Security Directory

P

Pädagogische Hochschule St.Gallen

phsg-jahresbericht.ch

53

The website 'PHSG Jahresbericht 2024' serves as the official annual report portal for the Pädagogische Hochschule St.Gallen, a regional educational institution in Switzerland specializing in teacher education, research, and continuing education. The site targets students, educators, researchers, and stakeholders interested in educational developments and institutional performance. It provides structured content including editorial focus, thematic areas, chronicle, and detailed reports on education, research, and services. Technically, the website is built on WordPress CMS using the Elementor page builder and Jet plugins, leveraging modern JavaScript libraries such as Vue.js and ApexCharts for interactive content. The site employs HTTPS with a good SSL configuration and integrates Google Tag Manager for analytics with IP anonymization, reflecting a moderate level of digital maturity and performance. Mobile optimization and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear cookie policies and consent management. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for an educational institution. It maintains transparency in domain registration and aligns with its stated business purpose. Recommendations include enhancing security headers, improving accessibility features, and maintaining up-to-date software to sustain security and compliance.

N

Neonmedia Oy

neonmedia.fi

65

Neonmedia Oy is a Finnish company specializing in providing media devices and real-time information solutions for public transportation. Established in 2000, it holds a leading position in Finland's public transportation media sector, offering services such as real-time progress tracking and passenger information systems. The website reflects a professional and consistent brand image, targeting transportation operators and stakeholders within Finland. Technically, the site is built on WordPress with Visual Composer and uses modern web technologies including Google Fonts and FontAwesome. The hosting and domain registration are managed by Planeetta Internet Oy, a Finnish provider, ensuring local infrastructure support. Security-wise, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are not found, indicating a gap in compliance with GDPR best practices. Overall, the website is functional, well-designed, and credible but would benefit from improved security and privacy disclosures.

S

Suomen Suoramainonta Oy | SSM

ssm.fi

49

Suomen Suoramainonta Oy (SSM) is a Finnish company specializing in direct marketing planning and distribution services, operating locally and nationally since 1987. The company is positioned as an established player in the Finnish media and marketing sector, offering a range of services including distribution, ready-made direct mail solutions, target group services, and research. The website reflects a professional and consistent brand image, targeting advertisers and distributors with clear service offerings and multiple contact points. Technically, the website is built on WordPress with modern plugins and SEO tools, delivering a good user experience with mobile optimization and structured content. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and DNSSEC implementation. Overall, the domain registration details align well with the business profile, indicating legitimacy and transparency. Strategic recommendations include enhancing security headers, implementing DNSSEC, and publishing formal security and incident response policies to further strengthen trust and compliance.

F

Fiare

fiare.com

70

Fiare is a Finnish technology company specializing in digital marketplace platforms, vehicle trade solutions, and media tools including CMS and digital publishing. Established in 2001, it serves businesses seeking to create and manage online marketplaces and integrated media solutions. The company positions itself as a comprehensive provider with multi-sector experience including automotive, aviation, and real estate. Technically, the website is built on WordPress with modern plugins such as LayerSlider, Slider Revolution, and Ultimate VC Addons, supported by Cloudflare CDN and DNS services. The site is mobile optimized and SEO friendly, with structured data and social media integration. Security posture is good with HTTPS and cookie consent managed by Cookiebot, though DNSSEC is not enabled and some security headers are missing. No privacy policy or terms of service pages were detected in the provided content, which is a compliance gap. Overall, the website is professional, trustworthy, and business-focused, but could improve transparency and security hardening.

F

Fachstelle Digitales Lehren und Lernen - FHNW

digitallernen.ch

59

The website 'Fachstelle Digitales Lehren und Lernen - FHNW' serves as an academic digital learning resource affiliated with the Fachhochschule Nordwestschweiz (FHNW) in Switzerland. It provides medienpädagogische expertise and digital teaching support primarily targeting higher education institutions, educators, and students. The site offers services such as e-examinations, Moodle support, and digital learning tools, positioning itself as a niche academic support platform within the Swiss higher education sector. Technically, the website is built on WordPress using Bootstrap and jQuery, with SEO optimization via Yoast. It demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

M

MATKAILUAJONEUVOTUOJAT RY

liikkuvakoti.fi

47

Liikkuvakoti.fi is a Finnish website operated by MATKAILUAJONEUVOTUOJAT RY, an industry association focused on caravans and motorhomes. The site provides comprehensive information, guides, news, and resources for caravan enthusiasts and industry stakeholders in Finland. It serves as a trusted platform connecting consumers with authorized dealers, service providers, and rental companies. The website demonstrates a consistent brand presence and offers valuable content tailored to its niche audience. Technically, the site is built on WordPress with modern frameworks and integrates Google Analytics and Tag Manager for tracking. While the site uses HTTPS and has good SEO practices, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data confirms the domain's legitimacy and long-standing presence since 2006, aligning well with the business's profile. Overall, the site is professional, trustworthy, and serves its community effectively.

S

Sixtyseven vastgoedcommunicatie

vastgoedcommunicatie.nl

54

Sixtyseven vastgoedcommunicatie is a medium-sized Dutch company specializing in real estate communication and marketing services. With over 30 years of experience, they provide end-to-end solutions including project branding, website development with interactive housing selectors, data-driven lead generation, and sales tracking via their proprietary SalesTracker system. Their client base includes prominent real estate developers, housing corporations, and municipalities primarily in the Netherlands but also internationally. The website reflects a professional and consistent brand image with a strong focus on data-driven marketing effectiveness. Technically, the website is built on WordPress using the Salient theme and integrates modern marketing and analytics tools such as Google Analytics, HubSpot, and Leadinfo. The site is mobile-optimized and employs standard security practices including HTTPS and cookie consent mechanisms. However, explicit security headers could be improved. The site shows good SEO and accessibility basics but could enhance accessibility compliance further. Security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy and cookie consent banner. Contact information is transparent with a physical address, phone number, and contact forms. No terms of service or explicit security policies were found, which could be areas for improvement. Overall, the website and business appear legitimate, professional, and trustworthy with a good balance of technical maturity and business credibility. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving accessibility features.

A

Aller Media AB

allermedia.se

57

Aller Media AB is a leading Nordic media house with a strong focus on lifestyle and women's content, operating multiple well-known brands and reaching a large audience daily. The company offers media publishing, advertising solutions, creative studio services, influencer marketing, and event organization, positioning itself as a market leader in lifestyle media. The website is built on WordPress with Elementor, featuring modern technologies and good mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and policies could be improved. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data for the exact domain queried is missing, which slightly impacts trust but the business information and website professionalism support legitimacy. Overall, Aller Media presents a professional and trustworthy digital presence with room for improvement in privacy and security transparency.

T

The European TLD ISAC

tld-isac.eu

67

The European TLD ISAC operates as a specialized organization dedicated to enhancing the security and resilience of European top-level domain registries. Its website serves as a resource hub offering publications, case studies, and tools related to DNS security. The organization targets cybersecurity professionals and TLD operators, positioning itself as a key collaborative entity within the European internet infrastructure security sector. Technically, the website is built on WordPress using the Astra theme, supplemented by plugins such as Borlabs Cookie for GDPR-compliant cookie consent. The site demonstrates good mobile optimization and a professional design, though some accessibility features could be improved. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms but lacks visible security headers and explicit security policies or incident response contacts. WHOIS data is unavailable due to EURid privacy policies, which is common for such entities and justified given the security focus. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security documentation.

E

Etua Oy

etua.fi

59

Etua Oy operates a Finnish loan comparison platform, Etua.fi, providing consumers and businesses with competitive loan offers by aggregating multiple lenders. The company holds a solid market position in Finland's finance sector, leveraging digital tools to facilitate loan brokerage and financial advice. The website is built on WordPress, utilizing modern technologies such as Google Tag Manager and Trustpilot integration to enhance user trust and marketing effectiveness. The site demonstrates good mobile optimization and SEO practices, supporting a positive user experience. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response details suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website reflects a professional and trustworthy financial service provider with moderate technical maturity and a solid security baseline.

S

Styria IT Solutions d.o.o.

poslovni.biz

58

Poslovni.biz is a Croatian media website operated by Styria IT Solutions d.o.o., focusing on business news and media content. The site leverages WordPress with WooCommerce and popular plugins such as WPBakery Page Builder and Slider Revolution, indicating a modern CMS infrastructure. The website presents a professional design with good SEO practices including structured data and meta tags. However, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is basic with HTTPS enabled but missing advanced security headers and DNSSEC. No contact emails or phone numbers are provided on the homepage, limiting direct communication channels. Social media presence is generic without company-specific profiles. Overall, the site is functional and moderately secure but requires improvements in privacy compliance and security best practices.

G

Gainsight

aptrinsic.com

73

Gainsight operates a sophisticated digital product experience platform designed to help businesses enhance user adoption, generate revenue, and reduce churn through personalized customer journeys and product analytics. Positioned as a leader in the customer success technology space, Gainsight targets enterprise-level businesses seeking to optimize product engagement and customer retention. The website reflects a mature digital infrastructure leveraging WordPress CMS integrated with advanced marketing and analytics tools such as HubSpot, Google Analytics, Microsoft Clarity, and various ad pixels. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and vulnerability disclosure mechanisms are not publicly documented. Overall, Gainsight presents a professional and trustworthy online presence aligned with its market positioning.

R

Roland Gareis Consulting GmbH

rolandgareis.com

53

Roland Gareis Consulting GmbH is a well-established consulting and training company specializing in project, process, and change management. With over 30 years of experience, the company offers a range of services including seminars, coaching, certification preparation, and events primarily targeting professionals and organizations in German-speaking regions. The website is professionally designed, multilingual, and integrates e-commerce capabilities for training bookings. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies and security best practices such as HTTPS and security headers. However, the absence of publicly available WHOIS data for the domain raises some concerns about domain registration transparency. The company maintains active social media profiles and provides clear contact information, enhancing trust and credibility. Privacy and cookie policies are present and GDPR compliant, but there is no explicit security policy or incident response information published. Overall, the website demonstrates a solid digital presence with room for improvement in transparency and security disclosures.

H

HAUS

haus.hr

44

HAUS is a Croatian media portal dedicated to the culture of housing, architecture, and design. It provides rich, well-curated content including projects, interviews, news, and materials related to housing culture. The website targets a general audience interested in architecture and lifestyle in Croatia. Technically, the site is built on WordPress with modern plugins and technologies such as Google Tag Manager, Rank Math SEO, and Complianz GDPR compliance tools. The site is mobile-optimized, SEO-friendly, and uses HTTPS with good security practices. However, some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable due to GDPR restrictions, but the domain is consistent with the Croatian market and language. Overall, the site demonstrates a strong digital presence with good privacy compliance and trustworthy content.

M

Motus Media grupa

motus-media.hr

57

Motus Media grupa is a Croatian media company operating multiple successful online portals covering news, geopolitics, history, and regional content across Croatia, Bosnia and Herzegovina, and Serbia. The group boasts a significant monthly user base exceeding 7 million users and extensive page views, positioning itself as a key player in the regional digital media market. The business model centers on content publishing and advertising, leveraging a portfolio of branded portals to maximize reach and advertising potential. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder and Yoast SEO, hosted with DNS services via Cloudflare and registered through CARNET. The site demonstrates moderate performance and good mobile optimization, with a professional design and clear navigation. SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities were detected in the provided content. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, representing a compliance gap under GDPR. Contact information is not explicitly provided, which may affect user trust. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen trust and regulatory adherence.

N

NO LIMIT

nolimitfestival.ba

45

NO LIMIT is a creative communication festival based in Sarajevo, Bosnia and Herzegovina, targeting advertising agencies, media, and advertisers in the region. The website serves as an event platform providing detailed information about the festival, jury members, program schedule, and award categories. The business model revolves around organizing an annual advertising festival and awards ceremony, fostering networking and recognition within the creative industry. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure with good SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit privacy policies are missing. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

E

Enstring agency

enstring.com

66

Enstring agency is a recently founded (2023) HR-first branding agency focused on employer branding, employee and candidate experience, and education for HR professionals. The company positions itself as a strategic partner helping organizations build better workplaces and attract top talent globally. The website is built on WordPress, uses modern JavaScript libraries such as GSAP and jQuery, and is hosted with DNS services via Cloudflare. The technical infrastructure is modern and supports good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers. Privacy compliance is partial with a cookie consent mechanism but no visible privacy or terms of service pages. Contact is primarily via a contact form with no direct emails or phone numbers publicly listed. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

B

Builtt.io

builtt.io

69

Builtt.io is a specialized digital agency focused on delivering high-quality and long-term technology solutions in e-commerce, website development, and digital product creation. The company targets a diverse client base ranging from startups to multinational enterprises, emphasizing effective, captivating, and innovative digital solutions. Their market position is strengthened by multiple industry awards and a portfolio of over 108 clients, reflecting a strong reputation in the e-commerce and digital product development sectors. Technically, the website is built on WordPress CMS with a modern tech stack including JavaScript libraries such as GSAP and jQuery, and integrates Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by the Rank Math SEO plugin. Hosting and domain management involve reputable providers like GoDaddy and Cloudflare, although DNSSEC is not enabled. From a security perspective, the site uses HTTPS and implements GDPR-compliant cookie consent mechanisms, ensuring user privacy and regulatory compliance. However, there is room for improvement in security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, Builtt.io presents a professional, trustworthy, and well-maintained digital presence with a solid business foundation and technical infrastructure. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing detailed security and incident response policies to further strengthen trust and compliance.

<

<IT>rockt!

itrockt.ch

56

The website www.itrockt.ch represents <IT>rockt!, a regional ICT cluster and job platform focused on the Ostschweiz region of Switzerland. It provides a skill-based job matching service, event listings, courses, and networking opportunities for ICT professionals and job seekers. The platform positions itself as a key regional player facilitating digital transformation and workforce development in the ICT sector. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Borlabs Cookie for consent management, and Google Analytics for tracking. It employs reCAPTCHA for form security and Google Tag Manager for marketing and analytics integration. The site is mobile optimized and has good SEO practices implemented. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner, indicating GDPR awareness. Business credibility is supported by consistent branding, active social media presence, and transparent event and partner information. Overall, the website is professional, trustworthy, and well-maintained, serving its target audience effectively.

I

ICT Cortex

ictcortex.me

47

ICT Cortex is a Montenegro-based ICT cluster organization focused on fostering digital transformation, innovation, and education within the country's technology sector. Established in 2021, it serves as a collaborative platform for IT professionals, educational institutions, government bodies, and businesses to drive sustainable technological development. The website reflects a professional and consistent brand presence, highlighting key services such as digital transformation advocacy, talent development, and partnerships with academia and industry. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Google Analytics for user insights. Security posture is good with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and security policy disclosures are recommended. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, ICT Cortex presents a credible and trustworthy digital presence aligned with its mission to lead Montenegro's ICT sector growth.

P

Play Team

ultra.ba

57

Ultra.ba is a Bosnian lifestyle magazine operated by Play Team, providing content on fashion, beauty, astrology, travel, and entertainment. The website targets a general audience interested in contemporary lifestyle topics and maintains a consistent brand presence with active social media channels. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and moderate performance. Security posture is strong with HTTPS and security headers in place, though privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and contact transparency.

M

Marketing365

marketing365.mk

54

Marketing365.mk is a well-established Macedonian online media platform specializing in marketing, media, and public relations news and insights. Founded in 2013, it serves as a key information source for marketing professionals and the business community in North Macedonia. The website offers a variety of content including interviews, columns, industry reports, and event coverage, targeting marketing and PR stakeholders. Technically, the site is built on WordPress with popular plugins such as Yoast SEO, WPBakery, and Elementor, and integrates analytics and push notification services like Google Analytics, Facebook Pixel, and OneSignal. The site is mobile-optimized and demonstrates good SEO practices.

U

UNIP

unip.hr

43

UNIP is a Croatian association established in 2022 to promote and protect the rights of publishers of informational publications. It focuses on collective rights management, advocacy, and professional development within the media sector. The website reflects a small but professional organization targeting media publishers and related legal entities in Croatia. Technically, the site is built on WordPress with Elementor, using modern web technologies and SEO best practices. Security posture is solid with HTTPS and cookie consent implemented, though it lacks explicit security policies and headers. Overall, the site is trustworthy and well-aligned with its stated business purpose.

T

Tranquil IT

tranquil.it

72

Tranquil IT is a French technology company specializing in IT infrastructure management solutions, notably offering services around WAPT and Samba-AD. The company targets IT professionals and organizations seeking efficient management of their IT assets. The website is professionally designed using WordPress with the Divi theme, featuring multilingual support and privacy-conscious analytics via Matomo. While the technical infrastructure is modern and the site is well-optimized for SEO and mobile use, there is a lack of explicit privacy and security policies, which could impact user trust and compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of published incident response or vulnerability disclosure information is a gap. Overall, the website reflects a credible small technology business with room for improvement in privacy and security transparency.

M

Mainstream Public Cloud Services d.o.o.

bizlife.rs

38

BIZlife.rs is a well-established Serbian business news portal operated by Mainstream Public Cloud Services d.o.o., founded in 2011. The site offers comprehensive business, entrepreneurship, IT/Tech, lifestyle, travel, and health news targeted at Serbian-speaking professionals and entrepreneurs. The platform uses WordPress with Elementor, integrating modern web technologies and analytics tools such as Google Analytics, Facebook Pixel, and Gemius Prism. The website demonstrates good content quality, professional design, and consistent branding, supported by active social media channels and a newsletter subscription service. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a comprehensive privacy policy but no explicit cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

V

Versicherung der Schweizer Ärzte Genossenschaft

va-genossenschaft.ch

51

Versicherung der Schweizer Ärzte Genossenschaft is a Swiss cooperative insurance provider specializing in pension and risk protection products tailored for medical professionals. Established in 1926, it holds a niche market position with a strong focus on the healthcare sector. The website reflects a mature digital presence with professional design, clear navigation, and relevant content targeting Swiss doctors. Technically, the site is built on WordPress with modern plugins and tracking tools, offering moderate performance and good mobile optimization. Security measures include HTTPS, reCAPTCHA on forms, and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site demonstrates high business credibility with multiple trust signals and comprehensive contact options.

J

Jedes Alter zählt

jedesalter.ch

54

The website 'Jedes Alter zählt' is a German-language site likely focused on community or educational content, as suggested by the presence of the Edwiser Bridge plugin which integrates Moodle LMS with WordPress. The site uses WordPress CMS with the Astra theme, indicating a standard and modern technical infrastructure. However, the content is minimal with no explicit business descriptions, contact information, or privacy and security policies, which limits the ability to fully assess the business model or market position. Technically, the site is moderately optimized for mobile and uses common web technologies but lacks advanced SEO and accessibility features. Security posture is weak due to absence of security headers and policies, and the domain WHOIS is privacy protected, reducing transparency. Overall, the site appears to be a small-scale or community-oriented platform with room for improvement in compliance, security, and business transparency.

S

Symfony SAS

symfony.com

67

Symfony SAS operates the symfony.com website, providing a high-performance PHP web framework and a suite of reusable PHP packages for building web applications, APIs, microservices, and CLI apps. The company is well-established with a domain age of over 20 years and a strong presence in the developer community, offering training, certification, cloud hosting, and quality assurance services. Symfony holds a leading position in the PHP ecosystem, supported by a large global developer base and a comprehensive set of tools and services. The website is professionally designed, mobile-optimized, and rich in content, targeting developers and tech teams worldwide. Technically, the website uses modern web technologies including Symfony UX, Stimulus, Bootstrap, and integrates with services like Blackfire for performance profiling. Hosting and DNS are managed via reputable providers including Cloudflare and Platform.sh. The site demonstrates good performance, accessibility, and SEO practices. Security is well addressed with HTTPS, a published security policy, long-term support releases, and monitored CVEs, although some improvements could be made in cookie consent and incident response transparency. Overall, the security posture is strong with no evident vulnerabilities or suspicious indicators. The business credibility is high, supported by official certifications and a consistent brand presence. The site does not contain any adult or questionable content, making it safe for general audiences. The domain registration data aligns well with the business claims, reinforcing trustworthiness. Recommendations include enabling DNSSEC, publishing a cookie consent mechanism, adding a security.txt file, and making contact information more accessible to enhance privacy compliance and incident response readiness.

D

Dronecode Foundation

dronecode.org

72

The Dronecode Foundation is a well-established non-profit organization founded in 2013 and operating under the Linux Foundation umbrella. It focuses on fostering open-source communities and innovation in the drone industry by providing a vendor-neutral home for critical projects such as PX4, MAVLink, QGroundControl, Pixhawk, and MAVSDK. The website reflects a professional and consistent brand image targeting developers, technology companies, and the open-source community within the drone sector. Technically, the site is built on WordPress with common plugins like Yoast SEO and Google Tag Manager, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

EFW! is a small Swiss creative agency specializing in concept and creation services including video production, graphic design, illustration, and corporate identity development. The company targets businesses and organizations seeking professional multimedia content and creative design solutions. Their portfolio showcases diverse projects such as music videos, TV spots, and film productions, positioning them as a niche player in the media industry. The website is built on WordPress with common plugins for content management and media display, reflecting a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service, though a cookie consent banner is present. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

H

h-node

h-node.org

54

h-node.org is a niche, community-driven project focused on building a hardware compatibility database for devices that work with fully free operating systems. Developed in collaboration with the Free Software Foundation, it serves a specialized audience of free software advocates and GNU/Linux users. The platform operates as a wiki, encouraging user contributions and collaborative content management. The project is relatively small and has been active since 2012, reflecting a stable presence in the free software ecosystem. Technically, the website is built on a custom PHP-based platform named h-source, utilizing older JavaScript libraries such as jQuery 1.7.1 and jQuery UI 1.8.21, along with the markItUp! editor for content editing. The site shows moderate performance and basic mobile optimization. Hosting details are not explicitly stated, but the domain uses GNU name servers and is registered with Gandi SAS, consistent with the free software community standards. From a security perspective, the site lacks modern security headers and DNSSEC is not enabled, which are areas for improvement. The use of outdated JavaScript libraries may expose the site to vulnerabilities. However, the presence of CSRF tokens in forms and domain transfer protection status are positive indicators. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No contact information for incident response or security policies is provided. Overall, h-node.org is a trustworthy and legitimate project with a clear mission and community focus but would benefit from enhanced security measures, privacy compliance, and modernization of its technical stack to improve resilience and user trust.

R

Reditus

getreditus.com

60

Reditus operates a specialized B2B SaaS affiliate network platform designed to help SaaS companies grow their monthly recurring revenue by leveraging affiliate marketing and in-app referral programs. The platform offers services such as affiliate recruitment, program management, and seamless migration, targeting B2B SaaS businesses and affiliates. The website presents a professional and consistent brand image, supported by client logos and industry awards, positioning Reditus as a trusted player in its niche. Technically, the website is built on WordPress using the Astra theme, enhanced with SEO and performance plugins like Yoast SEO and Rocket Lazy Load. It integrates multiple analytics platforms including PostHog, Segment, and HubSpot, indicating a mature digital marketing and data collection strategy. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks several recommended security headers which could improve its defense against common web attacks. No explicit security policies or incident response contacts are publicly available, and no vulnerability disclosure or security.txt files were found, suggesting room for improvement in transparency and security maturity. Overall, the website is functional, professional, and trustworthy from a user perspective, but the absence of WHOIS data and some security best practices slightly reduce its trustworthiness from a domain and security standpoint. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance its credibility and resilience.

S

Scholl Communications AG

weblication.de

38

Weblication® CMS, developed by Scholl Communications AG, is a well-established XML-based content management system with a significant customer base and specialized products targeting web agencies, enterprises, and municipalities. The website presents a professional image with detailed product offerings and a bug bounty program indicating a commitment to security. Technically, the site uses a proprietary CMS platform with modern web technologies and demonstrates good mobile optimization and accessibility. However, the absence of explicit privacy and cookie policies, security headers, and incident response contacts indicates areas for improvement in compliance and security transparency. Overall, the website is credible and functional but would benefit from enhanced privacy and security disclosures to align with best practices.

H

Highcharts

highcharts.com

71

Highcharts is a well-established technology company specializing in interactive charting and data visualization libraries for developers across web and mobile platforms. Their product suite includes core charting libraries, stock charts, maps, gantt charts, dashboards, and data grids, supporting multiple programming languages and frameworks such as JavaScript, TypeScript, Angular, React, Vue, Python, and more. The company enjoys a strong market position, trusted by 80 of the world's 100 largest companies, and maintains an active developer community through Discord, Github, and Stack Overflow. Technically, the website is built on a modern stack with WordPress CMS, leveraging JavaScript frameworks and libraries, and optimized for performance, mobile responsiveness, and accessibility. The site employs robust privacy and cookie consent mechanisms, including Cloudflare Turnstile captcha for form security, and Google Tag Manager with consent controls, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its professional presentation and market trust. Overall, Highcharts presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing detailed security policies, establishing clear incident response channels, and enhancing transparency around data protection and vulnerability disclosures to further strengthen trust and compliance.

F

FBIS

static2dynamic.ch

39

FBIS operates the static2dynamic.ch website, offering a PHP-based Web Application Framework designed as a licensing-free alternative to traditional CMS platforms like TYPO3 and Joomla. With over 20 years of experience, the company targets a broad audience including individuals and agencies seeking flexible web solutions. The website is professionally designed, content-rich, and provides clear navigation and contact information, reflecting a small but established technology business based in Switzerland. Technically, the site leverages a proprietary PHP framework (static2dynamic 5.9), standard web technologies (JavaScript, CSS), and includes modern features such as responsive design and cookie consent mechanisms. While performance is moderate and mobile optimization is good, there is room for improvement in accessibility and security headers. No major vulnerabilities or exposed sensitive data were detected. Security posture is adequate with cookie consent implemented and no visible security flaws, but lacks explicit security policies or incident response information. WHOIS data confirms domain legitimacy and consistency with business claims. Privacy compliance is supported by a privacy policy and cookie banner, though terms of service and vulnerability disclosure policies are absent. Overall, the website presents a trustworthy and professional front for a niche technology provider. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and user trust.

O

OS-Climate

os-climate.org

62

OS-Climate is an open-source initiative under the Linux Foundation focused on developing data and analytics tools to support the transition to a net-zero economy, primarily targeting the energy and transportation sectors. The project leverages collaborative open-source development to provide climate-related data infrastructure and analytics, positioning itself as a key player in sustainability technology. The website reflects a professional and consistent brand aligned with its mission, though it lacks explicit privacy and cookie policies on the main page. Technically, the website is built on WordPress with standard web technologies including JavaScript, PHP, and integrates New Relic for performance monitoring. The site is hosted with a reputable registrar and DNS provider but lacks DNSSEC, which is a minor security gap. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and has domain transfer protections but does not publish explicit security policies or incident response contacts. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the provided data. Privacy compliance is limited due to missing policies and consent mechanisms. Overall, OS-Climate presents a trustworthy and professional online presence with room for improvement in privacy compliance and DNS security. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, and adding security and incident response documentation to enhance trust and compliance.

M

Margo - Edge interoperability for industrial automation ecosystems

margo.org

58

Margo.org is a website focused on providing edge interoperability solutions for industrial automation ecosystems. The site targets professionals and organizations in the industrial automation sector, offering technology-driven services to enhance interoperability at the edge. The website is built on WordPress with a custom theme and integrates various marketing and analytics tools such as HubSpot and New Relic, indicating a moderate level of digital maturity. The technical infrastructure is modern and includes performance monitoring and user interaction tracking, supporting a good user experience. Security posture is adequate with HTTPS enabled and domain lock status, but lacks advanced security headers and explicit security policies on the site. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

3

3MF Consortium

3mf.io

58

The 3MF Consortium is a reputable industry association dedicated to developing and promoting the 3D Manufacturing Format (3MF), a standardized file format for 3D printing and additive manufacturing. Established in 2015 and backed by The Linux Foundation, the consortium has successfully positioned itself as a leader in the additive manufacturing standards space, with the 3MF format recognized as an ISO/IEC international standard. The website reflects a professional and consistent brand presence, targeting technology companies, manufacturers, and developers involved in additive manufacturing workflows. Technically, the website is built on WordPress with modern JavaScript libraries and tracking tools such as Google Analytics and New Relic. It demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and domain transfer protections in place, but could benefit from additional security headers and DNSSEC implementation. Privacy compliance is basic, with a privacy policy present but lacking explicit cookie consent mechanisms or GDPR compliance indicators. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. The site maintains an active content strategy with recent news and blog posts, supporting its credibility and engagement with its audience. Overall, the 3MF Consortium website is a trustworthy and authoritative source for information on the 3MF file format and additive manufacturing standards, with room for improvement in privacy and security best practices.

V

Virtual Minds GmbH

theadex.com

56

Virtual Minds GmbH is a well-established European adtech company specializing in programmatic advertising solutions for publishers, broadcasters, agencies, and advertisers. As a 100% subsidiary of ProSiebenSat.1 Media SE, it holds a strong market position with a modular full-stack offering comprising multiple technology brands. The company targets B2B clients in the digital advertising ecosystem, providing enterprise marketing platforms, DSPs, SSPs, data management, and media management solutions. The website reflects a professional and consistent brand image with good content quality and clear messaging. Technically, the site is built on WordPress with Elementor, leveraging modern JavaScript libraries and integrating third-party marketing and analytics tools such as HubSpot and Piwik PRO. The presence of a comprehensive cookie consent mechanism demonstrates GDPR compliance and privacy awareness. Security posture is solid with HTTPS enforced and domain registration protections, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and the domain registration details align well with the business claims, supporting legitimacy. Overall, the website is a credible digital presence for a medium-sized enterprise in the adtech industry.

V

VetSec

vetsec.org

43

VetSec is a recently founded non-profit organization dedicated to supporting veterans and transitioning military personnel in pursuing careers in cybersecurity. The organization provides a community platform, partners with leading cybersecurity training providers, and offers employment services including resume and interview preparation. Their market position is niche, focusing on veteran employment in cybersecurity with a strong partnership ecosystem. Technically, the website is built on WordPress with modern plugins and integrates Google Analytics for tracking. The site is hosted by Hostineer and uses HTTPS with basic security measures but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. Security posture is moderate with room for improvement in policy transparency and technical controls. Overall, the website is professional and trustworthy but should enhance privacy and security disclosures to improve compliance and user trust.

T

Tribal Share, Inc.

tribalisac.org

66

Tribal-ISAC is a non-profit organization operating under Tribal Share, Inc., focused on providing a secure platform for cyber threat information sharing and collaboration among federally recognized Native American and Alaska Native tribal governments. The organization offers services including threat prevention, protection, community response, and partnerships with government agencies and industry ISACs. Their market position is specialized within the government and non-profit sectors, targeting tribal entities. The website is built on WordPress with a modern theme and plugins, showing moderate technical maturity and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a cookie consent banner and a linked privacy policy hosted on a partner domain. Contact information is clearly provided, enhancing business credibility.

Austrian Airlines AG is a major European airline operating as part of the Lufthansa Group, providing passenger air transportation services globally. The website presents corporate information, press releases, and service details primarily in German with English support, targeting a broad audience including customers, media, and partners. The business model focuses on passenger flights and ancillary services such as in-flight catering. The company holds a strong market position as a member of the Star Alliance and Lufthansa Group, indicating a large enterprise scale. Technically, the website is built on WordPress with a modern plugin ecosystem including SEO, portfolio management, and contact forms. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. Hosting appears to leverage Akamai CDN for performance and security. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in compliance and defense-in-depth. The WHOIS data is unavailable or malformed, which slightly reduces trust but does not outweigh the strong corporate branding and social media presence. Overall, the website is professional, trustworthy, and well-maintained, with recommendations to enhance privacy compliance and security headers to further strengthen its posture.

C

Carrefour addictionS

monado.ch

51

MonAdo.ch is a non-profit informational website operated by Carrefour addictionS, focused on supporting parents of adolescents dealing with addiction and related challenges. The site offers educational content on alcohol, tobacco, cannabis, gambling, screens, and nightlife, targeting a mature audience of concerned parents. It is positioned as a specialized resource in the addiction prevention and adolescent support sector within Switzerland. Technically, the site is built on WordPress with a modern plugin ecosystem including WPML for multilingual support, Google Tag Manager for analytics, and Complianz for cookie consent management. The site demonstrates good mobile optimization and SEO practices but lacks explicit privacy and terms of service pages. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers are not explicitly confirmed. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy compliance and direct contact information.

S

Schwarzwald Tourismus GmbH

foretnoire-magique.fr

41

The website www.foretnoire-magique.fr serves as a regional tourism portal for the Black Forest area, targeting French-speaking visitors interested in cultural, natural, and travel experiences. It is branded under Schwarzwald Tourismus GmbH and provides rich content about the region's attractions, gastronomy, and events. The site is well-structured with good navigation and accessibility features, leveraging modern technologies such as Neos CMS and the Flow PHP framework. It integrates Google Tag Manager and Analytics for user tracking, though privacy and cookie policies are notably absent, representing a compliance gap. Security posture is solid with HTTPS enforced, but security headers are not explicitly detected. WHOIS data is unavailable, which slightly reduces trust but does not negate the site's legitimacy given its professional presentation and official branding. Overall, the site is a credible and useful resource for tourism promotion but should improve privacy disclosures and security headers to enhance compliance and trust.

<

< LA.IO >

la.io

47

LA.IO is a Louisiana-based innovation platform dedicated to fostering breakthrough ideas and connecting innovators with resources to transform concepts into impactful global solutions. The website positions LA.IO as a key player in promoting Louisiana's natural resources, industrial capabilities, and culture of ingenuity to establish the state as a global innovation leader. The platform is affiliated with Louisiana Economic Development, enhancing its credibility and regional influence. Technically, the website is built on WordPress using modern themes and plugins, hosted on Bluehost, and employs Google Analytics for user tracking. The site demonstrates good design quality, mobile optimization, and SEO practices but lacks some advanced security headers and cookie consent mechanisms. Security posture is solid with HTTPS and domain transfer protections but could be improved by enabling DNSSEC and publishing security policies. Overall, the website is professional, trustworthy, and serves its business purpose effectively, though privacy compliance could be enhanced.

S

Syed Balkhi

syedbalkhi.com

66

Syed Balkhi's website serves as a professional personal blog and business portfolio showcasing his entrepreneurial ventures and investments in the WordPress ecosystem. The site highlights his leadership of Awesome Motive, a company powering over 30 million websites with various software products. The website is well-designed, mobile-optimized, and uses modern technologies including WordPress, Cloudflare DNS, and Google Analytics. Security posture is strong with HTTPS enforced and domain registrar locks, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is good with a comprehensive privacy policy present, but lacks a cookie consent mechanism. Overall, the site projects high business credibility and trustworthiness with extensive subsidiary listings and social proof.

S

Schwarzwald Tourismus GmbH

schwarzwald-entdecken.info

48

The website www.schwarzwald-entdecken.info serves as the official regional tourism portal for the Black Forest region in Germany, operated by Schwarzwald Tourismus GmbH. It provides comprehensive travel information, highlights, and planning resources for visitors, targeting a broad general audience interested in tourism and cultural experiences. The site is multilingual, supporting German, English, French, and Dutch, reflecting its international visitor base. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript integrations and accessibility features such as Eye-Able assistive technology. Analytics and marketing are managed through Google Tag Manager and Google Analytics, indicating a mature digital marketing approach. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are absent. WHOIS data is privacy protected, which is common and justified for this business type. Overall, the site is professional, trustworthy, and well-positioned as a regional tourism authority.

S

Schwarzwald Tourismus GmbH

zwartewoud-hoogtepunten.info

48

The website zwartewoud-hoogtepunten.info serves as a regional tourism portal for the Black Forest area, targeting Dutch-speaking visitors. It is part of a multilingual network of sites promoting tourism in the Black Forest region of Germany, Switzerland, and France. The site provides rich content about regional highlights, vacation planning, and cultural experiences, positioning itself as an official tourism information source under the Schwarzwald Tourismus GmbH brand. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript integrations and accessibility features such as Eye-Able assist. Analytics and marketing are managed via Google Tag Manager and Google Analytics. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and formal privacy or cookie policies. WHOIS data is unavailable, likely due to privacy protection, which is common for such entities. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

S

Schwarzwald Tourismus GmbH

blackforest-highlights.com

46

The website www.blackforest-highlights.com serves as an official tourism portal for the Black Forest region in Germany, operated by Schwarzwald Tourismus GmbH. It provides rich multimedia content, detailed regional information, and travel planning resources targeting tourists interested in the Black Forest area. The site is professionally designed with consistent branding and good content quality, supporting multiple languages and accessibility features. Technically, it is built on the Neos CMS platform using the Flow PHP framework, with integrations for Google Tag Manager and Analytics for user tracking and marketing purposes. Security-wise, the site enforces HTTPS and includes accessibility tools but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration legitimacy, although the active and professional website presence suggests it is a legitimate regional tourism site. Overall, the site demonstrates a moderate to good digital maturity with room for enhanced privacy and security compliance.

T

Saarland

toerisme-saarland.nl

43

The website www.toerisme-saarland.nl serves as a regional tourism portal promoting the Saarland region to Dutch-speaking visitors. It offers travel tips, excursions, routes, and nature activities, positioning itself as a key resource for tourists interested in exploring this charming European region. The site is part of a multilingual ecosystem with partner sites in German, English, and French, enhancing its reach and accessibility. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, indicating a modern and maintainable infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security-wise, the site uses HTTPS with good SSL configuration but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are evident, which could impact user trust and compliance. Overall, the site is professionally designed and functional but would benefit from enhanced privacy and security disclosures to improve compliance and trust.