Security Directory

I

International Osteoporosis Foundation

worldosteoporosisday.org

10

The World Osteoporosis Day website serves as a global awareness and educational platform managed by the International Osteoporosis Foundation. It provides resources, patient stories, risk assessment tools, and event information to promote bone health and osteoporosis prevention worldwide. The site targets a broad audience including patients, caregivers, healthcare professionals, and advocates. Technically, the site is built on Drupal 9 with modern frameworks like Bootstrap and integrates Google Analytics for user insights while respecting privacy through IP anonymization and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response disclosures could be improved. Overall, the website is professional, trustworthy, and aligned with its non-profit mission, though WHOIS data is privacy protected, which is typical for such organizations.

I

International Osteoporosis Foundation

buildbetterbones.org

39

Build Better Bones is a non-profit educational website operated by the International Osteoporosis Foundation, providing global resources to individuals diagnosed with osteoporosis, their caregivers, and those seeking prevention strategies. The site offers comprehensive guidance on exercise, nutrition, and home safety to support bone health. The website is well-branded, professionally designed, and clearly targeted at a healthcare audience with a focus on osteoporosis education. Technically, the website is built on Drupal 9, leveraging modern web technologies including Google Tag Manager and AddToAny for social sharing. The site is mobile-optimized, accessible, and performs moderately well. Privacy and cookie policies are present and linked to the parent foundation's domain, indicating good privacy compliance. However, explicit security policies and incident response information are not published. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected. No vulnerabilities or suspicious domains were found. WHOIS data is unavailable due to privacy protection, which is justified given the non-profit nature of the organization. Overall, the site demonstrates a trustworthy and professional presence with minor areas for security enhancement. The overall risk is low, with recommendations focusing on improving security headers, publishing security policies, and adding vulnerability disclosure information to enhance transparency and trust.

I

International Osteoporosis Foundation

fundamentals-osteoporosis.org

10

The Fundamentals of Osteoporosis website is operated by the International Osteoporosis Foundation, a reputable non-profit organization based in Switzerland. The site offers specialized educational courses aimed at healthcare professionals to enhance their knowledge and clinical skills in osteoporosis diagnosis and management. The business model centers on providing training and certification, positioning itself as a key resource in osteoporosis education globally. Technically, the website is built on Drupal 10, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome for a responsive and accessible user experience. The site includes a cookie consent mechanism compliant with GDPR standards and integrates Google Tag Manager for analytics. Performance and SEO optimizations are moderate to good, with clear navigation and mobile responsiveness. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible advanced security headers in the provided HTML. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which limits domain trust verification; however, the website content and branding strongly indicate legitimacy. Overall, the website presents a professional, trustworthy, and well-maintained platform for osteoporosis education. Strategic improvements in security headers and WHOIS transparency could further enhance trust and compliance.

I

International Osteoporosis Foundation

iofacademy.org

40

IOF Academy is a specialized e-learning platform dedicated to osteoporosis and bone health education, operated by the International Osteoporosis Foundation. It offers a range of CME accredited courses designed by global experts, targeting healthcare professionals and researchers. The platform is well-branded, professionally designed, and provides comprehensive educational content with certificates of achievement. Technically, the website is built on Drupal 10 with modern frameworks and libraries, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website demonstrates high business credibility and trustworthiness, supported by its association with a reputable international foundation.

T

Türkische Gemeinde Deutschland

tgd.de

65

Türkische Gemeinde Deutschland (TGD) is a German non-profit umbrella organization representing the interests of people with Turkish migration backgrounds. The website provides comprehensive information about their projects, member associations, and societal topics such as participation, equality, and diversity. The organization targets migrants and stakeholders interested in integration and social inclusion. Technically, the website is built on WordPress using WPBakery Page Builder and several plugins, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers are not explicitly detected. Privacy compliance is strong with detailed GDPR-compliant policies and consent management. Overall, the site is professional, trustworthy, and well-structured, supporting the organization's mission effectively.

D

Deutsches Zentrum für Integrations- und Migrationsforschung DeZIM e.V.

dezim-institut.de

53

The Deutsches Zentrum für Integrations- und Migrationsforschung DeZIM e.V. is a German non-profit research institute specializing in integration, migration, discrimination, and racism studies. The website serves as a professional platform to disseminate research findings, publications, and event information targeting academics, policymakers, and practitioners. The institute is funded by the German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth, indicating strong institutional backing and credibility. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and jQuery, and it integrates accessibility tools such as ReadSpeaker webReader. The site is well-optimized for mobile and SEO, with a clear navigation structure and professional design. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented with Matomo analytics configured for privacy. However, additional security headers and explicit security policies could enhance the security posture. Overall, the website is trustworthy, compliant with GDPR, and provides a safe browsing experience.

P

ProjectTogether

projecttogether.org

52

ProjectTogether is a German non-profit organization established in 2012 that aims to bring together society, politics, and economy for collaborative social impact. The website reflects a mature digital presence with a modern WordPress CMS using Elementor and Astra theme, integrated with marketing and analytics tools such as HubSpot, MailerLite, and Usercentrics for cookie consent. The organization maintains active social media channels on Facebook, Twitter (X), and LinkedIn, enhancing its community engagement and trustworthiness. Technically, the site is well-structured with good SEO and mobile optimization, though performance is moderate. Security posture is adequate with HTTPS enforced and domain registration transparency, but could be improved by enabling DNSSEC and adding additional security headers. Privacy compliance is basic, lacking explicit privacy and terms of service pages, which should be addressed to meet GDPR standards fully. Overall, the website is professional and trustworthy, serving its non-profit mission effectively.

R

Robert Bosch Stiftung

bosch-stiftung.de

53

The Robert Bosch Stiftung website represents a large, well-established non-profit foundation linked to the Bosch corporate group. The foundation focuses on funding and supporting projects in health, education, and global issues to promote a just and sustainable future. The website is professionally designed with excellent content quality, clear navigation, and consistent branding. It targets NGOs, educational institutions, policymakers, and the general public interested in social and global topics. Technically, the site uses Drupal 11 CMS with modern web technologies and moderate performance. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly provided. Overall, the site is trustworthy, safe, and professionally maintained.

Z

ZEOK e.V. Leipzig

zeok.de

32

ZEOK e.V. Leipzig is a small non-profit organization focused on promoting open culture, anti-racism, and peaceful coexistence in Leipzig, Saxony, and across Germany. The website presents a professional and well-structured digital presence built on WordPress with the Kadence theme and related plugins, supporting educational and cultural initiatives such as workshops, publications, and festivals. The organization targets educators, activists, and the general public interested in diversity and anti-discrimination efforts. Technically, the site is well implemented with modern technologies, good mobile optimization, and SEO best practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional, reflecting the organization's mission and activities effectively.

K

korientation e.V.

korientation.de

41

korientation e.V. is a small non-profit organization based in Germany, dedicated to serving the Asian-German and Asian diasporic communities with a focus on cultural, political, and social issues. The organization operates as a self-organization and network, providing community events, political education, publications, and collaborative projects against racism. Their market position is niche but well-established within their community, with a history dating back to 2008. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern plugins and libraries, hosted likely by a German hosting provider, and implements HTTPS with cookie consent mechanisms. Security posture is good but could be improved by adding explicit security headers and incident response policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy and well-maintained, with moderate user tracking via analytics and a clear privacy policy compliant with GDPR.

R

RAA Berlin

raa-berlin.de

41

RAA Berlin is a medium-sized non-profit organization based in Germany focused on diversity, inclusion, and community engagement. Their website highlights projects, publications, and educational offerings aimed at promoting social inclusion and addressing marginalization. The organization maintains a consistent brand presence and targets a general audience interested in social issues. Technically, the website is built on TYPO3 CMS, hosted by netcup, and integrates accessibility tools to enhance user experience. The site is well-structured, mobile-optimized, and provides multilingual options. Security posture is moderate with HTTPS assumed but lacking explicit security headers and incident response contacts. Privacy compliance is good with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

E

Each One Teach One (EOTO) e.V.

eoto-archiv.de

44

Each One Teach One (EOTO) e.V. is a small non-profit community organization based in Berlin focused on education, empowerment, and cultural preservation for Black, African, and Afro-diasporic communities. Founded in 2012, it operates a neighborhood library and organizes events, workshops, and advocacy initiatives. The website reflects a well-structured and content-rich platform targeting its community with multilingual support and clear navigation. Technically, the site uses modern web technologies including HTTPS and JavaScript libraries like Swiper.js for interactive content. Security posture is good with HTTPS enabled and no exposed sensitive data, though it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

V

Verband binationaler Familien und Partnerschaften Leipzig

binational-leipzig.de

55

The Verband binationaler Familien und Partnerschaften Leipzig is a non-profit organization focused on supporting binational families and partnerships, operating primarily in Leipzig with nationwide relevance in Germany. Their services intersect family, migration, and education policy, providing advisory and support functions. The website reflects a professional and consistent brand image with clear contact information and a cookie consent mechanism, indicating attention to privacy compliance. Technically, the site is built on WordPress using modern themes and plugins, including Bootstrap and Google Tag Manager, hosted likely by 1&1 IONOS. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is trustworthy and well-maintained, serving a specialized non-profit audience.

Y

Young Entrepreneurs in Science

youngentrepreneursinscience.com

10

Young Entrepreneurs in Science (YES) is a well-established non-profit educational program based in Germany, focused on equipping master’s students, doctoral candidates, and postdocs with entrepreneurial skills through free workshops and training programs. Supported by government ministries and business partners, YES aims to foster a cultural shift in science towards entrepreneurship and innovation. The website reflects a professional and consistent brand presence with clear messaging and a strong partnership ecosystem, including the Falling Walls Foundation as a parent organization. Technically, the site is built on WordPress with modern technologies and integrates multiple analytics and marketing tools, though it lacks a cookie consent mechanism and some security headers. Security posture is generally good with HTTPS and no exposed sensitive data, but could be improved by adding security policies and incident response contacts. Overall, the website is trustworthy, well-designed, and serves its target audience effectively.

F

Falling Walls Foundation

berlinscienceweek.com

65

Berlin Science Week is a well-established annual science and culture festival organized by the Falling Walls Foundation, showcasing hundreds of free events across Berlin. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. It targets a broad audience including researchers, students, and the general public interested in science. The technical infrastructure is modern, leveraging Drupal 10 CMS, Bootstrap, and various analytics and consent management tools. Security posture is good with HTTPS enabled and consent mechanisms in place, though some security headers could be improved. The domain is long-standing and consistent with the organization's history, enhancing trustworthiness. Overall, the website demonstrates strong compliance with privacy regulations and offers a rich user experience.

C

Creative Bureaucracy Festival

creativebureaucracy.org

62

Creative Bureaucracy Festival is a well-established international event focused on public sector innovation, attracting thousands of participants from government and civil society. The website is professionally designed using Drupal 10, with modern analytics and consent management tools implemented. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC and security headers could be improved. The domain registration data aligns well with the festival's founding and operations, indicating legitimacy. Overall, the website effectively supports the festival's mission and audience engagement.

S

SECURE NETWORK

securenetwork.it

70

SECURE NETWORK is a specialized cybersecurity service provider based in Italy, offering a range of services including application security, cloud and infrastructure security, cybersecurity governance, cyber risk rating, and operation technology security. The company targets businesses and organizations seeking to enhance their cybersecurity posture. The website is built on WordPress using the Divi theme and incorporates modern web technologies such as Smart Slider and Google Analytics for user tracking. The site is well-structured with good design quality and mobile optimization, providing a professional user experience. Security measures such as HTTPS and security headers are properly implemented, indicating a solid security posture. However, the website lacks explicit privacy and cookie policies, as well as GDPR compliance mechanisms like consent banners, which are critical for legal compliance in the EU. Contact information is limited to a contact form without direct emails or phone numbers, which may affect user trust and accessibility. Overall, the website presents a credible and professional image but should enhance privacy compliance and transparency to improve trust and legal adherence.

A

ACADEMIA d.o.o.

lahko.si

46

Lahko.si is a Slovenian educational platform dedicated to promoting lifelong learning through various educational programs, including live and online courses. The platform is supported by recognized educational entities such as ACADEMIA d.o.o. and ACS, positioning it as a reputable resource in the Slovenian education sector. The website offers video content with accessibility features like captions and transcripts, enhancing user engagement and inclusivity. Technically, the site is built on Drupal 10 with modern front-end technologies, ensuring a responsive and accessible user experience. However, explicit privacy policies and terms of service are not readily found, which may impact user trust and compliance. Security posture is moderate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and incident response contacts. Overall, the platform is a credible educational resource with room for improvement in privacy and security transparency.

W

Webtasy, d.o.o.

teachxr.si

45

teachXR.si is a Slovenian educational project focused on integrating advanced XR (virtual, augmented, and extended reality) technologies into primary and secondary schools. The project aims to transform educational processes by equipping teachers with knowledge and tools to develop XR content, establishing learning laboratories across Slovenia, and creating digital learning materials. The website serves as an informational platform for the project, targeting educators and students within the Slovenian education system. Technically, the site is built on WordPress using the Divi child theme, with performance optimizations via LiteSpeed Cache and tracking implemented through Google Tag Manager. Security posture is moderate with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is professionally designed and content-rich but would benefit from enhanced privacy compliance and security best practices.

A

Analitsko središče

zakakovost.si

51

The website zakakovost.si serves as a centralized, accessible platform dedicated to quality assurance and self-evaluation in Slovenian education institutions, including kindergartens and schools. It provides key resources such as legislative documents, strategic policies, national reports, and international studies to support school leaders, quality teams, and policymakers. The site is positioned as a national educational resource supported by the Slovenian government and the European Union. Technically, the site is built on WordPress with a modern tech stack including Matomo analytics configured for privacy, accessibility plugins, and a cookie consent mechanism, hosted by the Slovenian academic network (ARNES). Security posture is good with HTTPS enforced and privacy-conscious analytics, though some security headers could be improved. The WHOIS data shows a suspicious future domain creation date, likely a data error, but the registrar and hosting align with the site's educational purpose. Overall, the site is professional, trustworthy, and well-optimized for accessibility and mobile use, with no detected security or content safety issues.

B

Bosko

bosko.si

41

Bosko.si is a small Slovenian business specializing in graphic and web design services, including corporate identity, user interface, and print materials. The website presents a minimalistic and basic online presence with a placeholder message indicating upcoming content. The company appears to have been established in 2012, consistent with the domain registration data. The technical infrastructure relies on standard web technologies such as jQuery and Google Fonts, hosted by a local Slovenian provider. However, the site lacks modern security implementations such as HTTPS and security headers, and no privacy or cookie policies are present, indicating limited compliance with GDPR and other privacy regulations. Contact information is clearly provided, but no forms or social media links are available, limiting user engagement and trust signals.

M

Domača stran | Mojaizbira

mojaizbira.si

43

Mojaizbira.si is a Slovenian governmental and educational platform dedicated to providing comprehensive information about vocational professions and schools. Supported by the Ministry of Education, Science and Sport and co-financed by the European Social Fund, it serves as an authoritative resource for students and career advisors in Slovenia. The platform offers searchable databases of over 500 professions and 150 schools, along with information on scholarships for deficit professions. Technically, the website is built on Drupal 8, hosted on Arnes infrastructure, and includes modern web technologies such as FontAwesome and Klaro for cookie consent. Google Analytics is used for traffic monitoring. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service on the homepage. Overall, the site is professional, trustworthy, and well-targeted to its audience, though improvements in transparency and security practices are recommended.

E

Europass Slovenija

europass.si

45

Europass Slovenija operates as the official national portal providing digital tools and services to facilitate employment and education opportunities through standardized documents such as CVs, cover letters, and mobility certificates. Supported by the Slovenian government and the European Union, it targets job seekers, career advisors, employers, and educational institutions. The platform emphasizes accessibility, multilingual support, and official trust signals, positioning itself as a key resource in the Slovenian education and employment ecosystem. Technically, the website is built on WordPress, leveraging modern web technologies including jQuery and Google Fonts, with good mobile optimization and accessibility features. The site is hosted under the Arnes registrar, consistent with Slovenian academic and governmental infrastructure. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analyzed content. Privacy compliance is evident through the presence of a privacy policy and cookie banner aligned with GDPR requirements. Overall, Europass Slovenija presents a trustworthy, professional, and well-maintained digital presence with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency could further enhance its security posture and user trust.

C

Center RS za poklicno izobraževanje

nok.si

10

The website nok.si serves as the official portal for the Slovensko ogrodje kvalifikacij (SOK), the national qualifications framework of Slovenia. It provides a comprehensive system for classifying qualifications across 10 levels based on learning outcomes. The portal targets individuals, employers, and educational institutions, offering tools such as qualification registers, level determination applications, and educational resources. The site is operated by the Center RS za poklicno izobraževanje, a recognized Slovenian educational entity, and is well-positioned as a national authoritative source for qualification information.

I

Institute of RS for VET

npk.si

39

The website npk.si/en represents the National Vocational Qualifications system managed by the Institute of RS for Vocational Education and Training in Slovenia. It serves as an authoritative platform providing information and resources for individuals and companies regarding vocational certification based on work experience and competencies. The site is well-positioned as a government-related educational service with a clear target audience and a medium organizational size. Technically, the site is built on WordPress, uses modern libraries like jQuery, and is hosted under a reputable registrar (Arnes). The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data, though it lacks explicit security headers and incident response information. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Overall, the site is professional, trustworthy, and safe for general audiences.

I

IRDO – Institute for the Development of Social Responsibility

horus.si

41

The website www.horus.si represents the Slovenian Award for Social Responsibility HORUS, managed by IRDO, a non-profit institute focused on promoting social responsibility and sustainable development. The site serves as an information hub for award calls, laureates, workshops, and news updates, targeting organizations and individuals interested in social responsibility within Slovenia. The business model is non-profit, centered on recognition and promotion rather than commercial sales. The domain age and content history support a credible and established presence in this niche. Technically, the site is built on WordPress with popular plugins like Slider Revolution and WPBakery Page Builder, ensuring a modern and responsive design. The site loads moderately fast and is mobile-optimized, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with a good SSL configuration. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No vulnerabilities or malicious content were detected, and contact information is clearly provided, enhancing credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security hardening. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure policy to enhance user trust and regulatory compliance.

S

SloCro klub

slo-cro-klub.hr

47

SloCro klub operates as a regional economic chamber focused on strengthening business relations between Slovenia and Croatia. The organization facilitates cooperation through partnerships, information support, and consulting services, targeting businesses and institutions engaged in cross-border economic activities. The website reflects a professional and consistent brand presence with a clear business focus on economic cooperation. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is moderate, with HTTPS enabled and domain transfer protections in place, though DNSSEC is not enabled and security headers are absent. Privacy compliance is basic, with a cookie consent mechanism implemented but no explicit privacy or terms of service pages found. Overall, the site is accessible, well-structured, and serves its business purpose effectively.

B

Business at OECD

biac.org

11

Business at OECD (BIAC) is a well-established advocacy organization representing the private sector's interests at the OECD. Founded in 1962, it connects over 55 national business and employer bodies, facilitating dialogue between business and government to promote economic growth and sustainable development. The website reflects a professional and authoritative presence with comprehensive policy content, reports, and event information targeting business leaders, policymakers, and OECD stakeholders. Technically, the site is built on HubSpot CMS, leveraging modern web technologies and analytics tools, with good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is evident with a clear privacy policy and cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness, though WHOIS data is unavailable due to privacy protection, which is justified given the organization's nature.

W

Reiseberichte :: Welt bereisen

welt-bereisen.de

47

The website 'Welt bereisen' is a niche travel blog primarily focused on European travel, with a strong emphasis on cultural, historical, and religious sites. It offers detailed travel reports, photo galleries, and rich content aimed at travel enthusiasts interested in history and culture. The site is small-scale and appears to be managed by an individual or small team, with content quality rated as good and consistent branding. Technically, the site uses a custom CMS, modern web fonts, and common JavaScript libraries such as jQuery, along with Google Analytics and Piwik for tracking. It employs HTTPS and includes a cookie consent mechanism, indicating some level of GDPR compliance. However, explicit privacy policies and terms of service are missing, and no direct contact information is provided, which limits business credibility and privacy transparency. Security posture is moderate with HTTPS but lacks security headers and formal security policies. Overall, the site is safe, professional, and well-structured but could improve in privacy and security documentation.

B

Beuroner Kunstverlag

klosterkunst.de

43

Beuroner Kunstverlag operates the Klostershop Beuron website, an e-commerce platform specializing in religious and monastic art, cards, books, candles, and gifts. The business targets Christian customers and religious communities interested in high-quality religious-themed products. The website is professionally designed with consistent branding and good navigation, optimized for mobile devices and accessibility. Technically, it leverages modern frameworks such as Bootstrap and jQuery, and is hosted on Hetzner servers, indicating a stable infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of privacy and terms of service pages indicates compliance gaps. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns with a legitimate German business, albeit with limited registrant details.

T

Toimintakykyinen Suomi

toimintakykyinensuomi.fi

67

Toimintakykyinen Suomi is a Finnish non-profit initiative focused on promoting physical activity and improving functional capacity among the Finnish population. The website serves as a platform for campaigns, partner engagement, and public awareness, coordinated by the Finnish Olympic Committee (Suomen olympiakomitea). It targets a broad audience including individuals, workplaces, educational institutions, and organizations to foster healthier lifestyles and societal resilience. The initiative leverages partnerships with national organizations and integrates social media to amplify its message. Technically, the website is built on WordPress with modern JavaScript libraries and integrates third-party services such as Google Tag Manager, CookieHub for cookie consent, and Juicer for social media feeds. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy linked from the parent organization’s domain. Contact information is limited to email addresses and partner site links, with no direct phone numbers found. Overall, the website presents a trustworthy and professional front for a national health campaign. It demonstrates good digital maturity and compliance with privacy regulations, though it could improve security header implementation and provide clearer direct contact options.

S

Suomisport

suomisport.fi

69

Suomisport is a Finnish digital platform designed to streamline the operations of sports clubs by providing comprehensive membership management, payment processing, event management, and communication tools. Supported by the Finnish Olympic Committee (Suomen Olympiakomitea), it holds a strong market position as a trusted and modern service for sports organizations of all sizes and disciplines. The platform targets sports clubs, athletes, and recreational sports participants, offering a unified mobile application and web services to enhance user experience and operational efficiency. Technically, the website is built on WordPress with modern integrations such as Gravity Forms, hCaptcha, and Google Tag Manager, ensuring a robust and user-friendly interface with good mobile optimization and accessibility. Security measures include HTTPS enforcement, spam protection via hCaptcha, and secure payment processing through Svea Payments, with regular security audits mentioned. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, making it a reliable platform for its target audience.

S

Suomalaisen Työn Liitto

avainlippu.fi

52

Suomalaisen Työn Liitto is a well-established non-profit organization dedicated to promoting Finnish work and products through certification marks such as Avainlippu. The website serves as a comprehensive platform to inform consumers and businesses about the certification criteria, benefits, and application processes. The organization enjoys a strong market position in Finland with thousands of companies using its marks, reflecting trust and recognition in the Finnish market. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, hosted on a reliable provider. Security posture is solid with HTTPS, cookie consent, and no evident vulnerabilities, though some security headers could be enhanced. Overall, the site is professional, user-friendly, and compliant with privacy regulations, supporting the organization's mission effectively.

E

EMMA-Espoo Museum of Modern Art

emmazone.fi

46

EMMA Zone is a digital content platform operated by EMMA – Espoo Museum of Modern Art, providing multimedia content such as articles, videos, interviews, and podcasts focused on modern art. The platform targets art enthusiasts and the general public interested in cultural content, positioning itself as a niche digital museum experience. Technically, the site is built on Angular 13, integrates Google Tag Manager for analytics, and uses Enzuzo for cookie consent management, reflecting a modern and compliant digital infrastructure. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers and incident response information could be improved. Overall, the site is professional, trustworthy, and aligned with the museum's branding and mission.

The website www.otustanausta.com is a Bulgarian language forum platform focused on user-generated recommendations for various services, specialists, and businesses across different regions in Bulgaria. It serves as a community-driven resource for sharing trusted local information, with monetization primarily through Google Adsense advertising. The site uses the phpBB forum software and integrates common web technologies such as Google Fonts and Font Awesome. While the site is accessible over HTTPS and includes basic security headers, it lacks advanced security measures such as Content Security Policy and X-Frame-Options headers. The presence of session IDs in URLs poses a potential security risk. No privacy, cookie, or terms of service policies are explicitly found, indicating limited privacy compliance. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site provides useful community content but requires improvements in security and compliance to enhance trust and protect users.

C

Central European Media Enterprises

seirsanduk.net

9

The website seirsanduk.net operates as an online streaming portal primarily focused on Bulgarian TV channels, notably bTV and its associated media group channels. It provides free access to live TV streams and program schedules, targeting a general Bulgarian-speaking audience interested in national television content. The business model revolves around ad-supported streaming services, leveraging partnerships and alternative links to enhance accessibility. The site is positioned as a media streaming service rather than the official broadcaster's primary domain, as indicated by the recent domain registration date compared to the long-established bTV brand.

The website brikel-bg.com is currently inaccessible due to a security block imposed by the Wordfence plugin, which returns an HTTP 503 response indicating access is limited for security reasons. The site content is effectively blocked, preventing any meaningful analysis of business or service information. The domain is long-established, registered since 2001 with Tucows Domains Inc., indicating legitimacy and stability in domain ownership. However, no privacy, cookie, or terms of service policies are publicly available, and no contact information or business details are exposed on the site. Technically, the site runs on WordPress with Wordfence security, but no further technical or SEO optimizations can be assessed due to the block. Security posture is partially positive due to the use of Wordfence but lacks DNSSEC and visible security headers. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the block and lack of public information.

П

ПАШОВИ КАРС ООД

pashovcars.com

57

Pashov Cars is a Bulgarian company specializing in the sale of high-quality used cars sourced from Europe, the USA, and Canada. The company offers a comprehensive range of services including free consultations, preferential leasing and credit terms, vehicle registration assistance, insurance services, and professional car servicing. Positioned as a trusted partner in the Bulgarian used car market, Pashov Cars targets individual and business customers seeking reliable automotive solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The platform is built on a custom e-commerce solution by Valival Commerce, with moderate performance and good SEO practices. Security posture is solid with HTTPS enabled and domain transfer protections, though some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and a consent mechanism. Overall, the security posture is adequate for the business size, with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, indicating legitimacy and transparency. Strategic recommendations include enhancing security headers, publishing a formal security policy, and continuous monitoring of third-party scripts to maintain security and compliance standards.

S

SofDestroy.com

sofdestroy.com

59

SofDestroy.com is a small Bulgarian company specializing in demolition, cleaning, and construction waste removal services primarily in Sofia. The website presents a professional image with detailed service descriptions, pricing, and customer testimonials, positioning the company as a reliable local service provider. Technically, the site is built on WordPress using the Astra theme and Rank Math SEO plugin, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and privacy compliance policies. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the site is trustworthy and well-structured but would benefit from enhanced privacy and security measures.

А

Адвокатска кантора Дотова и Божинова

soflaw.bg

48

Адвокатска кантора Дотова и Божинова е утвърдена малка адвокатска кантора, базирана в София, България, предлагаща широк спектър от правни услуги, включително търговско, семейно, административно, трудово и медицинско право, както и недвижими имоти и изпълнителни дела. Сайтът е професионално изработен на WordPress с използване на модерни технологии и добри SEO практики. Въпреки липсата на публично достъпна политика за поверителност и бисквитки, контактната информация е изчерпателна и лесно достъпна, а клиентските отзиви и медийните упоменавания подсилват доверието в кантората. Техническият стек е съвременен, но липсват някои важни мерки за сигурност като security headers и политика за инциденти.

P

PraneKilimi.bg

pranekilimi.bg

51

PraneKilimi.bg is a small local Bulgarian business specializing in professional carpet and textile cleaning services in Sofia. The company offers a range of services including washing carpets, rugs, mats, blankets, and other textiles with free pickup and delivery within Sofia. The website demonstrates a solid market position with over 10 years of experience and a loyal customer base including institutions. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks advanced security headers and explicit security policies. Privacy compliance is partial, with no visible cookie consent mechanism and only a basic privacy policy. Overall, the site is professional, trustworthy, and safe for general audiences.

E

Elinor.bg

elinor.bg

50

Elinor.bg is a Bulgarian e-commerce website specializing in the sale of perfumes, cosmetics, and makeup products. The site targets a general audience interested in beauty products and offers a large catalog with over 30,000 items. The business model is retail-focused, leveraging online sales channels to reach customers primarily in Bulgaria. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site integrates multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Criteo, and SendPulse, indicating a mature digital marketing infrastructure. Mobile optimization and SEO practices are adequately implemented, contributing to a positive user experience.

А

Акаунт Консулт КО

acc-consultco.com

55

Акаунт Консулт КО is a professional accounting firm based in Sofia, Bulgaria, offering comprehensive accounting, tax, and payroll services tailored to various business sectors including transport, retail, healthcare, hospitality, and non-profit organizations. The company emphasizes personalized service, over 20 years of experience, and flexible solutions including remote service options. Their market position is strong within the Bulgarian accounting services sector, targeting small to medium-sized enterprises. Technically, the website is built on WordPress with standard plugins and demonstrates good SEO and mobile optimization, though some improvements in security headers and privacy compliance are recommended. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks explicit security policies and headers. Overall, the website is professional, trustworthy, and content-rich, though it lacks formal privacy and cookie policies which impacts compliance scoring.

The website adexchangeclear.com is currently inaccessible, returning a 403 Forbidden error page likely due to Cloudflare WAF or security restrictions. This prevents any meaningful content or metadata extraction. The domain is registered since 2015 with GoDaddy and uses Cloudflare DNS services, indicating a legitimate registration and hosting setup. However, the lack of accessible content, contact information, or policies severely limits the ability to assess the business, technical infrastructure, or security posture. The site appears to be protected by security mechanisms that block public access, which may be intentional or due to misconfiguration. Overall, the digital maturity and security posture cannot be fully evaluated due to blocked content.

Н

Национално Движение Русофили

rusofili.bg

51

Национално Движение Русофили is a Bulgarian non-profit organization dedicated to promoting Russian culture, history, and Bulgarian-Russian relations. The website serves as a media platform offering news, cultural event information, historical research, and educational content primarily targeted at Bulgarian-speaking audiences interested in Russian topics. The organization positions itself as a cultural and societal bridge, continuing the traditions of Russophilia in Bulgaria. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enforced and some content protection scripts, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

Н

Нет Инфо ЕАД

abv.bg

61

АБВ Поща, operated by Нет Инфо ЕАД, is a leading Bulgarian email service provider established in 1998. The website offers a secure and user-friendly email platform with 15 GB storage, contact management, and mobile applications. It integrates a rich media ecosystem featuring news, weather, horoscopes, and entertainment content from trusted Bulgarian partners, positioning itself as a comprehensive digital portal for Bulgarian internet users. The business model combines free email services with advertising and premium offerings (ABV+). The company maintains a strong market presence with consistent branding and official mobile app distribution.

C

Crafthemes

crafthemes.com

9

Crafthemes is a small technology business specializing in the development and sale of free and premium WordPress themes, primarily targeting bloggers and small businesses. Their website showcases a variety of themes with a focus on simplicity, SEO optimization, and customization. The company emphasizes customer support and documentation to enhance user experience. Technically, the website is built on WordPress using modern tools such as Elementor, Easy Digital Downloads, and Google reCAPTCHA, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, with good SEO practices in place. Security posture is reasonable with HTTPS enforced and CAPTCHA on forms, but lacks advanced security headers and published security policies. The absence of privacy and cookie policies is a notable compliance gap. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website presence. Overall, the site is functional and trustworthy from a user perspective but would benefit from improved transparency and security documentation.

S

Stämpfli Kommunikation

staempfli.ch

57

Stämpfli Kommunikation is a well-established Swiss communication agency and printing service provider founded in 1997. The company offers a range of services including web presence development, branding, editorial systems, and printing solutions, targeting businesses and organizations in Switzerland. The website is professionally designed, powered by TYPO3 CMS, and optimized for mobile devices, reflecting a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies, as well as security headers, indicates areas for improvement in compliance and security posture. The domain registration data aligns well with the company's history, supporting its legitimacy. Overall, the website presents a professional business image but would benefit from enhanced privacy and security measures to strengthen trust and compliance.

xmlteam GmbH & Co KG operates in the transportation sector, providing specialized software solutions for the cruise and travel industry. Their flagship product, CruiseCompass, is accessible online without requiring software downloads and integrates with various mid-office systems used by travel agencies. The company targets travel professionals and agencies seeking efficient cruise management tools. The website is currently under maintenance but provides clear access points to their services and support. Technically, the website employs modern frameworks such as Bootstrap 5.1.3 and is hosted on Hetzner servers, indicating a reliable infrastructure. The site uses HTTPS, ensuring secure communication, but lacks advanced security headers and cookie consent mechanisms. The design and content quality are basic but functional, with room for improvements in accessibility and SEO. From a security perspective, the site demonstrates a good baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms suggests limited maturity in security governance. No tracking or analytics scripts were detected, indicating minimal user data collection. Overall, the website and domain appear legitimate and consistent with the business profile. Strategic improvements in security headers, privacy compliance, and user experience would enhance trust and compliance posture.

The website at web.tuhla.com presents as a minimal placeholder with no substantive content or business information. The site consists solely of a background image and a title tag, lacking any metadata, forms, external links, or contact details. The absence of WHOIS data for the domain suggests it may be unregistered or a subdomain without independent registration, which raises questions about the legitimacy and operational status of the site. Technically, the site does not demonstrate modern web practices such as HTTPS, security headers, or SEO optimization, indicating a low level of digital maturity. Security posture is weak due to missing HTTPS and lack of security policies or headers. Overall, the site appears non-operational or under construction, with significant gaps in compliance, security, and business credibility.