Security Directory

Z

Zaptec

zaptec.com

70

Zaptec is a Norwegian company specializing in the manufacturing of electric vehicle (EV) charging solutions. The company positions itself as a reliable and user-friendly provider of EV charging hardware and software, targeting both residential and commercial customers. Their market presence is supported by a professional website with consistent branding and a clear focus on energy and transportation sectors. The website demonstrates a mature digital infrastructure, leveraging modern web technologies such as Next.js and React, and integrates multiple analytics and marketing tools including Google Tag Manager, HubSpot, and Facebook Pixel. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policies. Security posture is solid with HTTPS enforcement and standard security headers, although the absence of a public security policy and incident response contact points to areas for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high based on website content and external references.

G

Graphisoft

dds-cad.de

65

Graphisoft is a technology company specializing in BIM and CAD software solutions, with this website page focused on the DDScad product for the German market. The site is professionally designed, built on WordPress, and uses modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS and reCAPTCHA integration, though explicit security headers and policies are not evident. The absence of WHOIS data limits domain transparency but the website content and branding align with a reputable software provider. Overall, the site presents a trustworthy and professional digital presence with room for improvement in privacy and security disclosures.

G

Gewiss

gewiss.de

72

Gewiss is a well-established company operating in the energy sector, specializing in electrical components and energy management solutions. The website targets industrial and commercial customers, providing detailed product information and corporate content. The company maintains a professional online presence with consistent branding and comprehensive privacy and cookie policies, indicating a mature approach to regulatory compliance. Technically, the website leverages modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for consent management, and appears to be built on Adobe Experience Manager CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and bot protection is implemented, though explicit security headers were not detected in the provided data, suggesting room for improvement. The WHOIS data is not publicly available, which is common for commercial entities but reduces transparency. Overall, the website demonstrates a solid security posture and compliance maturity with no critical vulnerabilities detected.

Brumberg Leuchten is a German manufacturer specializing in efficient LED lighting solutions for ceilings, walls, and floors. The company targets both business and consumer markets seeking modern, energy-efficient lighting products. The website is built on TYPO3 CMS and integrates advanced cookie consent management, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. While the site demonstrates good content quality and professional design, it lacks visible privacy policies and contact information, which are critical for compliance and trust. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and branding appear consistent with a legitimate business. Security posture is moderate, with room for improvement in security headers and incident response transparency.

B

Banca Națională a României

bnro.ro

70

The website www.bnr.ro represents the official online presence of the National Bank of Romania (BNR), the country's central bank. It provides comprehensive information about the bank's functions, currency issuance, statistics, publications, and contact points, targeting a broad audience including the general public, financial institutions, and government entities. The site is professionally designed with consistent branding and clear navigation, reflecting its authoritative role in Romania's financial sector. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO metadata completeness. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, explicit security headers are not evident in the provided data, and no public security or incident response policies are published. The WHOIS data is not publicly available due to ROTLD privacy policies, which is typical for .ro domains and justified for a government entity. Overall, the website demonstrates a strong business credibility and privacy compliance posture, with moderate technical and security maturity. There are no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, improving accessibility, and publishing explicit security policies to further strengthen trust and compliance.

N

National Bank of Belgium

nbb.be

77

The National Bank of Belgium operates as the central financial institution of Belgium, providing essential banking and monetary services. The website serves a broad audience including the general public, financial professionals, and researchers, offering multilingual support and comprehensive information about the bank's functions. The site is built on Drupal 10, leveraging modern web technologies and analytics platforms such as Matomo and Google Analytics, with a strong emphasis on privacy and cookie consent compliance. Technically, the website demonstrates a mature digital infrastructure with good mobile optimization, accessibility, and SEO practices. Security posture is robust with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the domain WHOIS data is privacy protected, which is justified for a governmental financial institution. Despite the lack of WHOIS transparency, the website exhibits strong trust indicators and professionalism. The risk assessment is low, with recommendations focusing on enhancing security headers and publishing security policies to further strengthen trust and compliance.

C

Cineplexx

cineplexx.at

63

Cineplexx is a prominent cinema chain operating primarily in Austria, offering movie screenings and related entertainment services to a broad audience. The website reflects a professional and modern digital presence, leveraging React technology and integrating comprehensive cookie consent mechanisms to comply with GDPR requirements. The business targets general moviegoers and positions itself as a leading player in the Austrian cinema market. Technically, the site employs modern frontend frameworks and integrates third-party analytics and advertising platforms such as Google Analytics, Facebook, Pinterest, and TikTok, indicating a mature digital marketing strategy. Security-wise, the website enforces HTTPS, implements strong security headers, and provides a detailed privacy policy, although it lacks visible terms of service and explicit security policy pages. Overall, the site demonstrates good security hygiene and privacy compliance but could improve transparency by publishing additional security and incident response information.

C

Coop Eesti Keskühistu

coopkokad.ee

10

Coop Eesti Keskühistu operates the Coop Kokad website, a retail cooperative focused on selling food products in Estonia. The company is well-established with a domain age consistent with its founding year 2017. The website is built on a modern Drupal 10 CMS with Commerce 3, integrating advanced cookie consent management via Cookiebot and analytics tools such as Google Analytics and Hotjar. Advertising is managed through major networks including Adform and Meta Platforms, ensuring targeted marketing and retargeting capabilities. The website demonstrates good technical maturity with HTTPS, responsive design, and clear business information. Security posture is solid with encrypted connections and consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

C

Cineplexx

cineplexx.hr

65

Cineplexx is a well-established cinema chain operating primarily in Austria and surrounding regions, offering movie screenings and related entertainment services. The website reflects a professional digital presence with a focus on user experience and compliance with privacy regulations such as GDPR. The company leverages modern web technologies including React and Google Tag Manager to deliver content and track user interactions effectively. The presence of Cookiebot ensures transparent cookie consent management, enhancing user trust and regulatory compliance. Security posture is solid with HTTPS enforced and standard security headers present, although there is room for improvement in implementing a full Content-Security-Policy and publishing explicit security policies. Overall, the website is trustworthy, well-maintained, and suitable for its target audience of general moviegoers.

T

Telia Eesti AS

telia.ee

79

Telia Eesti AS operates a comprehensive telecommunications platform in Estonia, offering mobile, internet, TV, and IT solutions to both private individuals and businesses. The company holds a strong market position as a leading telecom provider with a broad portfolio of services and a well-established brand. The website reflects a mature digital presence with multi-language support and a user-friendly interface. Technically, the site leverages modern frameworks such as React and integrates analytics and consent management tools, ensuring a balance between user experience and compliance. Security posture is robust with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness, supporting Telia's reputation in the telecommunications sector.

T

Tele2

tele2.ee

65

Tele2.ee is the official website of Tele2, a well-established telecommunications provider in Estonia founded in 2010. The company offers a wide range of services including mobile packages, mobile internet, TV services, and additional offerings such as mobile payments and smart home devices. The website targets both private and business customers in Estonia, providing a professional and user-friendly digital experience. The site is built on modern web technologies including Next.js and React, ensuring good performance, mobile optimization, and accessibility. Tele2 demonstrates strong privacy compliance with a comprehensive cookie consent mechanism and detailed privacy policy in Estonian, including a clear Data Protection Officer contact. Security posture is robust with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, Tele2.ee presents a professional, secure, and compliant online presence suitable for a major telecom operator.

C

Coop Eesti

coop.ee

67

Coop Eesti is the oldest and largest retail cooperative group in Estonia, operating approximately 330 stores with around 6000 employees and serving about 70,000 client-owners. The website reflects a mature retail business with a cooperative model focused on Estonian consumers. Technically, the site is built on Drupal 10, integrating modern analytics and advertising tools such as Google Analytics, Hotjar, and Adform, with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, secure, and compliant, supporting Coop Eesti's market position as a trusted retail cooperative.

M

medhochzwei Verlag

medhochzwei-verlag.de

52

medhochzwei Verlag is a specialized German publishing company focused on healthcare media, providing knowledge and resources related to the health system, hospital management, nursing, dementia, and case management. The company targets healthcare professionals and institutions, offering journals, books, and online subscription services. The website reflects a professional and consistent brand presence with a clear focus on its niche market. Technically, the site employs modern web technologies including Bootstrap for responsive design, Matomo for privacy-conscious analytics, and Cookiebot for GDPR-compliant cookie management. Hosting is provided by SchlundTech, a reputable German hosting provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could improve defenses. No critical vulnerabilities or exposed sensitive data were detected. The website demonstrates good privacy compliance and transparent advertising practices. Overall, the site is well-structured, user-friendly, and trustworthy, supporting the company's position as a reputable healthcare media publisher.

D

Designtorget

designtorget.se

56

Designtorget.se is a well-established Swedish e-commerce retailer specializing in modern interior design products, gifts, and curated design items. The company has a strong market presence in Sweden, supported by a domain registered since 1998 and operated under Abion AB. The website targets consumers interested in unique and trendy home decor and gift items, offering a professional and user-friendly online shopping experience. Technically, the site leverages modern web technologies including Vue.js, Google Tag Manager, and Cookiebot for privacy compliance, indicating a mature digital infrastructure. The use of Cloudflare DNS and HTTPS ensures a secure browsing environment, although DNSSEC is not enabled, which could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of published security policies and incident response information suggests room for enhancement in transparency and preparedness. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional retail platform.

B

Baltneta

baltneta.lt

66

Baltneta is a Lithuanian IT services company specializing in cloud computing, dedicated servers, data protection, IT maintenance, internet connectivity, and call center services. The company targets business clients seeking comprehensive IT infrastructure solutions. The website is professionally designed, localized in Lithuanian, and includes a detailed cookie consent mechanism and privacy policy, indicating a mature approach to privacy compliance. Technically, the site uses modern tools such as Google Tag Manager, Cookiebot, Genesys, and Hotjar, reflecting a well-integrated digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent controls, though some security headers and explicit security policies are absent. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is functional, professional, and compliant with GDPR, but would benefit from enhanced transparency and contact information.

B

Baltneta

balt.net

66

Baltneta is a Lithuanian IT service provider specializing in cloud computing, dedicated servers, data protection, IT maintenance, internet connectivity, and call center services. The company positions itself as an expert in cloud and server solutions targeting business clients. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site employs modern technologies including Google Tag Manager, Cookiebot for consent management, Hotjar for analytics, and Genesys for customer engagement, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, slightly impacting business credibility. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security disclosures.

R

Rentlio d.o.o.

rentl.io

66

Rentlio d.o.o. operates a leading cloud-based property management system, channel manager, and booking engine tailored for the hospitality industry, including hotels, apartments, and property management companies. Founded in 2014 and headquartered in Zadar, Croatia, Rentlio positions itself as a comprehensive solution to streamline property management and drive business growth. The company targets hoteliers, vacation rental owners, and multi-property managers, offering a SaaS model accessible via web, iOS, and Android platforms. The website reflects a professional and modern digital presence with strong branding and positive user ratings.

B

BOX NOW

boxnow.hr

54

BOX NOW is a Croatian company specializing in automated parcel locker services, providing a sustainable and convenient delivery network across Croatia. Their platform supports consumers, e-commerce businesses, physical stores, and courier partners with 24/7 access to parcel lockers powered by solar energy. The website reflects a modern digital infrastructure with integration of mapping, tracking, and mobile app promotion. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the business appears legitimate, well-positioned in the Croatian logistics market, and technically competent.

I

Invelity

invelity.com

75

Invelity is a Slovak digital marketing agency specializing in SEO, PPC, social media advertising, Google Ads, Facebook Ads, web development, and marketing strategy consulting. The company targets businesses seeking to improve their online presence and marketing effectiveness within Slovakia. The website presents a professional design with consistent branding and clear service offerings, indicating a focused business model in the digital marketing sector. Technically, the website employs modern technologies including Google Tag Manager, Google Analytics, Cookiebot for consent management, Microsoft Clarity for user behavior analytics, and Google reCAPTCHA for form security. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the website enforces HTTPS and uses reCAPTCHA, but lacks visible security headers and explicit security policies. The cookie consent mechanism is comprehensive and GDPR compliant, but no explicit privacy policy or terms of service pages were found in the provided content. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the website scores moderately well in content quality, technical implementation, security posture, privacy compliance, and business credibility, but improvements are recommended in transparency and security best practices.

A

Amgen

amgen.cz

10

Amgen Česká republika is the Czech Republic branch of Amgen, a global biotechnology company focused on developing innovative medicines for serious illnesses. The website serves as a corporate informational portal targeting healthcare professionals and patients in the Czech market. It highlights Amgen's commitment to scientific innovation and patient care. Technically, the site employs modern web technologies including HTTPS, Content Security Policy, and cookie consent mechanisms to ensure security and privacy compliance. The presence of Google Tag Manager and Cookiebot indicates a mature approach to analytics and GDPR compliance. Security posture is solid with HTTPS and CSP headers, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and the site is accessible and professionally designed. Overall, the website reflects a trustworthy and compliant corporate presence with good technical and security practices.

V

VSE

vse.sk

69

The website www.vse.sk represents a large Slovak energy supplier offering electricity and gas services to households and businesses. It positions itself as the largest supplier in Slovakia, providing 24/7 service and customer connection options. The site uses modern web technologies including JavaScript ES modules, Google Tag Manager, Cookiebot for cookie consent, and Microsoft Omnichannel for live chat support, indicating a mature digital infrastructure. However, explicit privacy policies, terms of service, and direct contact information are not evident in the provided content, which could impact user trust and compliance transparency. Security measures such as HTTPS and cookie consent are in place, but additional security headers and incident response information are lacking. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security documentation.

O

OLO

olo.sk

66

OLO is a Slovak company specializing in waste management and energy services for the Bratislava region. Established in 2003, it holds a strong local market position as a public utility provider focused on environmental sustainability and energy supply. The website reflects a professional and modern digital presence using React and Next.js technologies, supported by Cloudflare for DNS and CDN services. The company demonstrates good digital maturity with GDPR-compliant cookie consent mechanisms and integration of analytics tools like Microsoft Clarity. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security and incident response policies are not publicly available. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.

W

WeDare

wedare.pl

59

WeDare is a Polish-based company specializing in affiliate marketing services tailored for the e-commerce sector. The company emphasizes partnership and transparency as core values, positioning itself as a niche e-commerce house. Their website reflects a modern digital presence built on WordPress with Elementor and Yoast SEO, indicating a mature technical infrastructure. Integration with Google Analytics, Tag Manager, and Cookiebot demonstrates a commitment to data-driven marketing and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. Contact information is primarily via web forms and social media, with no direct emails or phone numbers publicly listed. Overall, the website is professional, well-branded, and trustworthy, serving a small-sized business audience in Poland.

S

Shoptet.cz

shoptet.com

78

Shoptet.cz is a leading e-commerce platform based in the Czech Republic, offering SaaS solutions for entrepreneurs and businesses to create and manage online stores. The website promotes a 30-day free trial, targeting small to medium-sized enterprises seeking to establish an online presence. The platform is well-positioned in the Czech market with a professional and modern digital presence. Technically, the website leverages modern frameworks such as React and Next.js, integrates with third-party services like Vimeo for video content, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site demonstrates good mobile optimization and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses security-related cookies such as CSRF tokens. However, explicit security headers and published security policies are absent, indicating room for improvement in transparency and defense-in-depth. The cookie consent mechanism is robust and GDPR-compliant, but no privacy policy or terms of service were detected in the provided content. Overall, Shoptet.cz presents a trustworthy and professional online platform with a solid technical foundation. The absence of WHOIS data limits domain registration trust analysis, but the website's quality and security posture suggest legitimacy. Strategic recommendations include enhancing security headers, publishing security and privacy policies, and providing clear contact information to improve compliance and user trust.

F

Fundacja Polskiego Godła Promocyjnego Teraz Polska

terazpolska.pl

10

Fundacja Polskiego Godła Promocyjnego Teraz Polska is a well-established non-profit foundation founded in 1991, dedicated to promoting Polish business, products, services, and innovations through quality certification and promotional marks. The website serves as an informational and promotional platform targeting Polish businesses, municipalities, and consumers interested in Polish quality standards. The foundation holds a reputable market position as a recognized promoter of Polish business excellence. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for cookie consent, and various social media tracking pixels, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility improvements could be made. Security-wise, the website uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no indications of malicious activity or content safety concerns.

C

CREATON Benelux nv

creatondak.nl

59

CREATON Benelux nv operates as a specialized manufacturer and distributor of high-quality clay and concrete roof tiles along with system accessories, targeting private individuals, building owners, and professional stakeholders such as roofers, architects, and project developers. The company maintains a strong market position in the Benelux region with a professional and content-rich website that supports multiple languages and regional partner sites. The website infrastructure is built on the Neos CMS platform using the Flow PHP framework, incorporating modern technologies such as Google Tag Manager and Cookiebot for analytics and consent management. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website demonstrates good technical maturity, privacy compliance, and business credibility, supporting a trustworthy online presence for the company.

C

CREATON Benelux nv

creaton.be

58

CREATON Benelux nv is a specialized manufacturer and distributor of high-quality clay and concrete roof tiles along with roofing system accessories. The company targets both private individuals and professional roofing partners, positioning itself as an expert in pitched-roof solutions within Belgium and internationally through multiple localized websites. The website is professionally designed using the Neos CMS platform, featuring multi-language support and clear navigation tailored to different user groups such as homeowners and professionals. The business model focuses on manufacturing and supplying roofing materials with additional professional services and tools.

C

CREATON

creaton.it

68

CREATON is a well-established manufacturer and supplier specializing in roofing products, including clay tiles and roofing accessories, targeting both professional and consumer markets primarily in Italy and other European countries. The website reflects a mature digital presence with multi-language support and a professional design consistent with its industry. The technical infrastructure leverages modern frameworks such as Neos CMS and Flow PHP, integrating third-party services like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though there is room for improvement in implementing additional security headers. Overall, the website demonstrates good compliance with GDPR and privacy standards, with transparent business information and a trustworthy online presence.

C

CREATON

creaton.ch

68

CREATON is a well-established manufacturer and supplier specializing in roofing products, including high-quality clay roof tiles and economical concrete roof stones, complemented by extensive original and system accessories. The company targets both B2B and B2C customers in the construction and renovation sectors, maintaining a strong market presence in Switzerland and Europe. Their website reflects a professional and consistent brand image, offering multilingual support and comprehensive product information. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, integrating modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The website demonstrates good mobile optimization and SEO practices, ensuring a positive user experience.

C

CREATON

creaton.com

68

CREATON is a specialized manufacturer and distributor of high-quality pitched roof tiles, including clay and concrete options, along with system accessories. The company targets roofing professionals, architects, residential construction companies, dealers, and end customers interested in pitched roofs. Their market position is that of an established expert with a broad product range and professional services. The website is built on the Neos CMS platform using the Flow PHP framework, incorporating modern technologies such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit privacy policies are missing. WHOIS data is unavailable, which slightly reduces domain trust but the professional website and active cookie compliance indicate legitimate business operations. Overall, the website scores well in content quality, technical implementation, security, privacy compliance, and business credibility.

T

TAB

tabbv.nl

49

TAB is a specialized Dutch company focused on building fire prevention services including compartmentalization, penetrations, emergency lighting, and maintenance. The website positions TAB as a niche expert in this field, targeting businesses and professionals requiring fire safety solutions. The site is built on WordPress with a modern tech stack including Google Tag Manager, Hotjar, and Cookiebot for analytics and compliance. Structured data and SEO metadata are well implemented, enhancing search visibility. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and published privacy or security policies, indicating room for improvement. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

L

Laudert GmbH + Co. KG

laudert.de

74

Laudert GmbH + Co. KG is a European leader in holistic product communication, offering consulting, tools, content, and channel services primarily targeting businesses seeking to enhance their product messaging. The company positions itself as a highly effective partner in the media sector, with a professional and well-branded online presence. The website is built on WordPress with modern SEO and privacy compliance features, including a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Technically, the site employs standard web technologies and integrates Google Tag Manager and Cookiebot for analytics and consent management. Security posture is strong with HTTPS and Content-Security-Policy headers, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data for the domain is a notable anomaly that warrants further investigation. Overall, the website demonstrates a mature digital infrastructure and a high level of professionalism, supporting the company's market position.

N

Nahverkehrsservice Sachsen-Anhalt GmbH

insa.de

57

Nahverkehrsservice Sachsen-Anhalt GmbH operates the INSA platform, a regional public transportation service providing comprehensive timetable information and ticketing solutions for Sachsen-Anhalt and the Mitteldeutschen Verkehrsverbund (MDV). The website serves as a digital hub for users seeking mobility information, ticket purchases, and related services such as the INSA app and RufBus ordering. Positioned as a key regional mobility facilitator, INSA leverages modern web technologies and complies with GDPR regulations to ensure user privacy and data protection. Technically, the website is built on TYPO3 CMS, integrating JavaScript libraries such as ReadSpeaker for accessibility and Cookiebot for consent management. The infrastructure is hosted with professional DNS providers and employs HTTPS with good SSL configuration, ensuring secure communications. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a user-friendly experience. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit published security policies or incident response contacts, which could be improved to enhance trust and readiness. Analytics usage is moderate with Piwik (Matomo), respecting privacy with clear retention policies. Overall, the website is trustworthy, professionally maintained, and compliant with privacy laws. Strategic recommendations include publishing a security.txt file, incident response contacts, and expanding security policy disclosures to strengthen the security posture and user trust.

Pon.Bike is a global group of bicycle brands offering a wide range of bicycles across various market segments, from off-road downhill racing bikes to urban luggage carriers. The website positions itself as a leading player in the bicycle industry with a professional and modern digital presence. The business model focuses on multi-brand management and distribution, targeting consumers and businesses interested in bicycles worldwide. The site content is well-structured, with clear branding and consistent messaging.

N

Nahverkehrsservice Sachsen-Anhalt GmbH

nasa.de

64

Nahverkehrsservice Sachsen-Anhalt GmbH (NASA GmbH) is a regional public transportation authority responsible for planning, ordering, and financing local rail passenger transport in the German state of Sachsen-Anhalt. The company also operates the INSA timetable information system, serving public transport users and stakeholders in the region. The website reflects a professional and consistent brand presence, targeting primarily German-speaking users interested in regional mobility services. The business model focuses on public sector transportation planning and service provision, positioning NASA GmbH as an essential regional player in transportation infrastructure and information services. Technically, the website is built on the TYPO3 CMS platform, integrating modern web technologies such as jQuery, ReadSpeaker for accessibility, and Cookiebot for GDPR-compliant cookie management. Hosting is managed via DomainControl nameservers, and the site demonstrates good mobile optimization, accessibility, and SEO practices. Analytics are conducted using Piwik (Matomo), indicating a privacy-conscious approach to user data collection. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security policy or incident response contacts are published. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The domain registration appears legitimate and consistent with the business's regional focus. Overall, the website presents a low-risk profile with strong privacy compliance and good technical implementation. Strategic improvements could include publishing a formal security policy, adding security headers, and establishing a vulnerability disclosure process to enhance trust and security posture further.

F

Fahrgastforum Sachsen-Anhalt

fahrgastforum.de

64

Fahrgastforum Sachsen-Anhalt operates a regional public transport passenger forum website focused on collecting and sharing ideas, questions, and feedback about regional trains, S-Bahn, and PlusBus services in Sachsen-Anhalt, Germany. The site targets local passengers and community members interested in improving public transport services. It is positioned as a community engagement platform with a clear focus on regional transportation issues. The website uses TYPO3 CMS and Bootstrap for a responsive and accessible user experience, supported by Cookiebot for cookie consent management and Piwik (Matomo) for analytics. The technical infrastructure is modern and adequate for the site's purpose, hosted on domaincontrol.com nameservers.

N

Nahverkehrsservice Sachsen-Anhalt GmbH

mein-takt.de

56

Mein Takt Sachsen-Anhalt is the official regional mobility brand for the German state of Sachsen-Anhalt, operated by Nahverkehrsservice Sachsen-Anhalt GmbH. The website provides comprehensive information and services related to regional trains, S-Bahn, PlusBus lines, train stations, and travel information via the INSA Fahrplanauskunft system. The site targets public transport users within the region and serves as a key information portal for mobility services. Technically, the website is built on TYPO3 CMS, integrates modern JavaScript libraries, and uses Cookiebot for GDPR-compliant cookie consent. The presence of accessibility features and mobile optimization indicates a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve transparency around security and incident response.

N

Nahverkehrsservice Sachsen-Anhalt GmbH

starker-nahverkehr.de

56

Mein Takt Sachsen-Anhalt is a regional public transportation brand operated by Nahverkehrsservice Sachsen-Anhalt GmbH, focusing on providing mobility services including regional trains, S-Bahn, PlusBus lines, and travel information via the INSA system. The website serves residents and travelers in the German state of Sachsen-Anhalt, offering comprehensive travel planning tools and service information. The site is built on TYPO3 CMS and integrates third-party services such as Cookiebot for cookie consent and INSA for travel planning. The technical infrastructure is modern and well-implemented, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly documented. Privacy compliance is strong, with a detailed privacy policy and GDPR-aligned cookie consent. Overall, the website is professional, trustworthy, and serves its target audience effectively.

P

Promethean World

prometheanworld.com

74

Promethean World is a well-established company founded in 1997, specializing in interactive displays and software solutions for education and workplace environments. The company positions itself as a global leader in this niche, targeting educational institutions and workplace technology users with a B2B business model. Their website reflects a professional and consistent brand image, supported by comprehensive privacy and cookie policies, and active social media presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates various marketing and analytics tools such as Google Tag Manager and Cookiebot, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks publicly visible security policies or incident response contacts, which could be improved. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and structured data suggest a legitimate business. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security transparency.

V

Verlagsgruppe Oetinger Service GmbH

oetinger.de

56

Verlagsgruppe Oetinger Service GmbH is a well-established German publishing group specializing in children's and youth literature. Their website offers a broad catalog of books, including popular titles like Pippi Langstrumpf and Tintenwelt, targeting children and young readers. The company maintains a consistent brand presence with active social media channels and a professional online storefront. Technically, the website is built on Drupal 10 with the Thunder distribution, integrating modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS, employs standard security headers, and uses a cookie consent mechanism, though it lacks a publicly stated security policy or incident response contact. WHOIS data aligns well with the business claims, indicating legitimacy and consistent domain registration. Overall, the website is professional, secure, and compliant with privacy regulations, serving its target audience effectively.

M

myRight

myright.de

64

myRight is a German legal services platform specializing in consumer rights across various legal domains such as tenancy law, emissions scandal, travel law, and labor law. The company positions itself as a consumer advocate with a high success rate in court cases, targeting German consumers seeking legal assistance online. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its services. Technically, the site leverages modern frameworks like Laravel, uses Cloudflare for DNS and security, and integrates Cookiebot for GDPR-compliant cookie consent. Security posture is strong with HTTPS enforcement, CSRF protection, and security headers, though explicit security and incident response policies are not publicly available. Overall, the site demonstrates good privacy compliance and business credibility, though contact information is limited to web forms without direct emails or phone numbers.

S

SEO.Domains

seo.domains

57

SEO.Domains operates a leading global marketplace specializing in aged and expired domains, boasting ownership of approximately 70% of the global supply with over 150,000 domains. Their services cater primarily to SEO professionals, digital marketers, and agencies seeking domains for PBNs, 301 redirects, or money sites, alongside backlink offerings and managed SEO services. The company has established a strong market position since its founding in 2014, supported by multiple registrar accreditations and a broad international client base.

M

Merantix Momentum

merantix-momentum.com

66

Merantix Momentum is a German-based technology company specializing in AI and machine learning solutions tailored for businesses across various industries. The company positions itself as a partner for developing and operating customized AI use cases, targeting a broad B2B audience. The website content is professional, well-structured, and localized in German, indicating a focus on the German-speaking market. The digital infrastructure leverages modern web technologies including Webflow CMS, Cookiebot for consent management, HubSpot for marketing and analytics, and Google Tag Manager, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and vulnerability disclosure mechanisms are absent. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website appearance. Overall, the site demonstrates good privacy compliance and marketing transparency but would benefit from enhanced security disclosures and verified domain registration information.

P

POS Experts

posexperts.cz

52

POS Experts is a Czech Republic-based company specializing in providing point-of-sale (POS) systems tailored for retail, restaurants, and manufacturing businesses. The company offers software and hardware solutions designed to optimize sales operations, with a focus on affordability and local market needs. Their website reflects a professional and consistent brand image, targeting small to medium-sized businesses in the retail sector. The business appears to have been operational since at least 2017, with a clear focus on the Czech market.

C

Coinmate s.r.o

sekce-vnpcas.cz

65

Coinmate s.r.o operates a leading Czech cryptocurrency exchange platform, offering services such as trading, quick buy, automated recurring purchases, and API access for trading bots. Established in 2013, it holds a strong market position with unique EUR and CZK markets, catering primarily to European cryptocurrency traders and investors. The company emphasizes security and compliance, evidenced by its ISO/IEC 27001:2022 certification and partnerships with reputable Czech financial institutions. The website is professionally designed, mobile-optimized, and provides comprehensive user support and educational resources. Technically, the platform leverages modern web technologies including Angular, Google Tag Manager, and Microsoft Clarity, hosted with Cloudflare DNS and CDN services, ensuring fast and secure user experiences. Security posture is robust with HTTPS enforcement, advanced custody infrastructure, two-factor authentication, and separation of client funds from operating expenses. Privacy compliance is strong with clear policies and consent mechanisms. Overall, Coinmate presents a trustworthy and mature digital presence with high business credibility and technical sophistication.

V

vaylens GmbH

vaylens.com

69

vaylens GmbH is a medium-sized German company specializing in EV charging management software, providing solutions to simplify, monetize, and grow electric vehicle charging networks across Europe. Founded in 2009 and operating under the parent company KOSTAL Group, vaylens holds a strong market position as a leading B2B SaaS provider in the energy and transportation sectors. Their website reflects a professional and consistent brand image with clear business information and a focus on their core services. Technically, the website is built on modern technologies including Webflow CMS, GSAP animations, and integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, Microsoft Clarity, and Cookiebot for GDPR-compliant cookie management. Hosting is provided via AWS infrastructure with DNS managed by Amazon Route 53. The site demonstrates good performance, mobile optimization, and SEO practices. From a security perspective, the site enforces HTTPS, employs clientTransferProhibited domain status, and uses cookie consent mechanisms to comply with privacy regulations. However, DNSSEC is not enabled, and some security headers are not explicitly detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. Incident response and security policy information are not publicly available. Overall, vaylens.com presents a trustworthy and professional digital presence with strong compliance to privacy laws and a solid technical foundation. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and enhancing security headers to further strengthen the security posture.

Broker Trust is a leading brokerpool in the Czech Republic, specializing in providing financial advisory and brokerage services to financial advisors and intermediaries. The company positions itself as the largest and fastest-growing brokerpool in the Czech market, offering a comprehensive suite of services tailored to financial professionals. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with integrated SEO and analytics tools to optimize user engagement and compliance. The technical infrastructure includes modern JavaScript libraries and cookie consent mechanisms, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response details are not publicly disclosed. Overall, the website and business demonstrate a mature digital footprint with moderate risk due to lack of WHOIS transparency. Strategic recommendations include publishing detailed security policies and incident response contacts to enhance trust and compliance.

F

Fundacja Polska Bezgotówkowa

polskabezgotowkowa.pl

52

Fundacja Polska Bezgotówkowa is a Polish non-profit foundation dedicated to promoting cashless payments across Poland by providing payment terminals and educational initiatives. The foundation targets Polish businesses and merchants aiming to adopt modern payment technologies. The website reflects a professional and consistent brand image with a clear focus on its mission. Technically, the site is built on a modern Next.js and React stack, integrating multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized and performs moderately well, though accessibility could be improved. Security posture is strong with HTTPS enforced and standard security headers likely in place. However, the absence of explicit privacy policy and terms of service pages, as well as lack of direct contact information, slightly reduce privacy compliance and business credibility scores. Overall, the domain registration data aligns well with the website's claims, indicating legitimacy and transparency. Strategic recommendations include publishing comprehensive privacy and terms pages, enhancing accessibility, and providing clear contact channels for security and general inquiries.

E

Etnetera Motion

motion.cz

66

Etnetera Motion is a full-service digital agency based in Prague and part of the Etnetera Group. The company specializes in crafting digital products and services that help businesses grow and build strong relationships with their customers. Their key services include influencer marketing, campaign management, project management, strategy, design, UI, and UX. The website reflects a professional and modern digital agency targeting business clients seeking creative and strategic digital solutions. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, Cookiebot for consent management, and Cloudflare Turnstile for bot protection. The site is mobile-optimized, uses a CDN for hosting, and implements good SEO and accessibility practices, though accessibility could be further improved. From a security perspective, the site enforces HTTPS, employs standard security headers, and provides a comprehensive cookie consent mechanism with granular user controls. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website is trustworthy, professionally designed, and compliant with GDPR requirements. The lack of WHOIS data due to privacy protection is typical for commercial entities and does not detract from the site's legitimacy. Strategic recommendations include publishing terms of service, security policies, and incident response information to enhance transparency and trust.

D

Dinner in the sky

dinnerinthesky.cz

49

Dinner in the sky is a hospitality business offering unique elevated dining experiences in Prague, targeting general audiences interested in exclusive events. The website is built on WordPress using the Divi theme and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and TikTok Pixel. Cookie consent is managed via Cookiebot, indicating some level of privacy compliance. Security posture is moderate with HTTPS enabled but lacking security headers and explicit privacy or terms of service pages. The domain is mature and consistent with the business profile, enhancing trustworthiness. Overall, the website is professional and functional but could improve in privacy transparency and security hardening.