Security Directory

S

SOLEN, s. r. o.

solen.sk

58

SOLEN, s. r. o. is a Slovak company specializing in professional healthcare events, medical journals, and books. The website serves healthcare professionals by providing access to specialized medical publications and organizing relevant medical congresses and events. The company appears to hold a solid position in the Slovak healthcare publishing market with a focused business model on education and professional development. The website content is well-structured, professionally presented, and targeted primarily at medical practitioners and healthcare professionals in Slovakia. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Font Awesome, and Owl Carousel, with additional tools for form validation and cookie consent management. The site is mobile-optimized and uses HTTPS with CSRF protection, indicating a mature digital infrastructure. Google Analytics and Cookiebot are used for analytics and privacy compliance, respectively, reflecting adherence to GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF tokens, and a comprehensive cookie consent mechanism. However, some standard security headers are missing, and there is no public incident response or security policy documentation. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is consistent with the website's business claims, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong privacy compliance and a professional online presence. Strategic improvements could include adding security headers, publishing incident response policies, and enhancing accessibility features to further strengthen security and compliance posture.

F

FETMED

fetmed.cz

47

FETMED is a specialized healthcare provider in the Czech Republic focusing on fetal medicine, genetics, and gynecology. The company operates two physical centers in Olomouc and Ostrava, offering comprehensive prenatal diagnostics, genetic consultations, psychological counseling, and pediatric cardiology. Their market position is that of a trusted regional specialist with experienced medical professionals and advanced diagnostic technologies. The website is professionally designed, mobile-optimized, and provides clear service information and contact channels. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, and Google reCAPTCHA, ensuring a functional and user-friendly experience. Performance is moderate with good mobile responsiveness and basic accessibility features. However, some security best practices such as security headers are missing, and no privacy policy or terms of service pages are present, which impacts compliance and trust. Security posture is generally good with HTTPS enforced and use of CAPTCHA for forms, but the absence of security headers and WHOIS transparency reduces the overall security confidence. No vulnerabilities or exposed sensitive data were detected. Cookie consent is implemented properly, supporting GDPR compliance to some extent. Overall, the website is a credible and professional healthcare service platform with room for improvement in privacy disclosures and security hardening. The lack of WHOIS data is a concern but may be due to local registry policies. Strategic recommendations include publishing privacy and terms policies, adding security headers, and maintaining updated libraries to enhance security and compliance.

E

Examples.com

examples.com

59

Examples.com is an educational website offering a wide range of free interactive resources, including guides, lessons, practice tests for AP exams, and various online calculators and converters. The site targets teachers and students seeking comprehensive educational materials across subjects such as English, Maths, Science, and more. The business model focuses on providing free educational content to support learning and exam preparation, positioning itself as a valuable resource in the education sector. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Owl Carousel, MathJax, and Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, with clear navigation and structured content. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The absence of WHOIS data for the domain raises some concerns about registration transparency, although the website content and structure appear professional and trustworthy. Overall, Examples.com presents a solid educational platform with good content quality and user experience. Strategic improvements in security headers, privacy compliance, and domain registration transparency would enhance its trustworthiness and compliance posture.

N

Nemocnice České Budějovice, a.s.

csklg.cz

43

The website csklg.cz serves as the official platform for the 1st Czechoslovak Congress of Medical Genetics, scheduled for April 2025 in Luhačovice, Czech Republic. It is organized by Nemocnice České Budějovice and associated professional genetics societies from Czechia and Slovakia. The site provides detailed program schedules, speaker information, venue details, registration instructions, and contact information, targeting medical genetics professionals and researchers. The business model focuses on event organization and professional networking within the healthcare genetics sector. The domain is newly registered in 2024, aligning with the event timeline, and hosted via Active24.

K

Kardioakademie IKEM

kardioakademie.cz

64

Kardioakademie IKEM is a specialized educational platform focused on postgraduate training in cardiology, offering modular courses targeted at medical professionals and cardiology specialists primarily in the Czech Republic. The website presents a professional and consistent brand image with good content quality and relevant educational information. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The infrastructure is hosted via a Czech registrar and hosting provider, ensuring regional consistency and domain legitimacy. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, although there is room for improvement in security headers and explicit privacy policy documentation. Overall, the site is safe, trustworthy, and well-positioned within its niche educational market.

Q

Q12

q12.ch

58

Q12 is a collaborative network of small and medium-sized cultural and congress venues across Switzerland, providing event locations primarily for cultural and congress events. The website presents a professional and consistent brand image, targeting event organizers and cultural institutions within Switzerland. The technical infrastructure relies on legacy JavaScript libraries such as jQuery 1.8 and includes Google Analytics for visitor tracking. Mobile optimization is good, and the site includes basic SEO and accessibility features. Security posture is moderate but impacted by the use of outdated libraries and lack of visible security headers. Privacy compliance is addressed with a cookie consent banner and a privacy policy, though no terms of service or incident response policies are evident. Overall, the site is safe with no adult or questionable content, but improvements in security and compliance documentation are recommended.

Skupina GEN is a major Slovenian energy group focused on sustainable and low-carbon electricity production, primarily through nuclear and hydroelectric power. The company also engages in electricity trading and strategic investments, including the development of the second block of the Krško nuclear power plant (JEK2). Their website reflects a professional corporate presence with clear navigation and relevant content for stakeholders and the general public. Technically, the site uses established JavaScript libraries and Google services, hosted on Microsoft Azure DNS infrastructure, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements are recommended such as updating libraries and publishing formal security policies. Overall, the domain and WHOIS data confirm a legitimate and established business entity with consistent registration details.

A

Aarau Regio

aarau-regio.ch

44

Aarau Regio is a regional governmental entity focused on coordinating cooperation and projects within the Aarau region in Switzerland. The website serves as an information portal highlighting current projects, regional cooperation efforts, and news relevant to residents and stakeholders. The organization emphasizes regional development, spatial and traffic planning, and nature and landscape protection. The website is built on the TYPO3 CMS platform and incorporates modern web technologies including jQuery, Owl Carousel, and analytics tools such as Google Analytics and Matomo. While the site is well-structured and professionally designed, it lacks visible cookie consent mechanisms and detailed privacy compliance features, which may pose GDPR compliance challenges. Security posture is moderate with HTTPS enforced but missing advanced security headers and explicit security policies. Overall, the domain registration and WHOIS data align well with the website's governmental nature, indicating legitimacy and trustworthiness.

A

Ace IT s.r.o.

gdpr-experts.cz

44

GDPR Experts, operated by Ace IT s.r.o., is a specialized small business based in the Czech Republic providing GDPR compliance and IT security consulting services. Their offerings include GDPR training, audits, legal documentation, and IT security assessments tailored for companies and entrepreneurs within the EU. The website is professionally designed with clear navigation and relevant content targeting businesses needing GDPR solutions. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. However, there are gaps in privacy compliance, notably the absence of explicit privacy and cookie policies. Security posture is adequate with HTTPS implied but lacks visible security headers and incident response information. Overall, the domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

N

NordNet SA (Registrar)

tourisme-en-champagne.com

57

The website tourisme-en-champagne.com serves as a comprehensive regional tourism portal for the Champagne region in France, offering information on destinations, cultural heritage, accommodations, and activities. It targets tourists and visitors interested in exploring the Champagne terroir and related experiences. The site is well-established with a domain age dating back to 1999, indicating a mature presence in the tourism sector. Technically, the site is built on Drupal 7 with a variety of JavaScript libraries for UI enhancements and analytics, including Matomo and Google Analytics. While the site is functional and provides good content quality and navigation, it uses some outdated JavaScript libraries that may pose security risks. Security posture is moderate with HTTPS enabled but lacks visible security headers and DNSSEC. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the site is credible and trustworthy but would benefit from improvements in security and privacy compliance.

P

Pomurska gospodarska zbornica

pgz.si

10

Pomurska gospodarska zbornica (PGZ) is a regional economic chamber based in the Pomurje region of Slovenia, established in 2008. The organization focuses on uniting and supporting local businesses through networking events, consulting services, public documentation, and educational programs. The website reflects a professional and consistent brand presence, targeting a broad audience including businesses and stakeholders in the region. The site content is primarily in Slovenian and provides comprehensive information about the chamber's activities, projects, and regional economic data. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, FontAwesome, and Owl Carousel, with Google Analytics integrated for user tracking. The site is mobile-optimized and demonstrates good SEO practices.

M

MENTOR - Die Leselernhelfer Nordhessen e.V.

mentor-nordhessen.de

45

MENTOR - Die Leselernhelfer Nordhessen e.V. is a regional non-profit organization dedicated to improving children's literacy and language skills through individual mentoring programs. Affiliated with the national MENTOR federation, it connects volunteer mentors with schools to provide weekly reading support for children aged 6 to 16. The website reflects a clear mission and target audience focused on education and community support. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap 5 and jQuery. It is hosted on servers indicated by the nameservers from agenturserver, suggesting a professional hosting environment. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. From a security perspective, the site uses HTTPS and includes CSRF tokens and a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. No vulnerability disclosure or security.txt files are present, which could be improved to enhance trust and security posture. Overall, the website is safe, professional, and trustworthy with a strong focus on privacy compliance and user protection. The main risks relate to missing security headers and lack of formal security documentation. Strategic improvements in these areas would strengthen the organization's digital security and compliance standing.

E

ESYLUX Deutschland GmbH

services-esylux.de

49

ESYLUX Deutschland GmbH operates a professional website offering intelligent automation and lighting solutions focused on energy efficiency and human-centric lighting. The company targets business and professional customers in the technology and energy sectors, providing a broad product portfolio and digital tools. The website is built on TYPO3 CMS with modern technologies and includes comprehensive privacy and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no exposed sensitive data, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for user experience and compliance.

E

ESYLUX GmbH & Co. KG

esylux.com

10

ESYLUX GmbH & Co. KG is a medium-sized German technology company specializing in intelligent automation and lighting solutions, targeting business sectors such as offices, education, healthcare, and outdoor environments. The company offers a broad portfolio including presence and motion detectors, lighting systems, and control technologies, positioning itself as an established specialist with international reach. The website reflects a mature digital presence with a professional design, multilingual support, and comprehensive product and service information. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and analytics tools, delivering good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though there is room for improvement in published security policies and incident response transparency. The absence of WHOIS registration data slightly impacts domain trust but is mitigated by the professional and consistent web presence. Overall, ESYLUX demonstrates a solid business and technical foundation with good compliance and security practices.

S

smARTec Veranstaltungstechnik AG

smartec.com

38

smARTec Veranstaltungstechnik AG is a Swiss-based company specializing in mobile event technology and digital events, offering services such as lighting, sound, and video technology rental and operation. Positioned as a Swiss industry leader with approximately 2000 projects annually, the company targets corporate, public, and exhibition event organizers. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS with modern JavaScript libraries and integrates analytics tools like Google Analytics and Matomo, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website and certifications. Overall, the site is trustworthy and business credible but would benefit from improved transparency in domain registration and security policies.

B

Busbetrieb Aarau AG (BBA)

busaarau.ch

52

Busbetrieb Aarau AG (BBA) is a regional public transportation company operating bus services in Aarau, Switzerland. The company provides comprehensive transit services including bus lines, schedules, ticketing options, and customer support. Their website is designed to serve local commuters and visitors with real-time information and service updates. The business operates in the transportation sector with a medium-sized organizational footprint and a clear focus on regional mobility solutions. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses a secure CMS platform but lacks some advanced security headers and does not publish a formal security or incident response policy. Privacy compliance is partially addressed with a privacy policy and cookie information, though no explicit cookie consent mechanism is present. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

M

MENTOR - Die Leselernhelfer Bundesverband e.V.

mentor-bundesverband.de

44

MENTOR - Die Leselernhelfer Bundesverband e.V. is a German non-profit organization dedicated to improving literacy and language skills among children and youth through volunteer reading mentors. With a large volunteer base and partnerships, it supports thousands of students nationally, offering both in-person and online reading sessions. The website reflects a well-established educational non-profit with clear contact information and community engagement. Technically, the site is built on Joomla CMS with Bootstrap and common JavaScript libraries, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is strong with visible cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy and professionally maintained, though improvements in security policies and vulnerability disclosure could enhance its posture.

gis.Point is a specialized media portal operated by VDE VERLAG GmbH, focusing on geoinformation and geodesy sectors. It offers industry news, podcasts, videos, event listings, and subscription-based magazines, serving professionals and enthusiasts in the geospatial domain. The website is well-structured, content-rich, and targets a niche audience with relevant and up-to-date information. The business model revolves around media publishing and information dissemination, supported by advertising and book sales through affiliated partners.

V

Ville de Vandœuvre

vandoeuvre.net

52

The website www.vandoeuvre.fr serves as the official digital presence of the city of Vandœuvre in France, providing residents and visitors with access to city news, event agendas, and a variety of public services including online administrative procedures. The site is positioned as a municipal government portal with a medium-sized audience primarily localized to the city and surrounding region. The content is well-structured, professionally presented, and consistent with official city branding, targeting a general audience with information relevant to local governance and community engagement. Technically, the site is built on WordPress CMS, utilizing common plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The technology stack includes modern JavaScript libraries and UI frameworks, ensuring a good user experience with mobile responsiveness and moderate performance. However, some accessibility features could be improved, and security headers are not explicitly detected in the provided data. From a security standpoint, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism, reflecting awareness of privacy regulations. No critical vulnerabilities or exposed sensitive data were identified in the HTML content. However, the absence of a published privacy policy, terms of service, and security incident contact information represents compliance and transparency gaps. The WHOIS data for the domain is unavailable, which reduces trust signals but may be due to AFNIC's query restrictions or privacy protections. Overall, the website demonstrates a solid foundation for municipal digital services with good content quality and technical implementation. Strategic improvements in security headers, privacy documentation, and WHOIS transparency would enhance trust and compliance. The risk profile is moderate with no immediate critical issues detected.

V

Vodovod i kanalizacija d.o.o. Ogulin

vodovod-ogulin.hr

43

Vodovod i kanalizacija d.o.o. Ogulin is a local public utility company providing potable water supply and sewage services to the Ogulin region in Croatia. The company emphasizes quality water provision, environmental protection, and customer satisfaction. The website serves as an information portal for consumers, offering news, service information, and contact options. The business operates in the energy sector with a small company size and targets local residents and water consumers. Technically, the website is built on WordPress using common plugins and libraries such as jQuery, Bootstrap, and Google reCAPTCHA. It features accessibility tools and is mobile optimized, providing a good user experience. However, the site lacks some advanced SEO and security configurations, such as security headers and detailed privacy policies. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. Google reCAPTCHA is used to protect forms from abuse. However, there is no published security or incident response policy, and the domain registration uses privacy protection, which reduces transparency. No critical vulnerabilities or malicious content were detected. Overall, the website is functional, professional, and trustworthy for its purpose but would benefit from enhanced privacy disclosures, security headers, and transparency in domain registration to improve trust and compliance.

H

HOSTING CENTAR d.o.o.

moj-film.hr

43

Moj Film is a Croatian film portal established in 2011, providing comprehensive film-related content including news, reviews, trailers, cinema programs, and community forums. It targets a general audience interested in Croatian and international cinema, positioning itself as a regional media portal with consistent branding and regular content updates. The business model revolves around media content delivery and community engagement within the film industry niche. Technically, the website uses a mix of older and moderately modern web technologies such as jQuery 1.7.1, RoyalSlider, Owl Carousel, and Flowplayer 5, hosted by HOSTING CENTAR d.o.o. The site shows moderate performance and basic mobile optimization with good SEO practices.

K

Krajská hygienická stanice Moravskoslezského kraje se sídlem v Ostravě

khsova.cz

50

Krajská hygienická stanice Moravskoslezského kraje se sídlem v Ostravě is a regional governmental public health authority responsible for health supervision, epidemiological monitoring, and public health support in the Moravian-Silesian region of the Czech Republic. The website serves as an official portal providing information, updates, and contact details to the public and stakeholders. It maintains a consistent and professional presence with regular updates and official publications. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and the Nette framework, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS assumed but lacks explicit security headers and published security policies. Privacy compliance is partial with a clear privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and credible, reflecting its governmental nature.

H

Heroina | Samo još jedna WordPress web-stranica

heroina.hr

39

Heroina.hr is a small-scale WordPress website primarily using the Brooklyn theme by United Themes. The site appears to be a minimal or placeholder site with very limited business content, no privacy or cookie policies, and no contact information. The technical infrastructure is based on WordPress with multiple JavaScript libraries and plugins, indicating a moderate level of digital maturity but lacking in SEO and accessibility optimizations. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance measures. Overall, the site presents a low-risk profile but lacks professionalism and trust indicators, limiting its business credibility.

Eesti Lasterikaste Perede Liit is a reputable Estonian non-profit organization dedicated to advocating for large families with three or more children. The organization operates a well-structured website built on WordPress with WooCommerce integration, providing information about their activities, events, and support services. The site demonstrates a solid digital presence with modern technologies and SEO optimization, targeting families and member organizations in Estonia. Security posture is good with HTTPS and no visible vulnerabilities, though additional security headers and policies could enhance protection. Privacy compliance is lacking as no privacy or cookie policies were found, which is a notable gap for GDPR adherence. Overall, the website is professional, content-rich, and trustworthy, serving its community effectively.

Focus Nerez is a specialized professional magazine dedicated to stainless and corrosion-resistant steels, targeting industry professionals and businesses in the manufacturing sector. The website provides news, technical articles, e-paper subscriptions, and advertising opportunities, positioning itself as a niche media outlet within the Czech Republic and neighboring regions. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, offering a responsive and user-friendly experience. However, some technical improvements are needed, particularly in security headers and cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure appear professional and trustworthy. Overall, the site demonstrates a moderate level of digital maturity with room for security and compliance enhancements.

P

Získejte svobodu nad energií | parc4u

parc4u.cz

66

The website parc4u.cz is a Czech energy service platform focused on simplifying the process of switching energy suppliers for electricity and gas. Founded around 2019, it targets general consumers in the Czech Republic seeking fair energy prices without hidden fees. The site offers services that reduce paperwork and physical visits to offices, positioning itself as a convenient digital solution in the energy sector. Technically, the website employs modern JavaScript frameworks, likely Angular, and integrates analytics tools such as Google Tag Manager and a proprietary SAnalytics system. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers or policies are detected, and no privacy or cookie policies are found, indicating gaps in compliance. The domain registration is consistent with the business age and sector, supporting legitimacy. Overall, the site is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

N

Nuvia Group

nuvia.com

62

Nuvia Group is an international company specializing in nuclear technology, offering a comprehensive range of services including engineering, EPC, services and works, and products. The company operates under the parent company Vinci Construction Group, positioning itself as a key player in heavily regulated environments such as nuclear, healthcare, defense, and industrial sectors. The website reflects a professional and consistent brand image targeting business clients and professionals in these industries. Technically, the website is built on WordPress with modern libraries such as jQuery, Owl Carousel, and Leaflet, and integrates privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers are not detected and no explicit security policy or incident response information is published. The absence of WHOIS data for the domain is a notable gap, reducing transparency and trust slightly. Overall, the website is well-designed, compliant with privacy regulations, and safe for general audiences.

S

Samtök sveitarfélaga á Norðurlandi vestra

ssnv.is

63

Samtök sveitarfélaga á Norðurlandi vestra is a regional association representing municipalities in Northwestern Iceland. The organization focuses on regional development, innovation, funding, and local governance support. Their website provides news, resources, and information targeted at local government officials and community stakeholders. The site is well-structured, professionally designed, and regularly updated, reflecting a credible and active regional government entity. Technically, the website is built on the Moya CMS framework and uses legacy but stable JavaScript libraries such as jQuery 1.11.1 and jQuery UI 1.11.2. The site is mobile-optimized and has good SEO practices, though performance is moderate. Security posture is adequate with HTTPS usage implied, but lacks explicit security headers and cookie consent mechanisms, which are recommended for compliance and protection. Security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of WHOIS data and security policies reduces overall trust slightly. The website does not employ tracking or advertising scripts, indicating a privacy-conscious approach. Contact information is transparent and includes email, phone, and physical address, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and content quality. Strategic improvements in security headers, cookie consent, and WHOIS transparency would enhance trust and compliance.

F

Finby

trustpay.sk

11

Finby is a Slovak-based payment gateway provider specializing in localized payment methods for European e-commerce businesses. The company offers a broad range of payment solutions including card payments, local payment methods, and instant bank transfers, supported by a merchant portal and API integration. The website is professionally designed, mobile-optimized, and provides comprehensive GDPR-compliant privacy and cookie policies. Technically, the site is built on WordPress with modern plugins and hosted on Microsoft Azure DNS, ensuring good performance and reliability. Security posture is strong with HTTPS enforced and PCI DSS certification displayed, although explicit security headers and incident response information are not publicly available. Overall, Finby presents as a credible and trustworthy payment service provider with a clear market focus and solid technical infrastructure.

E

European Diamond Capacity Hub (EDCH)

diamas.org

52

The European Diamond Capacity Hub (EDCH) is a newly established collective focused on supporting Diamond Open Access scholarly publishing in Europe. It provides a range of services including a registry and forum for community collaboration, training platforms, resources and guidelines, and quality assurance tools. The initiative is part of the OPERAS program and funded by the European Union, positioning it as a key regional player in the open access ecosystem. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility features. Privacy compliance is well addressed with GDPR-compliant cookie consent management and clear policies. Security posture is solid with HTTPS and domain management best practices, though DNSSEC is not enabled and security headers are not detected. Overall, the site is trustworthy, informative, and well-aligned with its mission.

M

MEVA-SK s.r.o. Rožňava

meva.sk

41

MEVA-SK s.r.o. Rožňava is a Slovakian company specializing in the sale of waste containers, storage solutions, workshop equipment, municipal supplies, home and garden products, and propane-butane appliances. The company operates a well-structured e-commerce website with multiple sister sites targeting regional markets in Central and Eastern Europe. Their business model combines B2B and B2C sales, serving municipalities, businesses, and individual consumers. The website demonstrates a good level of digital maturity with modern tracking and analytics tools integrated alongside GDPR-compliant cookie consent mechanisms. The presence of ISO certifications and detailed legal documents further enhance their credibility.

A

ASEKOL SK s.r.o.

asekol.sk

62

ASEKOL SK s.r.o. is a Slovak authorized organization specializing in extended producer responsibility and waste management services, focusing on electrical equipment, batteries, packaging, and non-packaging waste. With over 14 years of experience, ASEKOL SK holds a strong market position in Slovakia and is expanding its compliance services to Germany. The website reflects a mature digital presence built on WordPress, integrating modern analytics and cookie consent mechanisms to ensure GDPR compliance. Security posture is solid with HTTPS and privacy-focused cookie management, though opportunities exist to enhance security headers and incident response transparency. Overall, ASEKOL SK demonstrates a trustworthy and professional online presence aligned with its business objectives.

C

Capexus

capexus.sk

54

Capexus SK is a Slovak company specializing in custom commercial interior design and build services. Operating since 2011 and part of the Esco Slovensko group, it offers a comprehensive portfolio including architecture, workplace consultancy, acoustics, building technologies, and project documentation. The company has a strong market presence, evidenced by awards such as the Office Roka 2022 for Healthy Office. The website reflects a mature digital infrastructure built on WordPress with modern technologies and performance optimizations. Security posture is solid with HTTPS, DNSSEC, and best practices in place, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site projects professionalism, trustworthiness, and business credibility.

M

Marketing Art

marketingart.sk

53

Marketing Art is a Slovak online marketing agency specializing in web development, e-commerce solutions, online marketing, and corporate identity services. Established in 2012 and based in Trenčín, the company targets small and medium-sized businesses seeking to enhance their online presence and customer acquisition. Their website demonstrates a professional and consistent brand image supported by client testimonials and a detailed portfolio. Technically, the site is built on WordPress with modern plugins and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Smartlook. The site is GDPR compliant with a comprehensive privacy and cookie policy and employs a consent mechanism. Security posture is good with HTTPS enabled and anti-spam measures in place, though some security headers could be improved. Overall, the website is well-designed, user-friendly, and trustworthy, reflecting a mature digital presence.

A

Ace IT s.r.o.

aceit.cz

53

Ace IT s.r.o. is a Czech-based technology company specializing in the creation of custom web projects, including websites, e-shops, and online applications, with a strong focus on quality and client-centric services since 2008. The company positions itself as a boutique agency delivering tailored solutions with an emphasis on performance and user experience. Their service portfolio includes web development, online marketing, hosting, and IT outsourcing, targeting businesses seeking professional digital presence and marketing support. Technically, the website demonstrates a mature digital infrastructure using modern frameworks such as Nette and Node.js, along with front-end technologies like Bootstrap and Google Fonts. The site is well-optimized for performance and mobile responsiveness, employs HTTPS with strong SSL configuration, and integrates advanced cookie consent management and CAPTCHA for form security, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS, uses Cloudflare Turnstile CAPTCHA to mitigate spam, and provides a detailed cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS transparency and lack of explicit security policies or incident response contacts represent areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital front with solid privacy compliance and security practices. The main risk lies in the missing WHOIS data, which slightly impacts domain trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility features to further strengthen the security posture and compliance.

D

Diamond Experts

rezani-vrtani.cz

52

Diamond Experts is a specialized service provider in the Czech Republic focusing on core drilling and concrete cutting services. With over 25 years of experience, the company serves both businesses and households primarily in Prague and the surrounding regions. Their offerings include a wide range of concrete-related services such as wall saw cutting, joint cutting, chemical anchoring, and structural reinforcement. The website reflects a mature business with clear contact information, certifications, and customer testimonials that enhance trust and credibility. Technically, the site employs modern JavaScript libraries and Google services for analytics and advertising, with a cookie consent mechanism that aligns with GDPR requirements. Security measures include the use of hCaptcha for bot protection, but there is room for improvement in security headers and incident response transparency. Overall, the website is professional, well-structured, and trustworthy, supporting the company's market position as a local expert in construction services.

T

Tours City Pass

tourscitypass.com

65

Tours City Pass is a small-sized tourism-focused business founded in 2020, offering digital city passes and related tourism packages for visitors to Tours, France. The website serves as an e-commerce platform enabling users to purchase passes, access interactive maps, and benefit from discounts and cultural offers. The business is positioned as a local tourism enabler with a clear target audience of tourists and visitors seeking cultural and leisure activities in the Tours metropolitan area. The parent company is Otipass, which provides the technological platform and payment processing services. Technically, the website employs a modern technology stack including Bootstrap, jQuery, React, and various analytics and tracking tools such as Matomo and Facebook Pixel. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates cookie consent mechanisms compliant with GDPR. However, some security headers are missing, and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site demonstrates good practices such as encrypted communications, cookie consent, and no visible sensitive data exposure. There is no evidence of a published security policy or incident response plan, and no vulnerability disclosure mechanism is present. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s founding date and no privacy protection, which supports transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with moderate technical sophistication and a solid security posture. Recommendations include enhancing security headers, enabling DNSSEC, and publishing formal security and incident response policies to further strengthen trust and compliance.

V

Ville de Vandœuvre

vandoeuvre.fr

52

The website www.vandoeuvre.fr serves as the official digital presence for the city of Vandœuvre-les-Nancy in France, providing residents and visitors with access to municipal news, event agendas, and a variety of online administrative services. The site targets a broad audience including families, seniors, students, and local businesses, positioning itself as a comprehensive resource for community engagement and public service delivery. The business model is typical of government websites, focusing on information dissemination and facilitating citizen interactions with municipal services. Technically, the site is built on WordPress CMS, leveraging popular plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The inclusion of libraries like jQuery, PhotoSwipe, and Leaflet indicates a moderately modern tech stack aimed at enhancing user experience with interactive elements such as maps and image galleries. The site demonstrates good mobile optimization and accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles, allowing users granular control over tracking. However, the absence of explicit security headers and lack of visible privacy policy or terms of service pages represent areas for improvement. The WHOIS data is notably missing, which is unusual for an official municipal domain and slightly detracts from the domain's trustworthiness. Overall, the site is a well-structured, professional municipal portal with solid technical foundations and a focus on user privacy. Strategic enhancements in security policy transparency and domain registration clarity would further strengthen its credibility and compliance posture.

M

MENTOR im LitWIT e.V.

mentor-litwit.de

45

MENTOR im LitWIT e.V. is a small non-profit organization based in Witten, Germany, dedicated to improving children's reading and language skills through volunteer mentoring. The website is built on Joomla CMS with modern frontend technologies like Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and CSRF protections, though security headers are not explicitly detected. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy. The organization is transparent with contact details and affiliations, enhancing trustworthiness. No critical security or content safety issues were found.

L

Landesverkehrsgesellschaft Niedersachsen mbH (LNVG)

mobilotsin-niedersachsen.de

43

MOBILOTSIN is a regional initiative under the Landesverkehrsgesellschaft Niedersachsen mbH (LNVG) focused on supporting municipalities and counties in Lower Saxony, Germany, with innovative mobility concepts and the traffic transition. The website presents a professional and consistent brand image, offering services such as consulting, qualification courses, and events. The target audience primarily includes local government entities and stakeholders involved in mobility management. The digital infrastructure is built on the ProcessWire CMS with modern JavaScript libraries enhancing user experience. The site is mobile-optimized and well-structured, providing clear navigation and relevant content including event listings and newsletter subscription. From a security perspective, the website uses HTTPS and does not expose sensitive data in the HTML content. However, there is no evidence of advanced security headers or published security policies, and no cookie consent mechanism is present, which could be improved for better compliance. No analytics or tracking scripts were detected, indicating minimal user tracking. Contact information is clearly provided, enhancing business credibility. WHOIS data shows consistent domain registration with no privacy protection, aligning with the website's governmental affiliation. Overall, the website demonstrates a solid technical foundation and business credibility with room for improvement in privacy compliance and security best practices. The content is safe and appropriate for a general audience, with no adult or questionable material detected.

J

Jasněna Vláhová s.r.o.

vlahova.cz

53

Jasněna Vláhová s.r.o. operates the website vlahova.cz, a well-established Czech family business specializing in the design and distribution of watches, clocks, and jewelry products across Europe. The company has a strong retail presence with nearly two thousand stores supplied and offers a variety of collections targeting women, men, and children. The website reflects a professional e-commerce platform with clear navigation, product showcases, and marketing integrations. Technically, the site uses a combination of jQuery, Alpine.js, and other modern JavaScript libraries, supported by Google Tag Manager and Facebook Pixel for analytics and marketing. Security measures include HTTPS enforcement and cookie consent mechanisms, although explicit security headers and incident response information are not publicly detailed. Overall, the site demonstrates a mature digital presence aligned with its business operations.

N

Nadační fond Čas je mozek

casjemozek.cz

44

The website www.casjemozek.cz represents a Czech non-profit initiative named 'Čas je mozek' focused on educating the public about stroke symptoms, prevention, and treatment. Founded in 2015, it is affiliated with reputable Czech medical societies, providing authoritative content and organizing charitable events. The site offers extensive educational resources, patient stories, and news updates, targeting the general public and healthcare professionals in the Czech Republic. Technically, the site uses modern web technologies including JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS domain registration data, slightly reduce its trustworthiness. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and incident response contacts. Overall, the site is a credible and valuable resource for stroke awareness but would benefit from enhanced transparency and security best practices.

C

Centous Solutions

techdignity.com

57

Centous Solutions is a small, India-based company specializing in developing Shopify apps aimed at enhancing e-commerce store performance, customer experience, and operational efficiency. Their portfolio includes apps for shipping protection, customer reviews, background music, product options, bulk image import, tagging, and inventory automation. The company also offers related services such as store setup, sales marketing, app installation, and troubleshooting. The website is built on WordPress and integrates modern technologies including Bootstrap, jQuery, and Google Tag Manager, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in the Shopify app niche.

The website represents the Zväz cestovného ruchu Slovenskej republiky, a Slovak voluntary organization of employers in the tourism sector. It focuses on protecting and promoting the interests of its members, advocating for sustainable tourism development, regulatory frameworks, and workforce innovation. The organization targets tourism businesses, government bodies, and stakeholders in Slovakia. Technically, the site is built on WordPress with Elementor, using common plugins and libraries, hosted by Websupport. The site is moderately performant, mobile-optimized, and SEO-friendly but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, reflecting a legitimate organization with a stable online presence.

JSB stavební is a small family-owned construction company operating primarily in Prague and the Central Bohemian region since 2016. The company specializes in comprehensive renovations of apartments, family houses, and offices, as well as the construction of smaller commercial projects and family homes. Their website presents a professional image with clear service descriptions and galleries showcasing completed projects, targeting local residential and commercial clients. Technically, the website is built using standard web technologies including Bootstrap, jQuery, and Font Awesome, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS usage or hosting details. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site lacks HTTPS verification in the provided data, security headers, and privacy or cookie policies, indicating potential compliance and security gaps. The absence of WHOIS data limits domain legitimacy verification, although the website content and contact details appear consistent with a legitimate small business. Overall, the site is functional and informative but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

P

PACE-VET

pace-vet.eu

39

PACE-VET is an educational project focused on developing a digital platform for the recognition and validation of vocational competencies in the event technology sector. The website presents detailed project information, objectives, and schedules, targeting vocational learners, employers, and education providers. The platform aims to facilitate micro-credential certification to improve labor market adaptability. Technically, the website is built on WordPress with modern plugins and libraries, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

The website tavokraujas.lt represents the Vilniaus Universiteto Ligoninės Santaros Klinikų Kraujo centras, a major Lithuanian healthcare institution specializing in blood donation and transfusion services. The site provides comprehensive information about blood donation, donor registration, donor eligibility, and blood donation events. It serves as an important resource for potential donors and healthcare professionals in Lithuania. The business is well-positioned as a trusted healthcare provider with ISO 9001:2015 certification and affiliation with a leading university hospital. Technically, the website uses a variety of established JavaScript libraries and CSS frameworks such as jQuery, Bootstrap, and Owl Carousel to deliver a responsive and user-friendly experience. The site is mobile optimized and features multiple interactive forms for donor registration and event organization. However, there is no evidence of a CMS, and hosting details are not disclosed. From a security perspective, the website uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

I

Izzy Trading, s.r.o.

foxii.cz

39

FOXii is a specialized cloud-based service software targeting companies with field service operations, primarily in the Czech and Slovak markets. The platform enables digitalization of service workflows including planning, protocol creation, and technician tracking. The company behind FOXii, Izzy Trading, s.r.o., founded in 2019, presents a professional and consistent online presence with clear contact information and GDPR compliance. Technically, the website uses modern JavaScript libraries and cloud hosting on DigitalOcean, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers are missing. The site employs comprehensive cookie consent mechanisms and integrates multiple analytics and marketing tools with user consent.

I

INFO WEB s.r.o.

ladnafotografie.cz

49

LADNÁ FOTOGRAFIE is a small local photography studio based in Ladná near Břeclav, Czech Republic, specializing in portrait, still life, product, and other photographic services. The website serves as a professional portfolio showcasing various photographic works and targets local customers seeking photography services. The business is operated by INFO WEB s.r.o., founded in 2019, and maintains an active social media presence on Facebook and Instagram. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various plugins to deliver a visually appealing and responsive user experience. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is provided on the pages analyzed. Security posture is moderate with HTTPS assumed but no security headers detected, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.