Security Directory

S

SIGIC - The Slovenian Music Information Center

musicslovenia.si

41

Music Slovenia is a consortium of Slovenian musical institutions dedicated to promoting Slovenian music both nationally and internationally. The website serves as a platform to connect various stakeholders in the Slovenian music scene, offering news, event information, playlists, tours, and showcases. The organization targets musicians, cultural institutions, and music enthusiasts interested in Slovenian music. The business model focuses on cultural promotion and collaboration facilitation within the music industry niche. Technically, the website employs a modern but somewhat dated technology stack including jQuery 2.2.4, Bootstrap, and various UI libraries. It uses HTTPS with good SSL configuration but lacks security headers. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Analytics are handled via Plausible Analytics, indicating a privacy-conscious approach but lacking cookie consent mechanisms. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data but misses important security headers and formal security policies such as privacy, cookie, and incident response disclosures. No vulnerability disclosure or security contact information is provided, which could be improved to enhance trust and compliance. The domain registration data is consistent and appropriate for the business, supporting legitimacy. Overall, the website is professional and trustworthy with good content quality and business credibility but requires improvements in privacy compliance and security best practices to reach higher maturity levels.

R

RegioCrowd

regiocrowd.com

56

RegioCrowd is a German non-profit platform dedicated to facilitating community participation in nature and environmental conservation projects across the regions of Saxony, Saxony-Anhalt, and Thuringia. The platform enables individuals and companies to engage in various activities such as volunteering and crowdfunding to support biodiversity and environmental protection. The website is professionally designed, mobile-optimized, and built on the TYPO3 CMS framework, indicating a mature digital infrastructure. Privacy and cookie policies are present and GDPR compliant, reflecting a commitment to user data protection. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Security posture is good with HTTPS enforced and secure form handling, though additional security headers and a vulnerability disclosure policy would strengthen the security framework. Overall, RegioCrowd presents a trustworthy and well-structured platform for environmental engagement with room for improvement in domain transparency and security disclosures.

S

Südtiroler Jugendring (SJR)

jugendring.it

38

The Südtiroler Jugendring (SJR) is a well-established non-profit umbrella organization representing children's and youth associations in South Tyrol, Italy. Founded in 1977, it provides advocacy, participation opportunities, youth counseling, and various services to support youth engagement. The website reflects a professional and consistent brand image with clear communication channels and relevant content tailored to its target audience of youth and youth organizations in the region. Technically, the site is built on TYPO3 CMS with modern frontend technologies, offering good mobile optimization and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious or malicious content.

Q

Quadriga Communication GmbH

quadriga-communication.de

49

Quadriga Communication GmbH is a specialized PR agency focused on the finance and publishing sectors, offering services such as communication strategies, corporate publishing, event management, and product communication. The company positions itself as a trusted partner for financial institutions and publishers, leveraging a broad network and expertise to enhance client reputation and product sales. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress using the Avada theme and several plugins for enhanced UI and multimedia content. The site is mobile-optimized and SEO-friendly but lacks some privacy and security policy disclosures. Security posture is generally good with HTTPS enabled and secure forms, but missing security headers and incident response information are noted. Overall, the site is trustworthy and professionally maintained but would benefit from improved privacy compliance and security transparency.

The website for Bundesverband der Gebäudemodernisierer, Regionaldirektion Mecklenburgische Seenplatte I, serves as a regional association specializing in real estate financing and building modernization services in the Mecklenburgische Seenplatte region of Germany. It offers key services such as full property renovation consulting, energy efficiency quick checks, and information on renovation loans and subsidies. The site targets homeowners and property investors seeking to modernize and finance their properties sustainably. Technically, the website is built on Joomla CMS with Helix Ultimate framework, leveraging Bootstrap and UIkit for responsive design. The hosting is provided by a German hosting provider (rzone.de), and the site is secured with HTTPS and includes a cookie consent mechanism. Security posture is moderate with room for improvement in HTTP security headers and explicit security policies. No forms or email contacts are directly visible, but phone contacts are clearly provided. Overall, the site is professional, accessible, and compliant with GDPR cookie consent requirements.

P

Philea - Philanthropy Europe Association

philea.eu

48

Philea - Philanthropy Europe Association is a well-established non-profit organization serving as a central hub for European philanthropic foundations and networks. The website clearly communicates its mission to nurture a diverse and inclusive philanthropic ecosystem by providing knowledge sharing, networking, policy advocacy, and collaborative initiatives. The target audience includes foundations, philanthropic organizations, and stakeholders interested in European philanthropy. The business model is membership-based, focusing on collective impact and sector development. The organization is positioned as a recognized voice in European philanthropy with a medium-sized presence based in Belgium. Technically, the website is built on WordPress with modern technologies such as Bootstrap and jQuery, and it uses reputable analytics tools including Google Analytics and Piwik PRO. The site is hosted by OVH SAS, a known hosting provider, and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with optimized CSS and asynchronous script loading. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and published security or incident response policies. The absence of a cookie consent mechanism is a notable GDPR compliance gap. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, the security posture is good but could be improved with additional policies and technical headers. The overall risk assessment is low, with the website demonstrating professionalism, legitimacy, and a strong trust profile. Strategic recommendations include implementing a cookie consent banner, publishing security and incident response policies, adding security headers, and maintaining regular audits of third-party scripts to enhance compliance and security posture.

F

Fondazione ONC

fondazioneonc.org

65

Fondazione ONC is an Italian non-profit foundation established in 2018 by ministerial decree to oversee and control volunteer service centers (CSV) across Italy. It operates with full statutory and managerial autonomy, focusing on transparency, efficiency, and effectiveness in the third sector. The foundation maintains a national presence with territorial offices (OTC) and publishes official documents such as policies, annual reports, and guidelines. The website reflects a professional institutional presence targeting non-profit organizations and stakeholders in the Italian social sector. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating Google Maps API for geographic visualization of CSV locations. The site is mobile-optimized, SEO-friendly, and uses modern web technologies, although some accessibility features could be improved. Analytics are implemented via Google Analytics and Tag Manager, with a cookie consent mechanism in place. Security posture is good with HTTPS enforced and no visible sensitive data exposure. However, security headers are not detected, and no explicit security or incident response policies are published. WHOIS data is unavailable or blocked, which slightly reduces trust but does not contradict the legitimacy suggested by the website content and official documentation. Overall, the site presents a trustworthy, professional, and compliant digital presence for a specialized non-profit entity. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance further.

Q

QRC Assurance And Solutions Pvt. Ltd.

qrcsolutionz.com

69

QRC Assurance And Solutions Pvt. Ltd. is a professional compliance and certification services provider specializing in PCI DSS, HIPAA, GDPR, and ISO 27001 certifications primarily serving clients in India and internationally. The company leverages over 150 man-years of experience and offers a broad portfolio of compliance, audit, and security assessment services. Their market position is solid within the compliance domain, supported by client testimonials and a comprehensive service catalog. Technically, the website is built on a modern stack including Bootstrap, jQuery, and Logiks CMS, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and reCAPTCHA usage, though lacking some security headers and public incident response information. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and transparency.

V

Ville de Nice

nice.fr

64

The website www.nice.fr is the official digital portal for the city of Nice, France, providing comprehensive municipal information, administrative procedures, event agendas, and public alerts. It serves a broad audience including residents, visitors, professionals, and various demographic groups such as seniors, children, and parents. The site is well-branded with consistent official city imagery and messaging, positioning it as a trusted government resource. Technically, the site is built on WordPress with Bootstrap framework, uses Matomo for analytics with cookies disabled, and demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and minimal tracking, though explicit security headers and privacy policies are not clearly found in the provided content. WHOIS data is unavailable due to AFNIC restrictions, which is common for .fr domains, but this does not detract significantly from the site's legitimacy given its official nature. Overall, the site is professional, trustworthy, and serves its public service mission effectively.

M

muensterLAND.digital e.V.

muensterhack.de

45

MÜNSTERHACK is a well-established civic technology hackathon based in Münster, Germany, focused on bringing together professionals, students, and civic activists to collaboratively develop ideas and prototypes that enhance the livability of the city and region. Supported by local government, businesses, and community organizations, it has a strong market position as a key event in the regional tech and civic engagement ecosystem. The website reflects a professional and community-driven business model emphasizing open data and sustainable urban development solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, and Matomo analytics, hosted on Alfahosting infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in security headers and cookie consent mechanisms are recommended. The use of Matomo indicates a privacy-conscious approach to user tracking. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, the absence of explicit security headers and cookie consent mechanisms suggests room for improvement in compliance and security posture. No incident response or vulnerability disclosure information is provided, which could be enhanced to build trust. Overall, the website is trustworthy, professionally maintained, and serves its community well. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and adding incident response contacts to improve compliance and security maturity.

И

Информационно обслужване АД

evroto.bg

63

The website evroto.bg serves as the official Bulgarian government portal dedicated to informing citizens and businesses about the adoption of the euro currency in Bulgaria. It provides comprehensive news, events, educational materials, and multimedia content to support the transition process. The site targets a broad audience including citizens, businesses, and stakeholders interested in the eurozone integration. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Video.js for video playback, and Matomo for analytics, hosted behind Cloudflare DNS services. Accessibility features are well implemented, enhancing usability for diverse users. Security-wise, while HTTPS is presumably enabled, the site lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is privacy protected in compliance with GDPR, which is appropriate for this type of government-related domain. Overall, the site is professional, trustworthy, and serves its informational purpose effectively, though it would benefit from enhanced security and privacy disclosures.

М

Министерски съвет на Република България

gov.bg

55

The website gov.bg is the official portal of the Council of Ministers of the Republic of Bulgaria, serving as a comprehensive source of governmental information, news, administrative services, and anti-corruption initiatives. It targets Bulgarian citizens, institutions, media, and international partners, providing authoritative content in Bulgarian with an English language option. The site reflects the government's commitment to transparency and public communication. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and parallax effects, with a responsive design optimized for mobile devices. The presence of DNSSEC and enforced HTTPS indicates a strong foundational security posture. Cookie consent mechanisms are implemented with user customization, supporting GDPR compliance. Security-wise, the site demonstrates good practices such as HTTPS, DNSSEC, and cookie consent, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious activities were detected. The WHOIS data is privacy protected per GDPR, which is standard for government domains, and the domain is consistent with official Bulgarian government use. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure program to further strengthen security posture.

I

Idego Group

idego.pl

11

Idego Group is a medium-sized technology company specializing in AI and data-driven business solutions. Founded in 2013, it serves multiple sectors including fintech, healthcare, e-commerce, and enterprise data management. The company offers consulting, software, platforms, and tailored AI solutions designed to improve operational efficiency and innovation for its clients. The website reflects a professional and consistent brand image with strong trust indicators such as client logos and testimonials. Technically, the site uses modern web technologies including Bootstrap and Cloudflare DNS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protection flags, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is supported by a comprehensive privacy policy and whistleblower policy, but lacks a cookie consent mechanism. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of blocking or WAF interference.

М

Министерски съвет Република България

government.bg

58

The website government.bg is the official online portal of the Council of Ministers of the Republic of Bulgaria, serving as a central hub for government information, news, administrative services, and anti-corruption initiatives. It targets Bulgarian citizens, government officials, media, and international partners, providing authoritative content about government structure, policies, and programs. The site is well-branded with consistent government imagery and bilingual support (Bulgarian and English). Technically, the site employs a modern but custom CMS platform with common web technologies such as jQuery, Bootstrap, and Font Awesome. It features responsive design and accessibility considerations, though some advanced accessibility features could be improved. Performance is moderate with standard optimization. Security is adequate with HTTPS enforced and cookie consent implemented, but lacks visible HTTP security headers which could enhance protection. From a security and compliance perspective, the site shows good adherence to GDPR with no personal data exposed and a clear cookie consent mechanism. WHOIS data is limited due to GDPR but domain legitimacy is supported by official Bulgarian government nameservers and domain status. No critical vulnerabilities or security incidents are evident. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is a trustworthy, professional government portal with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing detailed security and privacy policies, and continuous monitoring of third-party scripts to maintain security posture.

С

Столична община

sofia.bg

71

The website www.sofia.bg is the official portal of the Sofia Municipality, serving as a comprehensive platform for disseminating municipal information, news, events, and public services to residents and visitors. It holds a strong market position as the primary government website for Sofia, Bulgaria, and offers a wide range of services including public consultations, access to public registers, and updates on city activities. The site targets a broad audience including citizens, businesses, and tourists. Technically, the site is built on the Liferay CMS platform with React and AlloyUI frameworks, ensuring a modern and responsive user experience. The integration of Matomo analytics indicates a moderate level of user tracking with privacy compliance. Security posture is good with HTTPS enforcement and content security policies, although explicit security and incident response policies are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and consistent branding, making it a reliable source of municipal information.

S

Stadtwerke Kufstein GmbH | Kufgem GmbH

lehrling.tirol

63

Lehrling.tirol is the official apprenticeship academy website for Stadtwerke Kufstein GmbH and Kufgem GmbH, two regional companies in Tirol, Austria, operating primarily in the energy and municipal services sectors. The website promotes vocational training opportunities, offering six apprenticeship professions with additional qualifications and career development support. It targets young people seeking apprenticeships and emphasizes a secure, modern, and certified training environment. Technically, the site is built on TYPO3 CMS with modern frontend libraries and uses Matomo for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and spam-protected contacts, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site presents a professional, trustworthy, and well-maintained digital presence supporting the business's regional training mission.

S

Stadtwerke Kufstein GmbH

stwk.at

61

Stadtwerke Kufstein GmbH is a well-established regional utility provider in Austria, serving the Kufstein area with a broad range of services including electricity, water, waste management, district heating, telecommunications, and e-mobility solutions. With a history dating back to 1894, the company positions itself as a sustainable and innovative local supplier with strong community ties. The website reflects a mature digital presence built on TYPO3 CMS, featuring modern UI components and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

Kostner GmbH

kostner.net

9

Kostner GmbH operates a diversified business primarily in the energy sector, offering fuel products, retail services through gas stations and bistros, waste cleaning and disposal, and energy systems including e-mobility solutions. The company targets both general consumers and business clients within Italy, maintaining a medium-sized regional presence with multiple related subsidiaries. The website is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager and Usercentrics for analytics and consent management, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response information. The absence of WHOIS data for the domain raises concerns about registration legitimacy, though the professional website and consistent business information mitigate some trust issues. Overall, the site is well-designed, mobile-optimized, and compliant with GDPR privacy requirements, supporting a positive user experience and business credibility.

D

Digital Hub münsterLAND e.V.

muensterland.digital

53

Digital Hub münsterLAND e.V. is a regional digital innovation community based in Münster, Germany, focused on fostering collaboration between SMEs, startups, and tech professionals. The organization offers a variety of services including startup matching, accelerator programs, coworking spaces, and events to support digital business model development and innovation in the Münsterland region. The website reflects a well-established community hub with active engagement through events, stories, and newsletters. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and Matomo analytics, ensuring a responsive and user-friendly experience. Security posture is moderate with cookie consent and CSRF tokens implemented, but lacks explicit security headers and public incident response policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the professional presentation and active social presence support legitimacy. Overall, the site is well-designed, content-rich, and serves its target audience effectively.

The Oskar-Patzelt-Stiftung operates the website mittelstandspreis.com, which promotes and manages the "Großer Preis des Mittelstandes," Germany's premier economic award for medium-sized enterprises. The foundation focuses on recognizing outstanding achievements of the Mittelstand, fostering regional marketing, and building a strong network of nominated and awarded companies. The website is well-structured, content-rich, and targets medium-sized businesses and economic stakeholders in Germany. The business model is non-profit, emphasizing economic development and recognition rather than commercial sales. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including jQuery, Bootstrap, and Google Analytics with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. However, some security best practices like security headers and published incident response policies are missing, which could be improved. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent, but lacks visible security headers and formal security policies. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional and consistent website content. Overall, the site presents a moderate security posture with room for improvement. Strategically, the foundation should address the WHOIS inconsistency, enhance security headers, and publish clear security and incident response policies to improve trust and compliance. The website is a credible and professional platform for its purpose but would benefit from technical and security enhancements to align with best practices.

F

FMF-WWF Werkzeug- und Prototypenbau GmbH

fmf-wwf.de

40

FMF-WWF Werkzeug- und Prototypenbau GmbH is a medium-sized German manufacturing company specializing in automotive prototyping, tooling, and mechanical processing. The company serves automotive manufacturers with a range of services including development, construction, prototype and tool building, model and fixture construction, and quality assurance. Their market position is that of an established partner in the automotive supply chain, emphasizing precision and quality. Technically, the website is built on WordPress with Bootstrap and jQuery, featuring responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy with clear contact information and partner references.

V

VWH GmbH

vwh.de

44

VWH GmbH is a German-based medium-sized manufacturing company specializing in automation technology, custom special machines, assembly systems, and mold and tool making. The company positions itself as a global player from the Westerwald region, offering comprehensive engineering and production services to industrial clients both nationally and internationally. Their website is built on TYPO3 CMS and employs modern web technologies including jQuery and Bootstrap, with a focus on responsive design and user-friendly navigation. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism via Cookiebot. Security posture is moderate with HTTPS enabled and some best practices observed, but lacks explicit security headers and incident response information. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious or suspicious activity.

J

Johner Institut

johner-institut.de

67

Johner Institut is a specialized consulting and software provider focused on medical technology manufacturers, helping them navigate complex regulatory environments to bring products to market efficiently. Their offerings include consulting, training, product testing, outsourcing services, and RegTech software solutions. The website is professionally designed, well-structured, and optimized for both desktop and mobile users, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS with modern libraries like Bootstrap and jQuery, and is hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain and website content are consistent and trustworthy, with no blocking or suspicious elements detected.

C

Communicraft Ltd.

communicraft.com

57

Communicraft Ltd. is a well-established digital agency based in Dublin, Ireland, founded in 2001. The company specializes in web design, development, management, and strategic consultancy, with a strong focus on human-centered digital experiences. Their ISO 27001 certification underscores a commitment to information security, positioning them as a trusted partner for clients requiring secure and reliable digital solutions. The website reflects a professional and modern digital presence, showcasing client testimonials and case studies that reinforce their market position. Technically, the website employs modern frameworks such as Bootstrap and integrates multiple analytics platforms including Matomo, Hotjar, Google Tag Manager, and Simple Analytics, all managed with a cookie consent mechanism to ensure privacy compliance. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices evident in metadata and structured data. However, explicit security headers are not detected, suggesting room for improvement in HTTP security configurations. From a security perspective, the company demonstrates strong practices through ISO 27001 certification and secure web application maintenance. The presence of cookie consent and privacy policies indicates GDPR awareness and compliance. The absence of a published vulnerability disclosure policy or incident response contact is a minor gap. The WHOIS data is missing or unavailable, which raises questions about domain registration transparency but does not directly impact the website's operational security. Overall, Communicraft presents a low-risk profile with a mature digital infrastructure and strong business credibility. Strategic recommendations include enhancing HTTP security headers, publishing a vulnerability disclosure policy, and clarifying domain registration details to improve trustworthiness further.

P

Peter Kaiser

peter-kaiser.com

63

Peter Kaiser is a historic and established European women's shoe brand with a strong online presence through its e-commerce platform. The website offers a wide range of women's shoes and bags, emphasizing quality, style, and fast delivery. The brand leverages modern digital tools including Shopware CMS, Google Tag Manager, and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The lack of WHOIS data reduces domain trustworthiness but the website content and branding strongly indicate a legitimate business. Overall, the site is professional, user-friendly, and trustworthy for its target audience.

E

eworx Network & Internet GmbH

mailworx.info

75

eworx Network & Internet GmbH operates a professional marketing suite website offering integrated email marketing, WhatsApp newsletter, and event management solutions. The company targets business customers seeking GDPR-compliant, automated, and personalized marketing tools. The website demonstrates a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on TYPO3 CMS with modern JavaScript and CSS frameworks, optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though dedicated security policy and incident response pages are absent. Overall, the site reflects a trustworthy and established business with good compliance and marketing transparency.

T

t. Theaterschaffen Schweiz

kuenstlerboerse.ch

45

The Schweizer Künstlerbörse website represents a well-established Swiss cultural event organized by t. Theaterschaffen Schweiz, serving as a key networking and presentation platform for the Swiss theater scene. The site effectively targets artists, theater organizers, agencies, and media professionals, providing event information, application forms, and multimedia content. The business model is non-profit, focusing on cultural promotion and professional networking within the Swiss arts sector. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and multilingual support via WPML, ensuring good mobile optimization and SEO. Security posture is adequate with HTTPS and reCAPTCHA, but could be improved by adding security headers and a cookie consent mechanism. Overall, the site is professional, trustworthy, and compliant with basic GDPR requirements, though some privacy enhancements are recommended.

PETR du Pays d'Arles is a regional governmental and non-profit entity focused on coordinating sustainable development projects and citizen initiatives within the Pays d'Arles territory in France. The website serves as an informational and engagement platform for residents, local authorities, and partners. It presents a clear organizational structure and mission aligned with public territorial cooperation. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics for user insights. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and explicit security headers. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the domain registration and hosting details support the legitimacy of the entity. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

E

Emirates Foundation

emiratesfoundation.ae

57

Emirates Foundation is a prominent UAE-based non-profit organization dedicated to empowering youth and fostering community engagement through volunteer programs and social initiatives. The foundation operates several key programs including Takatof, Sanid, Dawamee, and Nema, which focus on volunteering, emergency response, remote job facilitation, and food waste reduction respectively. The website serves as an information portal primarily in Arabic with English language support, targeting UAE residents interested in social development and volunteering opportunities. Technically, the site uses standard frontend technologies such as jQuery, Bootstrap, and Font Awesome, hosted under Etisalat's domain infrastructure, indicating a stable and regionally appropriate hosting environment. However, the site lacks explicit privacy and cookie policies, security headers, and visible contact information, which are areas for improvement in compliance and transparency. Overall, the website is professionally designed with good content relevance and navigation but would benefit from enhanced security and privacy practices to align with modern standards.

G

Génération Grand R

generation-grand-r.fr

48

Génération Grand R is a regional educational network focused on agricultural training and professional development in the Pays de la Loire region of France. The website presents a comprehensive offering of vocational education, short courses, and international mobility programs targeting students and adult learners interested in agriculture, horticulture, viticulture, and related sectors. The organization positions itself as a key player in agricultural education with strong regional partnerships and a focus on innovation and practical training. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and SEO plugins, hosted by OVH. It features good mobile optimization, social media integration, and moderate performance. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal security policies. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve in security policy transparency and incident response readiness.

И

Изипей АД

easypay.bg

58

EasyPay AD is a well-established Bulgarian payment services company founded in 2006, providing a broad range of financial services including utility bill payments, money transfers, and payment cards. The company operates both physical payment offices and digital platforms, targeting the general public and businesses within Bulgaria. Their market position is strong, supported by partnerships and certifications such as TUV and PCI DSS, which enhance their credibility and trustworthiness. Technically, the website employs standard web technologies including Bootstrap and jQuery, offering a responsive and user-friendly interface. While the site performs moderately well with good mobile optimization, there is room for improvement in accessibility and SEO. The absence of visible security headers and privacy policies indicates areas where the digital maturity could be enhanced. From a security perspective, the site uses HTTPS (assumed) and does not expose sensitive data visibly. However, the lack of explicit privacy and cookie policies, security headers, and incident response contacts suggests gaps in compliance and security best practices. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures to align with modern standards and regulatory requirements.

A

Acri

acri.it

60

Acri is a well-established Italian non-profit organization representing banking foundations and savings banks, with a history dating back to 1912. It coordinates significant social, cultural, and economic development initiatives funded by its members, managing substantial assets and disbursing billions of euros over the years. The website reflects a professional and consistent brand presence, targeting stakeholders in the finance and non-profit sectors. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics platforms, demonstrating a moderate to good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and partner links.

V

Accueil

vivreva.com

51

Vivreva.com is a French travel and leisure website targeting retirees, offering stays, tours, cruises, hiking, and Nordic walking activities. The business appears to be small and niche-focused, with a domain age dating back to 2006, indicating an established presence. The website is built on Joomla CMS using the Helix Ultimate template and incorporates common web technologies such as jQuery, Bootstrap, and Font Awesome. Hosting is provided by OVH sas, a reputable provider. The site is mobile optimized and presents a professional design with relevant content for its target audience. However, no explicit privacy policy or terms of service were found, which may impact compliance and user trust. Cookie consent is implemented, showing some GDPR awareness. Security posture is moderate with HTTPS enabled and CSRF tokens in AJAX, but lacks DNSSEC and security headers, which are recommended for improvement. No contact emails, phone numbers, or social media links were detected in the provided content, limiting direct communication channels. Overall, the site is functional and relevant but could benefit from enhanced privacy, security, and contact transparency.

A

Acquirente Unico S.p.A.

acquirenteunico.it

60

Acquirente Unico S.p.A. is a medium-sized Italian public company operating in the energy sector, primarily managing energy procurement for the protected market and providing consumer-oriented platforms such as consumption and offer portals. It is a key player in Italy's energy market ecosystem, operating under the parent company Gestore dei Servizi Energetici (GSE). The website reflects a professional and consistent brand presence with clear business information and regulatory compliance. Technically, the site is built on Drupal 7 with legacy JavaScript libraries, indicating some modernization opportunities. Security posture is adequate with HTTPS and anonymized analytics but lacks advanced security headers and cookie consent mechanisms. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website serves its public service role effectively but would benefit from technical and security enhancements to improve compliance and user trust.

M

Modernisierungsberater.de

modernisierungsberater.de

46

Modernisierungsberater.de is a German-based platform providing certified modernization consulting services primarily focused on energy-efficient building modernization and financing advice. The website serves as a hub for a large network of certified advisors across Germany, offering free initial consultations and detailed advisor profiles. The platform is positioned as a trusted intermediary between homeowners and modernization experts, certified by the Bundesverband Gebäudemodernisierung e.V. Technically, the website is built on WordPress with WooCommerce and several plugins supporting forms, subscriptions, and location services. It uses modern web technologies including Bootstrap and FontAwesome, and is hosted on a German hosting provider indicated by its nameservers. Security posture is good with HTTPS enforced and some security plugins in place, though there is room for improvement in security headers and vulnerability disclosure. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-structured for its target audience.

W

Wayvia

commerce-connector.com

65

Wayvia is a technology company specializing in commerce connector tools, providing B2B SaaS solutions for e-commerce integration and analytics. The website serves as a login portal for users, reflecting a rebranding from PriceSpider. The site is professionally designed with consistent branding and clear navigation, targeting business users in the e-commerce sector. Technically, the site employs modern frontend frameworks including jQuery, Foundation, Bootstrap, and the YII PHP framework, indicating a mature technology stack. Performance and mobile optimization are good, though accessibility could be improved. Security features include CSRF protection and secure form handling, but lack of HTTP security headers and cookie consent mechanisms are areas for improvement. The absence of WHOIS data for the domain reduces trust slightly, though the site content and branding suggest legitimacy. Overall, the site is functional and professional but could enhance privacy compliance and security posture.

M

manitu GmbH

manitu.de

59

manitu GmbH is a well-established German hosting provider offering professional webhosting, dedicated root servers, and domain registration services. With 28 years of experience and an own data center in Germany, the company emphasizes high-quality service, German data protection compliance, and climate-neutral operations. Their target audience includes private users, companies, and organizations seeking reliable hosting solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, hosted on their own infrastructure, ensuring fast performance and good SEO. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

O

Onetrend

onetrend.pl

51

Onetrend is a digital marketing agency based in Warsaw, Poland, founded in 2019. The company focuses on integrated marketing solutions including SEO, content preparation, and website development. The website is professionally designed using WordPress and modern web technologies, targeting businesses seeking digital marketing services. The technical infrastructure includes WordPress CMS, Google Tag Manager, Cookiebot for consent management, and various JavaScript libraries. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and advanced security headers. Privacy compliance is partial due to absence of explicit privacy and terms of service pages. Overall, the website presents a credible and professional business presence with room for improvement in security and compliance documentation.

W

WeNet Group S.A.

biznesfinder.pl

52

BiznesFinder.pl is a Polish business directory and advisory platform operated by WeNet Group S.A., targeting entrepreneurs and business owners seeking company information and practical business advice. The website offers a searchable database of companies, business guides, and advertising opportunities, positioning itself as a niche resource within the Polish business ecosystem. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Fonts, and HubSpot integrations, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and Google reCAPTCHA v3 to protect forms, but lacks some advanced HTTP security headers and explicit security policies. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site is professional and trustworthy, though WHOIS data is unavailable due to registry restrictions, which is common for .pl domains. The site is not blocked by any WAF or security challenge, allowing full content access and analysis.

R

Rapunzel Naturkost GmbH

rapunzelwelt.de

56

Rapunzel Welt is a German visitor attraction centered on organic food, sustainability, and cultural experiences. The website showcases museums, events, a bio-market, café, bakery, and group offerings, targeting a general audience interested in organic and sustainable lifestyles. The business positions itself as a niche regional attraction with strong branding and certifications such as Bioland-Partner. Technically, the site is built on Drupal 10 with modern libraries and frameworks, including Usercentrics for consent management and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and well-structured, providing a good user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration aligns well with the business, indicating legitimacy and trustworthiness.

S

Stadtwerke Münster

netzplan-muenster.de

49

Netzplan Münster is an interactive public transportation network map and journey planner service provided by Stadtwerke Münster, the municipal utility company. The website targets residents and visitors of Münster, Germany, offering detailed transit information, downloadable network plans, and mobility services. The platform leverages modern web technologies including AngularJS and Leaflet for map rendering and user interaction. The site is well-branded, consistent, and professionally designed with good user experience and mobile optimization. Security posture is solid with HTTPS, security headers, and CSRF protection, though explicit security policies and incident response contacts are not published. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and serves its public transportation information purpose effectively.

V

Verein für Konsumenteninformation (VKI)

konsument.at

67

KONSUMENT is a reputable Austrian consumer information magazine operated by the non-profit Verein für Konsumenteninformation (VKI). The website offers comprehensive consumer protection content, product tests, reports, and premium subscription services. It targets Austrian consumers seeking reliable and independent information. Technically, the site is built on Drupal CMS with modern libraries such as Bootstrap and FontAwesome, and uses Matomo analytics for privacy-conscious tracking. The site is mobile optimized, accessible, and professionally designed with clear navigation and premium content offerings. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is unavailable due to quota limits, but the domain appears legitimate and privacy protection is justified. Overall, the site demonstrates high trustworthiness and professionalism.

E

Ebizindia Consulting Private Limited

weddingplanning.in

53

WedPlan, operated by Ebizindia Consulting Private Limited, offers a specialized online wedding planning software tailored for Indian weddings. The platform facilitates comprehensive management of guest lists, invitations, RSVPs, logistics, and event coordination in a collaborative team environment. Positioned as a niche SaaS provider, WedPlan targets professional wedding planners and individuals seeking efficient digital tools for complex Indian wedding ceremonies. The business model is subscription-based with tiered pricing for individual and planner bundles. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, delivering a responsive and user-friendly experience. Structured data enhances SEO and brand visibility. Security posture is moderate with HTTPS usage and form validation but lacks explicit security headers and privacy policies, representing areas for improvement. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

E

Ebizindia Consulting Pvt. Ltd.

ctracker.in

65

CTRACKER is a web-based compliance tracking software designed primarily for small and medium-sized enterprises (SMEs) and Chartered Accountants (CAs) in India. The platform offers a subscription-based SaaS model with a focus on statutory, regulatory, and internal compliance management, featuring automated daily email reminders, team-based task assignments, and mobile-friendly access without the need for app installation. The business is operated by Ebizindia Consulting Pvt. Ltd., a NASSCOM member company, which adds credibility and trust to the offering. The website content is well-structured, professional, and provides clear information about the product, pricing, and benefits, supported by customer testimonials.

Ö

Österreichisches Umweltzeichen

umweltzeichen.at

51

The Österreichisches Umweltzeichen website represents a well-established Austrian governmental environmental certification program focused on promoting sustainable products, tourism, education, and culture. It enjoys strong institutional backing from the Bundesministerium für Land- und Forstwirtschaft, Klima- und Umweltschutz, Regionen und Wasserwirtschaft (BMLUK), positioning it as a trusted national eco-label authority. The site offers comprehensive content, clear navigation, and professional design, targeting businesses, educational institutions, and consumers interested in sustainability within Austria. Technically, the website employs modern web technologies including Bootstrap and Matomo analytics, ensuring good mobile responsiveness and accessibility. Performance is moderate with no critical technical issues detected. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. Privacy compliance is generally good, supported by a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site demonstrates a high level of trustworthiness and professionalism, with no indications of malicious activity or content safety concerns. Strategic recommendations include implementing cookie consent, publishing a security policy and incident response contacts, and enhancing security headers to further strengthen the security posture.

A

Art Fest

siff.bg

44

The Sofia International Film Festival (SIFF) website serves as the official digital presence for an established cultural event in Bulgaria, focusing on film screenings, festival news, and related activities. The site targets film enthusiasts, industry professionals, and cultural audiences, providing comprehensive information about the festival's schedule, awards, and partners. The business operates in the media sector with a medium-sized footprint and a history dating back to 2001. Technically, the website is built on the qLibra CMS platform and employs common web technologies such as jQuery and Bootstrap. It integrates Google Analytics and Facebook Pixel for tracking and Google Adsense for advertising. Hosting is provided by a Bulgarian hosting provider, inferred from the nameservers. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web threats. No sensitive data exposure or vulnerabilities were detected in the content. The WHOIS data is privacy protected, consistent with GDPR, and the domain appears legitimate and aligned with the website's cultural mission. Overall, the website presents a professional and trustworthy front for the film festival, with room for improvement in security headers and contact transparency. The risk profile is low, but enhancing security best practices and providing clearer contact information would strengthen trust and compliance.

R

Rapunzel Naturkost GmbH

rapunzel.de

46

Rapunzel Naturkost GmbH is a well-established German company specializing in the production and retail of organic and fair trade food products since 1974. The company operates both B2B and B2C channels, including a webshop and a visitor center called Rapunzel Welt. Their market position is strong within the organic food sector, supported by certifications such as Bio and Demeter, and a dedicated fair trade program called HAND IN HAND. The website reflects a mature digital presence with comprehensive product information, recipes, and sustainability initiatives targeting consumers interested in organic lifestyles. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and integrates a consent management platform (Usercentrics) alongside Google Tag Manager for analytics. The site is mobile optimized, accessible, and SEO friendly, though performance is moderate. Security posture is good with HTTPS enforced and privacy compliance mechanisms in place, but lacks explicit security policies or vulnerability disclosure channels. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns with the business claims, showing a consistent and legitimate domain registration. The website is safe for general audiences with no adult or questionable content detected. Strategically, Rapunzel Naturkost should enhance its security transparency by publishing a security policy and incident response contacts, implement security headers, and consider a vulnerability disclosure program to further strengthen trust and compliance.

S

Stackbox GmbH

stackbox.co

71

Stackbox GmbH is a specialized software solutions and consulting company focused on the eMobility sector, primarily serving businesses in energy and transportation. The company offers tailored services including business process design, IT solution architecture, system integrations, and operations support. Their market position is strengthened by a decade of experience and notable clients such as IONITY and Hubject. The website reflects a professional and consistent brand image with clear communication of services and team expertise. Technically, the website employs modern frameworks like Bootstrap and integrates analytics tools such as Amplitude with session replay capabilities, indicating a mature digital infrastructure. The site is mobile-optimized and well-structured, though some accessibility features could be enhanced. Performance is moderate with good SEO practices. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or sensitive data exposures were detected. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy. Overall, the website presents a low-risk profile with strong business credibility and good privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance trust and compliance.

O

Okeanos Smart Data Solutions GmbH

okeanos.ai

55

Okeanos Smart Data Solutions GmbH is a small German company specializing in water and environmental data solutions aimed at climate adaptation and hydrological hazard management. Their services include consulting, research collaboration, and tailored technological solutions for water cycle understanding, early detection of natural hazards, blue-green infrastructure monitoring, and wastewater treatment optimization. The company targets water management professionals, municipalities, and research institutions. The website is professionally designed with clear navigation and mobile optimization, reflecting a moderate level of digital maturity. The technical stack includes Bootstrap and several JavaScript libraries, but no CMS or advanced analytics tools were detected. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and functional but would benefit from improved privacy and security practices.