Security Directory

U

Univention GmbH

univention-summit.com

56

Univention GmbH organizes the Univention Summit, a prominent open source event focused on digital sovereignty in government, education, and business sectors. The summit attracts IT service providers, software vendors, and users primarily from Germany and Europe, offering keynotes, panels, workshops, and an exhibition with numerous IT partners. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and uses Matomo analytics with user consent, indicating a good level of digital maturity. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. The absence of WHOIS data is a notable anomaly but does not detract from the overall professionalism and trustworthiness of the site. Strategic recommendations include publishing security and incident response policies and verifying domain registration status.

U

Univention GmbH

software-univention.de

38

Univention GmbH operates a software update repository website for its Univention Corporate Server (UCS) product line, providing downloads of software versions, network installation files, and virtual machine images. The website is primarily targeted at IT professionals and organizations using Univention's enterprise Linux solutions. The business is positioned as an established player in the technology sector, focusing on software development, distribution, and support services. The website content is technical and functional, serving as a resource for software updates rather than marketing or customer engagement. Technically, the website uses basic HTML, CSS, and JavaScript, with Piwik analytics for user tracking. The site lacks advanced frameworks or CMS platforms and shows moderate performance and basic mobile optimization. The presence of PGP signatures for archive keys demonstrates a commitment to software integrity and security. However, the site does not implement advanced security headers or explicit privacy and cookie policies, indicating room for improvement in compliance and security best practices. From a security perspective, the website benefits from HTTPS and cryptographic signatures but lacks visible security headers and formal incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the company's identity and domain usage, supporting the legitimacy of the site. Overall, the security posture is moderate but could be enhanced by adopting additional security controls and compliance documentation. The overall risk assessment is low, with the main recommendations focusing on improving privacy compliance, security headers, and user transparency regarding data collection. Enhancing mobile optimization and accessibility would also improve user experience and SEO. The website serves its purpose as a software update portal effectively but would benefit from modernization and stronger security and privacy practices.

U

Univention GmbH

univention.de

57

Univention GmbH is a well-established German technology company specializing in open source Identity and Access Management (IAM) solutions, primarily targeting the education sector and public administration. With over 20 years of experience and managing 35 million identities, the company offers scalable, secure, and integrated IAM products such as Nubus, UCS@school, and UCS. Their business model focuses on providing software solutions, support, training, and integration services to organizations seeking digital sovereignty and efficient IT management. The website reflects a mature market position with strong trust signals and a professional presentation. Technically, the website is built on WordPress with modern plugins and tools including WPBakery Page Builder, Gravity Forms, and Matomo for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive metadata and structured data enhancing discoverability. Privacy compliance is robust, featuring a cookie consent mechanism and a detailed privacy policy. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response page and does not provide a vulnerability disclosure or security.txt file. These gaps represent opportunities for improvement in transparency and readiness. Overall, the security posture is strong with no evident vulnerabilities or risks. The domain WHOIS data aligns well with the company's profile, showing consistent registration details and domain age appropriate for the business history. No privacy protection is used in WHOIS, which supports transparency. The website is fully accessible without WAF or blocking mechanisms, enabling thorough analysis. Strategic recommendations include publishing explicit security and incident response policies, establishing a vulnerability disclosure process, and providing data protection officer contact details to enhance compliance and trust. These steps will strengthen the company's security culture and customer confidence while maintaining its leadership in open source IAM solutions.

D

Dobříšské listy Online

dlonline.cz

46

Dobříšské listy Online is a regional news media portal serving Dobříš and its surrounding areas in the Czech Republic. Established in 2017, it provides local news, cultural updates, sports, and community information primarily targeting residents of the region. The website is built on WordPress and leverages popular plugins such as Yoast SEO, Contact Form 7, and Cookie Law Info to enhance SEO, user interaction, and privacy compliance. The site maintains a consistent brand presence with a clear logo and social media integration, notably on Facebook. From a technical perspective, the website uses a modern CMS platform with standard plugins and scripts, including Google Analytics for traffic monitoring. The site is mobile optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place. However, there is no explicit security policy or incident response information publicly available, and security headers are not detected, which could be improved to enhance protection against common web threats. No vulnerabilities or exposed sensitive data were identified in the analysis. Overall, the website presents a trustworthy and professional regional news service with good content quality and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to strengthen the site's security and user trust.

L

Linop

linop.fr

41

Linop is a professional graphic and digital design service operated by Pauline Le Gal, offering art direction, web design, and training services primarily targeting entrepreneurs, associations, and artists in France. The website presents a well-structured portfolio with clear contact options and integrates GDPR-compliant cookie consent mechanisms. Technically, the site is built on WordPress with modern plugins and hosted by Infomaniak Network SA, ensuring reliable infrastructure. Security posture is good with HTTPS enabled and no evident vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

J

Rozvoz jídel v Praze

jidlo.eu

44

The website jidlo.eu serves as a simple landing page for a food delivery service based in Prague, Czech Republic. It offers home-cooked meals prepared with fresh ingredients using the SOUS VIDE method. However, the site redirects users to the partner restaurant The PUB Praha 6 for placing orders, indicating a business model reliant on partnership rather than direct sales. The site content is minimal but relevant to the hospitality industry, targeting general consumers seeking food delivery services. The business appears small and localized with no explicit corporate information disclosed on the site. Technically, the website uses a moderate technology stack including jQuery, Foundation framework, Font Awesome, and Google Analytics for tracking. The site is mobile optimized and uses HTTPS, but lacks advanced SEO and accessibility features. Security posture is basic with no visible security headers and no forms collecting user data on the landing page, reducing attack surface but also limiting user engagement. Privacy and cookie policies are absent, which is a compliance gap. WHOIS data is unavailable due to EURid privacy restrictions, but the domain appears legitimate with no suspicious indicators. Overall, the site is functional but basic, with room for improvement in transparency, security, and compliance.

The website vykup-aut.cz operates as a service provider specializing in the purchase of used cars for cash across the Czech Republic. It positions itself as an experienced player with over 10 years in the market, targeting individuals and businesses seeking to sell their vehicles quickly and professionally. The business model is straightforward, focusing on offering competitive prices and a professional approach to car buying. The website content is primarily in Czech and tailored to the local market. Technically, the site is built on WordPress, utilizing common plugins such as Contact Form 7, Cookie Notice, and Slider Revolution. The site is served over HTTPS with a good SSL configuration, but lacks some advanced security headers. Performance is moderate, with good mobile optimization and basic accessibility features. SEO is supported by the All in One SEO plugin, and cookie consent mechanisms are in place, indicating some level of privacy compliance. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible security headers and detailed privacy policies. No direct contact information or incident response contacts are found, which could impact user trust and compliance. The WHOIS data is unavailable, suggesting privacy protection or lack of public registration details, which reduces transparency and trustworthiness. Overall, the website presents a professional and functional platform for used car buying in the Czech Republic but would benefit from enhanced transparency, security policies, and contact information to improve trust and compliance.

P

Panský dvůr Dolní Počernice

pddp.cz

42

Panský dvůr Dolní Počernice is a small hospitality business based in the Czech Republic offering a range of services including a restaurant, pizzeria, brewery, spa, pension, and event hosting. The website presents a professional and consistent brand image targeting local and regional visitors interested in leisure and dining experiences. The business model focuses on integrated hospitality services under one brand, positioning itself as a local provider with multiple offerings. Technically, the website is built on WordPress using the Foundation framework, jQuery, and Font Awesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, but lacks advanced security headers and a visible privacy policy, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is safe for general audiences and provides a good user experience with clear navigation and relevant content.

T

The PUB

thepub.cz

60

The PUB is a hospitality business operating a chain of pubs primarily in Prague, Czech Republic, with additional locations in Berlin and Bucharest. The business focuses on providing a unique beer experience including self-service beer taps, master bartenders, and beer pouring schools, complemented by food offerings. The website reflects a medium-sized, established hospitality brand with a consistent and professional digital presence. Technically, the site uses common JavaScript libraries such as jQuery and GSAP, and integrates multiple Google Analytics and Tag Manager instances for tracking. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The domain is long-standing and registered with a Czech registrar, consistent with the business claims. Overall, the website is well designed and functional but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

Sběratelské zbraně s.r.o. is a Czech Republic-based small retail business specializing in the sale of collectible firearms, primarily from the World War I and II eras. The company operates a niche market model focusing on individual customer consultations and custom orders, emphasizing personalized service rather than a traditional storefront. Their website reflects this business model with detailed product listings, contact information, and legal disclaimers. Technically, the site is built on WordPress using modern frameworks such as Foundation CSS and integrates Google Analytics and reCAPTCHA for analytics and security. While the site is well-structured and SEO-optimized, it lacks some advanced security headers and cookie consent mechanisms, which could be improved for better compliance and security posture. The absence of WHOIS data for the domain is a notable concern, reducing domain trustworthiness despite the professional appearance and clear business information on the site.

C

Coffee Planet

coffee-planet.cz

47

Coffee Planet is an established online retailer specializing in coffee products such as whole bean coffee, ground coffee, coffee capsules, and coffee machines. The website targets coffee consumers primarily in the Czech Republic and offers a broad selection of brands and product categories. The site is built on the PrestaShop e-commerce platform and integrates modern marketing and analytics tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The technical infrastructure is solid with HTTPS enabled and standard security practices in place, although some security headers could be improved. The absence of WHOIS data for the domain is a notable transparency gap, which slightly reduces trustworthiness. Privacy and cookie policies are not clearly presented, indicating room for compliance improvements. Overall, the website provides a professional user experience with good content quality and navigation, making it a reliable platform for coffee product sales.

SV Online, operated by RAK CZ a.s., provides a specialized online voting platform (Signum24.cz) designed for homeowners associations in the Czech Republic. The platform addresses challenges of low attendance at meetings by enabling legally binding remote voting with enhanced security features such as two-factor authentication. The website is built on WordPress with modern front-end frameworks and integrates Google Analytics and reCAPTCHA for user interaction and security. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. The site lacks published privacy and cookie policies, which impacts compliance with GDPR and related regulations. Overall, the business appears niche-focused with a clear value proposition but should improve transparency and compliance documentation.

N

NIOBLU

jafracosmetics.cz

45

NIOBLU.cz is a Czech Republic based e-commerce website specializing in cosmetics inspired by Ayurveda and rich in natural ingredients. The site offers a wide range of skincare, makeup, body, hair care, and fragrance products, targeting general consumers interested in natural and Ayurvedic cosmetics. The website features club offers, customer testimonials, and detailed product categorization, indicating a well-structured retail business with a focus on customer engagement and loyalty. Technically, the site uses modern web technologies including jQuery, Google Fonts, Google Tag Manager, and integrates marketing and analytics tools such as MailerLite and Smartsupp Live Chat. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses consent mechanisms for analytics and advertising, but lacks visible security headers and explicit incident response information. The absence of WHOIS data is a notable concern for domain legitimacy, though the website content and trust signals suggest a legitimate business. Overall, the site scores well on content quality and privacy compliance but should improve domain transparency and security headers to enhance trust and security posture.

I

il capitano ristorante

ilcapitano.cz

58

il capitano ristorante is a well-established Mediterranean restaurant located in Prague, Czech Republic, known for its quality ingredients, fresh seafood, and excellent steaks. The website reflects a professional and consistent brand image, supported by multiple industry recognitions such as Tripadvisor Certificates of Excellence and Restaurant Guru recommendations. The business targets a general audience seeking authentic Italian dining experiences near the city center. Technically, the website is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data is a notable gap, slightly reducing domain trustworthiness but not impacting the visible business legitimacy. Overall, the site presents a trustworthy and user-friendly digital presence for the restaurant.

Půjčovna RK, operated by Autocentrum RK cb s.r.o., is a small vehicle rental business based in České Budějovice, Czech Republic. The company specializes in renting personal cars and motorhomes for both business and recreational purposes. Their offerings include short-term and long-term rentals with additional customer benefits such as free parking during rental periods. The website is professionally designed, providing clear vehicle listings and contact information, targeting local customers seeking reliable vehicle rental services. Technically, the website is built on WordPress CMS using common plugins such as Contact Form 7 and Responsive Lightbox, styled with the Foundation CSS framework. It employs Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and loads with moderate performance. However, it lacks advanced SEO and accessibility features and does not implement security headers, which could be improved. From a security perspective, the site uses HTTPS with a valid SSL certificate and includes CAPTCHA protection on its contact form, indicating basic security awareness. However, the absence of security headers and privacy/cookie policies indicates gaps in compliance and security best practices. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the website presents a trustworthy and professional front for a local vehicle rental business but would benefit from enhanced security measures, privacy compliance, and domain registration transparency to improve its risk profile and customer trust.

AUTO Kralovice s.r.o. operates a professional used vehicle dealership in the Czech Republic, offering a broad range of automotive services including sales of cars, motorcycles, utility vehicles, trailers, financing options, insurance, servicing, and ecological vehicle disposal. The company targets consumers seeking quality used vehicles and related services, positioning itself as a reliable local provider with a comprehensive service portfolio. The website is built on WordPress with modern technologies and SEO optimizations, providing a good user experience and mobile responsiveness. Security measures include HTTPS and Google reCAPTCHA on forms, but lack of security headers and privacy policies indicate room for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate and professional. Overall, the site demonstrates moderate digital maturity with opportunities to enhance compliance and security posture.

R

RAK CZ a.s.

rak.cz

45

RAK CZ a.s. is a well-established Czech real estate company operating since 1990, specializing in property sales, rentals, management, auctions, consulting, and development. The company positions itself as a professional and comprehensive real estate partner offering unique and individualized client services. Their market presence is supported by quality management audits and membership in recognized real estate associations. Technically, the website is built on WordPress with modern plugins and frameworks, including Yoast SEO, Google Analytics, and GDPR-compliant cookie management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website content and business information are consistent and professional. Overall, the site demonstrates good content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy platform for real estate services in the Czech Republic.

P

Pojišťovací kancelář Plzeň

allianzplzen.cz

43

The website www.allianzplzen.cz represents a local insurance agency operating in Plzeň, Czech Republic, affiliated with the Allianz brand. It offers insurance brokerage services and provides contact points for local customers seeking insurance solutions. The site is designed to serve a regional audience with clear navigation to contact representatives and office locations. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Toolset Maps, with Google Analytics and Tag Manager integrated for visitor tracking. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, ensuring secure communication. However, the absence of WHOIS data and lack of explicit privacy and terms of service pages indicate areas for improvement in transparency and compliance. Security headers are missing, which could be enhanced to improve security posture. Overall, the website is professional and trustworthy in appearance but would benefit from improved compliance documentation and security hardening.

B

BPT Centrum, centrum diagnostiky, prevence a léčby bolesti zad

bptcentrum.cz

45

BPT Centrum is a specialized healthcare provider based in Plzeň, Czech Republic, focusing on the diagnosis, prevention, and treatment of back pain and spine-related conditions. The website presents a professional image with detailed information about medical staff, services, and contact details, targeting patients suffering from back pain. The business operates as a small healthcare center with a clear regional focus. Technically, the website is built on WordPress, uses modern web fonts, and integrates Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, though it lacks visible privacy and cookie policies. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but security headers are missing and no incident response or security policy information is published. WHOIS data is unavailable, which reduces domain trustworthiness and should be further investigated. Overall, the website is safe, professional, and trustworthy for its intended audience.

H

HP Fyzioclinic s.r.o.

hpfyzioclinic.cz

43

HP Fyzioclinic s.r.o. operates a specialized physiotherapy and rehabilitation center primarily serving athletes and patients requiring musculoskeletal therapy in the Czech Republic. The website presents a professional image with detailed team profiles and service descriptions, positioning itself as a local healthcare provider. The business model focuses on delivering specialized health services with a small-scale operation. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slick Carousel, and Foundation framework. It uses HTTPS and integrates Google Analytics and Tag Manager for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses nonce tokens in AJAX calls, but it lacks important security headers such as Content-Security-Policy and HSTS. There is no visible privacy or cookie policy, which raises compliance concerns especially under GDPR. The absence of WHOIS data for the domain reduces trust and raises questions about domain legitimacy. Overall, the website is functional and professional but would benefit from improved privacy compliance, enhanced security headers, and transparent domain registration information to strengthen trust and security posture.

G

GoFox - Tecnologias de Informação

gofox.pt

54

GoFox - Tecnologias de Informação is a Portuguese technology company specializing in web design, development, and digital marketing services. With over 20 years of experience and a portfolio exceeding 1200 projects, GoFox positions itself as a trusted partner for businesses seeking tailored web solutions, including mobile applications, e-commerce platforms, and SEO optimization. The company emphasizes strategic vision and technical expertise to deliver measurable results for its clients. Technically, the website demonstrates a mature digital infrastructure leveraging modern technologies such as PHP, Django, React, and mobile development frameworks, hosted likely within the PTisp Partners Network. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of digital maturity. Security-wise, the website employs HTTPS, secure forms with CAPTCHA, and cookie consent mechanisms, though it lacks a publicly stated security policy or incident response contacts. Overall, GoFox exhibits a strong security posture with room for improvement in formal security disclosures. The domain registration data aligns well with the company's claims, reinforcing legitimacy. The website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the business.

C

Cyber Création

cybercreation.fr

40

Cyber Création is a small, established French web and print communication agency based in Ormes near Reims, operating since 1998. The company specializes in graphic design, website creation including intranet and e-commerce solutions, and print production services. Their website reflects a professional and consistent brand image, targeting local businesses and organizations seeking digital and print communication solutions. The site is well-structured, mobile-optimized, and compliant with GDPR regulations, featuring a comprehensive cookie consent mechanism and privacy policy.

U

UniWIRE Solution, s. r. o.

uniwire.cz

52

UniWIRE Solution, s. r. o. is a Czech-based small IT and security services company specializing in visual identity creation, installation of camera and security systems, electrical installations, and IT services. The company targets schools, businesses, and general clients seeking comprehensive IT and security solutions. Their market position appears regional with a focus on quality and reliability, supported by client references and a portfolio of completed projects. The website is built on WordPress using modern technologies such as Bootstrap and Smart Slider 3, with good mobile optimization and user experience. Security posture is solid with HTTPS and Google reCAPTCHA integration, though lacking some advanced security headers and formal privacy documentation. The absence of WHOIS data reduces domain trust but the website content and business information are professional and credible.

Flexit.fr is the official website for the Flexit CMS, a flexible and dynamic content management system designed primarily for French-speaking users. The CMS targets small to medium businesses and e-commerce merchants seeking an easy-to-use platform for website creation and management. The website is professionally designed, mobile responsive, and emphasizes simplicity, security, and flexibility. The business behind Flexit is NEFTIS, which also provides support and maintenance services for the CMS. The website content is rich and well-structured, providing clear information about the product's features and benefits. Technically, the website uses modern web technologies including JavaScript and Google Tag Manager for analytics. It is served over HTTPS with a good SSL configuration, and the site is mobile optimized. However, some security best practices such as explicit security headers and published security policies are missing. The site includes a cookie consent banner indicating GDPR compliance, but lacks direct contact emails or phone numbers, relying instead on a contact form. From a security perspective, the site shows a moderate security posture with HTTPS enabled and automatic update claims for the CMS. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this type of business. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is trustworthy and professional with a moderate to good security posture. Strategic improvements include adding security headers, publishing a security policy and incident response contacts, and providing direct contact information to enhance trust and compliance.

N

Neftis

neftis.com

61

Neftis is a well-established digital agency based in Lorraine, France, specializing in web creation, SEO, digital marketing, hosting, and professional training. With over 20 years of experience and a medium-sized team, the company serves businesses and organizations seeking comprehensive digital communication solutions. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site uses modern analytics tools such as Google Analytics, Piwik PRO, and Microsoft Clarity, and is built on the FlexIT CMS platform. It is mobile-optimized and employs HTTPS with good SSL configuration, ensuring secure user interactions. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and contact information support the company's credibility. No critical security vulnerabilities or adult content were detected, and privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism.

The website www.grandreims.fr serves as the official digital presence of the Communauté urbaine du Grand Reims, a large regional government entity in France. It provides comprehensive information and services related to community news, urban planning, environment, business development, and mobility for residents, businesses, and visitors. The site is well-structured, professionally designed, and targets a broad audience within the Grand Reims territory. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, WHOIS data is unavailable, which slightly impacts trust but is mitigated by the official nature and content quality of the site.

V

Ville et Eurométropole de Strasbourg

strasbourg.eu

64

The website www.strasbourg.eu serves as the official digital portal for the City and Eurométropole of Strasbourg, France. It provides comprehensive information and services to residents, tourists, professionals, students, and other stakeholders. The site features news, event calendars, administrative procedures, cultural content, and community engagement tools, positioning itself as a central hub for local government communication and citizen interaction. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and Alloy UI, ensuring a responsive and accessible user experience. Security measures such as HTTPS enforcement, security headers, and cookie consent mechanisms are in place, reflecting a mature security posture. However, explicit privacy policy and terms of service pages are not clearly identified, and contact information is not prominently displayed, which are areas for improvement. Overall, the site is trustworthy, professionally maintained, and aligned with its public service mission.

D

Département de la Meuse

meuse.fr

48

The Département de la Meuse website serves as the official digital presence of the regional government authority for the Meuse department in France. It provides comprehensive public service information, news, event listings, and resources for residents and local partners. The site is well-structured, primarily targeting local citizens and stakeholders, and offers services such as social support, cultural activities, tourism, and administrative procedures. The business model is governmental, focusing on public administration and community engagement. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, supplemented by modern JavaScript libraries like jQuery, Parsley.js for form validation, and Tarteaucitron.js for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates a mature approach to GDPR compliance. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks explicit HTTP security headers and a published security.txt file. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration data slightly reduces trust but is mitigated by the official nature of the domain and consistent branding. Overall, the security posture is solid but could be improved with additional headers and incident response information. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include enhancing HTTP security headers, publishing a security.txt file, providing incident response contacts, and adding a terms of service page to improve legal clarity and user trust.

D

DLA Grand-Est

dla-grandest.org

10

DLA Grand-Est is a regional non-profit organization dedicated to supporting social utility structures in the Grand Est region of France. The website presents a professional and well-structured platform offering information about their services, including accompaniment for social utility employers, training for volunteers, and calls for service providers. The organization positions itself as a key regional player in social and employment development within the non-profit sector. Technically, the website employs modern web technologies such as Bootstrap for responsive design, jQuery for interactivity, FontAwesome for icons, and Google Analytics for visitor tracking. The site is mobile-optimized and includes standard SEO and accessibility features, though some accessibility aspects could be improved. The presence of a cookie consent banner and a comprehensive privacy policy indicates good privacy compliance. From a security perspective, the site uses HTTPS with a presumably strong SSL configuration. However, no explicit security headers were detected, and there is no visible security policy or incident response contact information. The WHOIS data is unavailable due to a malformed request or privacy restrictions, which slightly reduces trust in domain legitimacy but does not outweigh the professional presentation and compliance indicators. Overall, the website is a credible and professional platform for a regional non-profit organization with a good security posture and privacy compliance. The main risk is the lack of WHOIS transparency and absence of explicit security policies, which should be addressed to enhance trust and security maturity.

E

ESSor Grand Est

essor-grandest.org

9

ESSor Grand Est operates as a regional information portal dedicated to supporting the Social and Solidarity Economy (ESS) in the Grand Est region of France. The platform provides a comprehensive database of accompaniment and financing tools for project leaders, associations, cooperatives, and social enterprises. It also features calls for projects and crowdfunding information, positioning itself as a key resource for ESS actors in the region. The website maintains a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the website employs legacy JavaScript libraries such as jQuery 1.8.3 and integrates Google Analytics and Google Tag Manager for user tracking. While the site loads most resources securely, some external scripts are loaded over HTTP, introducing mixed content risks. The site demonstrates basic mobile optimization and accessibility but lacks advanced SEO and modern frameworks. No CMS or hosting provider details are evident from the source. From a security perspective, the site uses HTTPS for analytics scripts but does not explicitly show security headers or advanced security policies. The use of outdated JavaScript libraries and insecure script loading are notable vulnerabilities. Privacy compliance is minimal, with no cookie consent mechanism detected and only a basic privacy/legal mentions page available. WHOIS data is unavailable, limiting domain trust verification. Overall, the security posture is moderate but requires improvements to meet best practices and regulatory compliance. The overall risk assessment indicates a functional and trustworthy platform for its niche audience but with moderate technical and security shortcomings. Strategic recommendations include updating legacy libraries, enforcing HTTPS for all resources, implementing cookie consent, enhancing security headers, and improving WHOIS transparency to strengthen trust and compliance.

The website 'Acheter Responsable GE' is a regional platform dedicated to promoting goods and services from the Social and Solidarity Economy in the Grand Est region of France. It serves as a directory, resource hub, and event organizer for businesses and organizations interested in responsible purchasing. The platform is supported by regional public entities and managed by the Chambre Régionale de l'Economie Sociale et Solidaire Grand Est, indicating a strong regional presence and trustworthiness. Technically, the site uses a Flexit CMS, integrates Google Analytics and Tag Manager for tracking, and is served over HTTPS, ensuring secure communication. However, the absence of visible privacy and cookie policies and lack of security headers suggest areas for improvement in privacy compliance and security posture. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency, but the professional content and public entity support mitigate some of these concerns. Overall, the site presents a good user experience with clear navigation and relevant content for its target audience.

B

Bílý kruh bezpečí, z.s

infovictims.cz

8

The website www.infovictims.cz serves as an informational and support platform primarily targeting victims of crime in the Czech Republic. It is associated with the non-profit organization Bílý kruh bezpečí, z.s, which focuses on providing legal rights information, support, and guidance related to criminal proceedings. The site is professionally designed with a clear focus on its niche audience, offering relevant content and resources for victims seeking assistance. From a technical perspective, the website employs standard web technologies including HTML5, CSS3, Google Fonts, and common JavaScript libraries such as Fancybox and Slick Carousel. The site appears to be moderately optimized for performance and mobile responsiveness, though accessibility features are basic. There is no evidence of a CMS or advanced frameworks, suggesting a custom or lightweight implementation. Security posture is moderate but could be improved. The site uses HTTPS (implied by base URL), but no security headers were detected in the provided data. There are no visible privacy or cookie policies, nor incident response contacts or data protection officer information, indicating gaps in compliance and security transparency. The WHOIS data is missing, which raises concerns about domain legitimacy and trustworthiness despite the site's professional appearance and association with a known non-profit. Overall, the website is a useful resource for its target audience but would benefit from enhanced security practices, transparent privacy policies, and verified domain registration information to improve trust and compliance.

B

Bílý kruh bezpečí, z. s.

linka-pomoci.cz

10

The website www.116006.cz represents a Czech Republic-based non-profit social service operated by Bílý kruh bezpečí, z. s., providing free, 24/7 telephone crisis support to victims of crime and domestic violence. The site is professionally designed, mobile-optimized, and offers clear navigation to key service areas such as domestic violence, stalking, and victims' rights. The technical infrastructure is based on WordPress with Foundation CSS and includes Google Analytics for visitor tracking. Security posture is solid with HTTPS enabled and cookie consent implemented, though security headers and explicit privacy policies are lacking. WHOIS data is missing, which raises some concerns about domain registration transparency but does not detract from the apparent legitimacy of the organization. Overall, the site is trustworthy, safe, and well-positioned to serve its target audience effectively.

B

Bílý kruh bezpečí, z.s.

domacinasili.cz

43

The website www.domacinasili.cz serves as an informational and support platform dedicated to victims of domestic violence in the Czech Republic. It is operated by the non-profit organization Bílý kruh bezpečí, z.s., which provides crisis telephone help, psychological support, legal and social counseling, and public awareness resources. The site is well-branded and targets individuals affected by or concerned about domestic violence, offering practical advice and contact information for assistance. Technically, the website is built on WordPress and uses modern web technologies including jQuery and Google Analytics for tracking. It employs HTTPS for secure communications and includes a cookie consent banner to comply with basic privacy regulations. The site is mobile-optimized and presents a clear navigation structure, although some accessibility features could be improved. From a security perspective, the site benefits from HTTPS but lacks visible security headers and a published privacy policy page, which are important for compliance and user trust. No WHOIS data was retrievable, which limits domain registration trust analysis. No forms collecting personal data were found on the homepage, reducing immediate data protection concerns. Overall, the security posture is moderate but could be enhanced with additional best practices. The overall risk assessment indicates a trustworthy and professional non-profit website with some gaps in privacy compliance and domain transparency. Strategic recommendations include publishing a comprehensive privacy policy, implementing security headers, providing incident response contacts, and verifying domain registration details to improve trust and compliance.

N

Networm Studio

networm.cz

41

Networm Studio is a small Czech-based group of freelancers specializing in custom web development, SEO optimization, e-commerce solutions, and social media marketing. Operating since 2005, they focus on personalized client solutions rather than templated websites, targeting businesses seeking tailored online presence. The website is built on WordPress with common technologies like Bootstrap, jQuery, and Google reCAPTCHA, indicating a moderate level of technical maturity. Security posture is adequate with HTTPS and anti-bot measures but lacks advanced security headers and formal privacy policies. WHOIS data is unavailable, which limits domain trust verification, but the website content and contact information appear professional and consistent with a legitimate business. Overall, the site is safe, well-structured, and serves its business purpose effectively.

Optimus is a Polish technology company specializing in IT hardware manufacturing and distribution, with a focus on business IT solutions and gaming computers. The website presents two main segments: business IT services and gaming computers, targeting both corporate clients and gamers. The company appears established, with a domain dating back to 1996, indicating a mature market presence in Poland. The business model revolves around a network of local partners providing IT services and hardware supply, alongside direct manufacturing of computers, including a gaming series designed for various skill levels. Technically, the website uses basic HTML5 and CSS3 with video elements to showcase its offerings. The site is moderately optimized for mobile devices but lacks advanced SEO and accessibility features. No CMS or advanced frameworks are detected, suggesting a simple custom-built site. Performance is moderate, with no evident use of analytics or tracking technologies. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response details are available, limiting transparency and trust. The WHOIS data confirms the domain's legitimacy and long-term registration but shows no DNSSEC or advanced security features. Overall, the security posture is basic and requires improvements to meet modern standards. The overall risk is moderate due to the absence of privacy and security policies and lack of contact information. Strategic recommendations include implementing HTTPS with proper SSL, adding privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information to improve trust and compliance.

A

AB S.A.

abonline.pl

60

AB Online is a Polish B2B e-commerce platform operated by AB S.A., a large technology distributor. The website provides registered business clients and dealers with access to product catalogs, promotions, and order management. The platform uses a mix of legacy and modern web technologies including jQuery, Bootstrap, and third-party analytics tools such as Google Analytics and New Relic. Security practices include HTTPS enforcement and visitor fingerprinting, but the use of outdated JavaScript libraries and lack of security headers present moderate risks. Privacy and cookie policies are present and GDPR compliant, though terms of service and security policies are not clearly visible. WHOIS data is not publicly available, indicating privacy protection, which is common for commercial domains. Overall, the website is functional and professional but would benefit from technical modernization and enhanced security measures.

D

Danone s.r.o.

danonesutaze.sk

52

Danone s.r.o. operates the website www.danonesutaze.sk as a promotional platform for Danone product contests targeting Slovak consumers. The site aggregates current and past contests, providing users with opportunities to participate and win prizes. The business model focuses on consumer engagement and brand promotion within the retail sector in Slovakia. The website is professionally designed using WordPress with Oxygen Builder, featuring responsive design and clear navigation. It integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and cookie consent management. Security posture is strong with HTTPS enforced and appropriate security headers present. Privacy compliance is well addressed with comprehensive cookie and privacy policies linked and a consent mechanism implemented. Contact information is clearly provided, enhancing business credibility. No critical security or content safety issues were detected, and the domain registration data aligns well with the business identity, indicating legitimacy.

I

Innovation Acta S.r.l.

innovationacta.eu

56

Innovation Acta S.r.l. is a specialized consultancy firm based in Italy focused on supporting private and public organizations, researchers, and SMEs in securing EU research funding and managing multinational collaboration projects. Their services span from funding strategy and consortium building to project management, communication, and training. The company maintains a professional online presence with a well-structured website that is mobile optimized and regularly updated with relevant news and calls for proposals. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Font Awesome, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though it lacks explicit security headers and published incident response policies. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious patterns were detected. Overall, Innovation Acta demonstrates a credible and professional digital footprint appropriate for its niche consultancy business.

I

inREAL realitná kancelária, s.r.o.

inreal.sk

45

inREAL realitná kancelária, s.r.o. is a Slovakian real estate agency specializing in property sales and searches across a wide range of locations in Slovakia. The website serves as a platform for clients to browse property listings and contact the agency for real estate services. The company targets individuals and businesses interested in real estate transactions within Slovakia, positioning itself as a local real estate service provider. The website features a professional design with clear navigation and mobile responsiveness, supporting a positive user experience. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, with HTTPS enabled ensuring secure communications. However, there is room for improvement in security headers and privacy policy transparency. The security posture is moderate, with email obfuscation and cookie consent mechanisms implemented, but lacking explicit security policies or incident response contacts. Overall, the domain registration data aligns well with the website's business claims, supporting legitimacy and trustworthiness.

T

TechnologyMountains

technologymountains.de

43

TechnologyMountains is a German-based technology collaboration network that aims to accelerate business progress by linking companies with technical expertise and bridging the gap between industry and science. The website presents a professional and consistent brand image focused on fostering technological leadership among its members. The technical infrastructure is built on WordPress with common plugins such as WooCommerce and caching mechanisms, providing moderate performance and good mobile optimization. However, the site lacks critical privacy and security policies, contact information, and advanced security headers, which lowers its overall security posture. No WAF or blocking mechanisms were detected, allowing full content accessibility. The WHOIS data is minimal but consistent with hosting providers, with no privacy protection or suspicious patterns identified. Overall, the site is safe for general audiences and serves a business-to-business market segment.

N

Novartis Österreich

novartis.at

69

Novartis Österreich is the Austrian branch of the global healthcare leader Novartis AG, focusing on innovative pharmaceutical research and therapies. The website serves as an official portal providing information about their products, research, sustainability efforts, and career opportunities, targeting healthcare professionals, patients, and job seekers in Austria. The site is well-branded, professionally designed, and localized in German, reflecting the company's commitment to the Austrian market. Technically, the website is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Crazy Egg, and TikTok Pixel, with appropriate cookie consent mechanisms ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, although explicit security headers could be improved. The WHOIS data for the domain is unavailable, which limits domain registration trust analysis, but the strong brand presence and consistent content mitigate concerns. Overall, the website demonstrates a mature digital presence with good privacy and security practices, supporting Novartis's reputation as a trusted healthcare provider.

Living MS is a healthcare information website focused on Multiple Sclerosis, providing educational content, support resources, and service information for MS patients and their families. The site is branded and operated by Merck GmbH, a pharmaceutical company, indicating a strong market position in healthcare and patient support. The platform targets German-speaking users in Austria and offers comprehensive information on MS symptoms, diagnosis, therapies, and living with the disease. It also provides a dedicated service line for medication injection device replacement. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, supported by modern analytics tools like Google Tag Manager and Adobe Analytics. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Cookie consent and privacy compliance are well implemented, reflecting adherence to GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no security.txt or incident response contacts are provided. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website presents a professional, trustworthy, and compliant digital presence for a healthcare information service. The lack of WHOIS data limits domain trust verification, but the strong branding and external partnerships support legitimacy. Strategic recommendations include enhancing security headers, adding vulnerability disclosure information, and maintaining regular security audits.

M

Mladí lékaři z.s.

mladilekari.cz

41

Mladí lékaři z.s. is a Czech non-profit association founded in 2010 that unites young doctors concerned with the Czech healthcare system. The website serves as an informational and community platform, reflecting a well-established position in the healthcare sector in the Czech Republic. The organization operates independently and voluntarily, targeting young medical professionals and stakeholders. Technically, the website is built on WordPress using the Divi theme and several common plugins, hosted by Active24. The site demonstrates good SEO practices, mobile optimization, and basic accessibility. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, but lacks explicit privacy and terms of service pages and security headers. Overall, the site is professional and trustworthy with clear contact information and social media presence. Recommendations include enhancing security headers, publishing privacy and terms policies, and adding vulnerability disclosure information to improve compliance and trust.

P

PEŠEK Machinery s.r.o.

pesekm.com

50

PEŠEK Machinery s.r.o. is a Czech-based manufacturing company specializing in the development and production of special machines and fixtures for industrial automation, serving sectors such as automotive, energy, and transportation. The company emphasizes craftsmanship, quality, and unique engineering solutions, with a market presence spanning multiple European countries. Their website reflects a professional and well-structured digital presence, supporting their business model with clear product offerings and contact channels. Technically, the site uses modern web technologies including niCMS, Video.js, and Google Tag Manager, with good mobile optimization and SEO practices. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent management, though additional security headers could enhance protection. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a solid security posture and compliance with GDPR, supporting a positive risk profile.

A

Australasian Division of the International Academy of Pathology

iap-aus.org.au

52

The Australasian Division of the International Academy of Pathology operates a professional website serving pathology professionals and members in Australasia. The site provides information on annual scientific meetings, master classes, grants, and other educational resources, positioning itself as a regional non-profit professional association. The business model focuses on member services, education, and professional development within the healthcare sector. Technically, the website is built on WordPress with the Divi theme, utilizing modern JavaScript libraries and Google Fonts, and integrates Matomo analytics and reCAPTCHA for security and tracking. The site is mobile-optimized with good navigation and professional design. Security posture is solid with HTTPS and some security best practices, though DNSSEC is not enabled and no advanced security headers were detected. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, with no blocking or WAF interference detected.

I

IAP2026 Congress Secretariat c/o Congrès Inc.

iap2026.com

53

The website iap2026.com serves as the official platform for the XXXⅥ International Congress of the International Academy of Pathology scheduled in October 2026 in Fukuoka, Japan. It targets pathology professionals and academics, providing information about the congress, educational programs, calls for abstracts, and sponsorship opportunities. The business model centers on event organization and professional education within the healthcare sector. The site is relatively new, consistent with the event timeline, and operated by Congrès Inc., a known event organizer in Japan. Technically, the website uses a straightforward HTML5 and Bootstrap framework with jQuery 1.8.0, indicating a somewhat dated but functional tech stack. The site is mobile optimized with good navigation and content relevance but lacks advanced CMS or modern JavaScript frameworks. Performance is moderate, and accessibility is basic. No CMS or hosting platform beyond registrar and DNS info is detected. From a security perspective, the site lacks DNSSEC, security headers, and uses an outdated jQuery version, which could expose it to vulnerabilities. No HTTPS or SSL configuration details were found in the provided data, which is a concern. Privacy compliance is weak, with no privacy or cookie policies present, which is a significant gap given GDPR and other regulations. Contact information is minimal but professional, with a verified official email. Overall, the site is functional and professional but requires improvements in security posture and privacy compliance to meet modern standards. The risk level is moderate with no critical vulnerabilities detected but notable areas for enhancement.

J

Jamie Clarke Type

jamieclarketype.com

59

Jamie Clarke Type is a specialized independent typeface design business offering ready-made fonts and custom commissions primarily targeting creative agencies, publishers, and brands. The website showcases a professional portfolio with a strong focus on typography and design services, positioning itself as a niche player in the media and creative sector. The business has been established since 2015, with a consistent online presence and a clear brand identity. Technically, the website is built using modern frameworks like Astro and leverages Cloudflare for DNS and hosting, ensuring fast performance and good mobile optimization. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and professional, with room for enhanced security and privacy practices.

The website interakcieliekov.sk is a Slovak healthcare informational platform dedicated to providing a drug interaction database for patients and pharmacists. It is part of a social responsibility initiative by the Slovak Pharmaceutical Chamber, aiming to enhance patient safety and public knowledge about pharmacotherapy. The platform offers tools to evaluate drug combinations and potential risks, along with educational content and pharmacist consultation options. The site is targeted primarily at Slovak patients and healthcare professionals. Technically, the site is built using modern React and Material-UI frameworks, hosted on Websupport with DNSSEC and HTTPS enabled, ensuring a secure and reliable user experience. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information for security or data protection matters, which are areas for improvement. Overall, the domain registration data aligns well with the website's purpose and origin, supporting its legitimacy and trustworthiness.

J

Jihočeská filharmonie

jcfilharmonie.cz

57

Jihočeská filharmonie is a regional cultural institution serving the South Bohemian Region of the Czech Republic, providing orchestral concerts, subscription series, and special cultural events. The website reflects a well-structured and professionally designed platform that supports multilingual content via Weglot, indicating a moderate level of digital maturity. The technical infrastructure is based on Webflow CMS with modern web technologies and integration of Google Analytics for visitor tracking. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and privacy policies. The absence of WHOIS data limits domain trust verification, though the presence of official partner logos and social media accounts supports legitimacy. Overall, the website is functional, user-friendly, and professionally presented but would benefit from enhanced privacy compliance and security transparency.