability disclosure practices. Overall, the domain registration data aligns well with the website's identity, indicating a legitimate and trustworthy entity. Strategic recommendations include enhancing security headers, publishing a security.txt file, and continuous monitoring of third-party scripts to maintain security and compliance.

I

Irriverso

irriverso.com

47

Irriverso operates a digital platform focused on irrigation data management, as evidenced by the login portal branded with irrigation-dataserver.com logos. The platform uses Auth0 for secure user authentication, indicating a modern approach to identity management. The site is targeted at users requiring access to irrigation-related data services, likely professionals in agriculture or irrigation system management. The business model appears to be subscription or account-based access to digital irrigation data services. Technically, the site employs React components and CSS variables, leveraging Auth0's Universal Login Page framework. The login page is functional and accessible, with good mobile optimization and accessibility features. However, SEO optimization is minimal, and no privacy or cookie policies are present, which limits compliance and user trust. No contact or incident response information is provided, which is a gap in transparency. Security-wise, the use of Auth0 provides a strong authentication foundation, including password visibility toggles and ARIA-compliant form validation. However, the absence of visible security headers and privacy policies reduces the overall security posture. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site is functional and secure for authentication purposes but lacks comprehensive privacy, compliance, and business transparency features. Enhancements in policy disclosures, contact information, and SEO would improve trust and compliance.

F

FARMFRONT SPA

farmfront.com

52

Farmfront SPA is a medium-sized Italian company specializing in irrigation technology and services, aggregating several leading irrigation providers to deliver integrated solutions globally. The company positions itself as a market leader in irrigation, focusing on sustainable and efficient farming solutions. Their website reflects a professional digital presence built on WordPress, utilizing modern JavaScript libraries and SEO plugins. The technical infrastructure is solid but could benefit from enhanced security measures such as DNSSEC and security headers. The security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. Overall, the website is trustworthy and well-aligned with the company's business claims, but improvements in privacy policy transparency and security hardening are recommended.

D

DAF

dafshop.com

54

DAFshop.com is the official online merchandise store for DAF Trucks, a subsidiary of PACCAR. The website offers a range of branded products including clothing, accessories, and miniatures targeted primarily at truck drivers and DAF enthusiasts in the Benelux and European markets. The site is built on Magento 1.9.4.5, integrating various marketing and analytics tools such as Google Analytics, Facebook Pixel, and HubSpot forms, reflecting a mature digital marketing approach. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks some modern security headers and uses an older Magento version which may pose risks if not fully patched. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the site’s branding and content align with official DAF and PACCAR identities. Overall, the site presents a professional e-commerce platform with good user experience and privacy compliance, but would benefit from technical and security updates to enhance trust and resilience.

D

DAF Components

dafcomponents.com

67

DAF Components is a prominent supplier of powertrain components including engines, axles, and cabs, serving manufacturers of coaches, buses, and industrial vehicles globally. As part of the DAF Trucks group, it benefits from strong brand recognition and a comprehensive service network. The website reflects a professional corporate presence with rich content, multimedia, and clear navigation, targeting industry professionals and partners. Technically, the site employs modern web technologies such as jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. The lack of WHOIS data is a notable gap but does not detract significantly from the site's legitimacy given the strong brand and external link consistency. Overall, the site is well-structured, compliant, and trustworthy, supporting DAF Components' market position.

D

DAF bodybuilder information

dafbbi.com

69

DAF Bodybuilder Information is a specialized B2B portal providing essential technical and order-specific information for bodybuilders working with DAF trucks. It is part of the PACCAR group, a major player in the transportation industry. The website offers a suite of resources including specification sheets, 3D models, chassis drawings, and bodybuilder guidelines, targeting professional users in the truck manufacturing and modification sector. The site is well-branded, consistent with PACCAR and DAF corporate identity, and provides multilingual support.

D

DAF Used Trucks

dafusedtrucks.com

74

DAF Used Trucks operates as a professional platform offering used trucks with a focus on quality, expert service, and a one-year guarantee. The website targets businesses and fleet operators seeking reliable used vehicles. The platform is well-designed, mobile-optimized, and provides advanced filtering options to assist customers in finding suitable trucks. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Sitecore Cloud infrastructure, and integrates privacy compliance tools like OneTrust and analytics via Google Tag Manager and Google Analytics. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration legitimacy despite the professional appearance and branding consistency of the website.

D

DAF Trucks N.V.

daf.com

69

DAF Trucks N.V. is a prominent European commercial vehicle manufacturer specializing in a comprehensive range of trucks including the DAF Euro 6 XF, CF, and LF series. As a wholly-owned subsidiary of PACCAR Inc., DAF maintains a strong market position with extensive dealer networks and related services such as used trucks sales, bodybuilder information, and component supply. The website reflects a mature digital presence with professional design, clear navigation, and localized market sites for global reach. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and OneTrust for cookie consent management, indicating a commitment to privacy compliance and user experience. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could enhance its posture. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response contacts on the landing page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable or protected, which is common for large enterprises but slightly reduces transparency. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, and providing clearer contact information for security incidents.