Security Directory

S

Strichpunkt GmbH

strichpunkt.ch

46

Strichpunkt GmbH is a small Swiss agency specializing in graphic design, web design, and CMS programming based in Winterthur. The company offers services including branding, logo development, and visual communication strategy, targeting businesses seeking professional digital and print design solutions. Their website reflects a consistent brand image and showcases a portfolio of projects and satisfied customers, positioning them as a reputable local service provider. Technically, the website employs a modern but traditional tech stack centered around jQuery and related libraries, with custom CMS software. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No major performance bottlenecks or technical debt indicators are evident. From a security perspective, the site benefits from HTTPS and basic secure practices but lacks important security headers and published policies such as incident response or vulnerability disclosure. No cookie consent mechanism is present, which may pose GDPR compliance risks. No vulnerabilities or exposed sensitive data were detected, but improvements are recommended to enhance security posture and privacy compliance. Overall, the website is professional and trustworthy with a solid business foundation. Strategic enhancements in security policies, privacy compliance, and technical modernization would strengthen their digital maturity and reduce risk exposure.

Autotalli.com is a leading Finnish automotive marketplace operated by Alma Media Suomi Oy, offering used cars, new cars, and leasing options. The platform targets Finnish consumers and businesses seeking automotive sales and leasing services. The website features a professional design, rich content including automotive articles, and a comprehensive search functionality for vehicles. Technically, the site uses modern JavaScript libraries such as jQuery and Apache Wicket framework, with integrations for Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS enforced, though some security headers are missing. Privacy policies and cookie consent mechanisms are present and GDPR compliant. The absence of WHOIS data is noted but does not detract significantly from the site's legitimacy given the strong corporate backing. Overall, Autotalli.com presents a trustworthy and mature digital presence in the Finnish automotive sector.

M

msg Plaut

msg-plaut.com

51

msg Plaut is a Vienna-based corporate group specializing in business management consulting and industry-specific IT solutions, with a strong focus on SAP and Microsoft technologies. The company operates primarily in Austria, Central and Eastern Europe, and the CIS region, serving enterprise clients in finance, public sector, and manufacturing industries. As part of the larger msg Group, msg Plaut benefits from extensive expertise and a broad international presence. The website reflects a mature digital presence with detailed service offerings and a professional design. Technically, the site uses Joomla CMS with modern JavaScript libraries and includes a consent management platform for GDPR compliance. Security posture is good with HTTPS and bot protection, though some security headers and policies could be improved. The absence of WHOIS registration data is a concern and warrants further verification. Overall, the site is professional and trustworthy but would benefit from clearer privacy and security disclosures.

H

Hrvatski Telekom d.d.

regica.net

57

REGica.NET is an online domain registration and SSL certificate service operated under the brand of Hrvatski Telekom d.d., a major telecommunications company in Croatia. The website offers domain availability checks, domain registration, SSL certificate purchases, and web administration tools targeting ISPs, intellectual property providers, web designers, and end users. The platform is positioned as a regional service with a focus on Croatian and EU markets, providing fast and simple domain registration with bulk discounts. Technically, the website employs modern front-end technologies including Foundation CSS, jQuery, and integrates Google Tag Manager and SnapEngage chat for analytics and customer support. The site is mobile optimized and provides a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and secure forms but lacks explicit security headers and detailed security policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional presentation and clear corporate affiliation. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website is functional, professional, and trustworthy but would benefit from improved transparency in domain registration and enhanced security headers.

2

234 d.o.o.

234doo.com

53

234 d.o.o. is a Croatian company specializing in programmatic advertising services aimed at helping web publishers increase their ad revenue through efficient ad inventory management and advanced machine learning technologies. The company serves over 80 web publishers and connects them with leading programmatic advertising platforms such as Google Ad Exchange, IndexExchange, and OpenX. Their business model is performance-based, charging a percentage of the profit increase they generate for their clients. The website presents a professional image with clear business information, client logos, and detailed service descriptions targeting both publishers and advertisers in the Adriatic region and broader EU market. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, Font Awesome, and Animate.css, along with Google Analytics for visitor tracking and CookieYes for GDPR-compliant cookie consent management. The site is mobile-optimized with good navigation and content structure, though some accessibility features are basic. No CMS or hosting provider details are explicitly identified. Performance is moderate, with room for optimization. From a security perspective, the site employs HTTPS (assumed from external scripts and Google Analytics usage), but lacks visible security headers and explicit incident response or vulnerability disclosure policies. The cookie consent mechanism is robust and GDPR-compliant, offering users detailed control over cookie categories. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to GDPR privacy restrictions, but the business information on the site supports legitimacy. Overall, 234.hr is a credible and professional website representing a niche technology service provider with a solid market position in programmatic advertising. Security posture is adequate but could be improved with additional headers and policies. Privacy compliance is strong, and business credibility is high. The site is safe for general audiences with no adult or questionable content.

A

AdTech Lab

adtechlab.eu

50

AdTech Lab is a small but experienced startup founded in 2023, specializing in advertising technology solutions for digital media publishers and brands in Southeast Europe. Their services include yield management, product development, and strategic analytics, aiming to modernize and educate the regional adtech market. The website is built on WordPress with Elementor and related plugins, showing good technical maturity and SEO optimization. Security posture is solid with HTTPS and cookie consent, though lacking advanced security headers and explicit security policies. Overall, the site is professional and trustworthy with clear business focus but could improve transparency on security and incident response.

Midas Network is a technology company specializing in content discovery and advertising monetization services. Established in 2016, it targets publishers, advertisers, and content creators seeking to optimize content distribution and revenue generation. The website reflects a niche market position with a focus on digital advertising technologies and content optimization. Technically, the site employs modern web technologies such as Bootstrap for responsive design, Google Tag Manager for analytics, and Cookiebot for privacy compliance, indicating a moderate level of digital maturity. Security-wise, the site benefits from HTTPS, Google reCAPTCHA, and cookie consent mechanisms, but lacks advanced DNS security features like DNSSEC and does not publicly disclose incident response or vulnerability disclosure policies. Overall, the website is accessible, professionally designed, and compliant with GDPR cookie consent requirements, but could improve in transparency and security best practices.

A

Aklamator

aklamator.com

63

Aklamator is a digital PR and advertising platform founded in 2014, offering services that enable publishers and advertisers to buy and sell PR announcements, cross-promote websites via widgets, and utilize digital advertising tools such as popup and video float widgets. The platform targets digital marketers, website owners, and agencies seeking to boost web traffic and monetize content through innovative widget-based solutions. The website demonstrates a consistent brand presence with a professional design and clear navigation, supporting its niche market position in the technology and media sectors. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates with Google Analytics and Tag Manager for tracking. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. The site is mobile-optimized and uses WordPress plugins to extend functionality, indicating a moderate level of digital maturity. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks explicit security headers and cookie consent mechanisms, which are important for compliance and security best practices. No direct contact emails or phone numbers are provided, limiting immediate communication channels. There is no published security policy or incident response information, which could be improved to enhance trust. Overall, the website is safe, professional, and functional with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy compliance, and contact transparency would strengthen its risk profile and user trust.

H

Handelskammer beider Basel

hkbb.ch

49

Handelskammer beider Basel is a prominent bi-cantonal economic chamber serving the Basel region in Switzerland. It acts as a voice and catalyst for regional economic development, supporting over 2,100 members with advocacy, consulting, networking, and educational services. The organization focuses on key sectors such as energy, transport, and government-related economic activities, positioning itself as a leading regional economic association. The website reflects a professional and comprehensive digital presence, offering detailed information on services, cluster initiatives, export/import support, and events.

C

CSF Computer Solutions Facility AG

csf.ch

54

CSF Computer Solutions Facility AG is a Swiss-based IT service provider specializing in comprehensive IT outsourcing, client management, cloud services, and IT security solutions. With over 30 years of experience and ISO 27001 certification, the company targets small and medium enterprises, medical practices, and freelancers, offering tailored IT packages and professional support. Their market position is solid within the Swiss IT services sector, supported by customer testimonials and quality seals. Technically, the website is built on the concrete5 CMS platform using Bootstrap and jQuery, delivering a responsive and modern user experience. The site integrates multiple marketing and analytics tools such as Google Analytics, LinkedIn Insight, Hotjar, and Poptin, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility could be improved. From a security perspective, the company demonstrates strong commitment through ISO 27001 certification and HTTPS enforcement. However, the absence of explicit privacy and cookie policies, security headers, and incident response contact details suggests room for improvement in compliance and transparency. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-positioned in its market niche. Strategic enhancements in privacy compliance, security headers, and incident response disclosures would further strengthen its security posture and user trust.

Virtual Valley, operated by Alma Career Croatia d.o.o., is a technology company specializing in virtual fair platforms that enable businesses to conduct online fairs with features such as user-friendly backend, multilingual support, gamification, and live chat. The company targets event organizers and businesses seeking to transition physical fairs to virtual environments, offering flexible pricing models including fixed price, shared revenue partnerships, and custom solutions. The website presents a professional and consistent brand image with clear business information and contact details, positioning itself as an established player with over 100 companies served and significant visitor reach. Technically, the website leverages modern frontend technologies including Bootstrap, jQuery, Font Awesome, and Google Fonts, with analytics and tag management via Google Analytics and Google Tag Manager. Hosting and DNS services are provided through Cloudflare and PublicDomainRegistry.com. The site is mobile optimized and offers a good user experience, though accessibility and SEO optimizations are basic. No CMS was detected, indicating a custom or static site approach. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The contact form collects personal data but lacks visible privacy disclosures. No incident response or vulnerability disclosure information is provided. Overall, the website is functional and professional but would benefit from enhanced security configurations and privacy compliance measures to improve trust and regulatory adherence.

S

SEWOBE GmbH

sewobe.de

62

SEWOBE GmbH is a German-based technology company specializing in providing online software solutions for member organizations, such as associations and clubs. Their SaaS platform focuses on membership management and digital transformation, targeting German-speaking markets. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to their niche audience. The company maintains a consistent brand presence and offers multiple contact channels including email, phone, and contact forms. Privacy and cookie policies are comprehensive and GDPR-compliant, reflecting a mature approach to data protection. Technically, the website is built on WordPress with modern tools such as Yoast SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting appears to be with 1&1 IONOS, supported by stable DNS infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is strong with HTTPS enforced and multiple security headers present, although no explicit security policy or incident response information is published. No vulnerabilities or suspicious domains were detected. Overall, SEWOBE demonstrates a solid digital maturity with a secure and compliant web presence. The absence of a public security policy and vulnerability disclosure are areas for improvement. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The website content is safe for general audiences and free from adult or questionable material.

N

NAF-MEDIA

naf-media.hr

40

NAF-MEDIA is a Croatian company specializing in outdoor advertising, offering both digital (DOOH) and traditional (OOH) large format advertising spaces primarily in key urban locations such as Split and Zagreb. The company targets businesses and advertisers seeking to leverage outdoor media for marketing purposes. The website is built on WordPress using common plugins and themes, indicating a standard CMS infrastructure with moderate digital maturity. The site is accessible, mobile-optimized, and presents its advertising locations clearly with visual content and embedded video. Security posture is basic with HTTPS enabled but lacks advanced security headers and public security policies. Privacy compliance is minimal with no visible privacy or cookie policies, which is a compliance risk. Overall, the website is professional and functional but could improve in transparency and security practices.

M

Media Marketing

media-marketing.com

61

Media Marketing is an online media publishing platform focused on delivering the latest news, interviews, and insights related to media, communications, marketing, and advertising across Bosnia and Herzegovina and the broader Adriatic region. The website positions itself as a leading source of industry news for marketing professionals and stakeholders in the region. Technically, the site is built on WordPress with modern web technologies including jQuery, Google Tag Manager, and OneSignal for push notifications. The site is mobile optimized and employs caching plugins to enhance performance. Security-wise, the site enforces HTTPS and uses some security-related scripts, but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is unavailable, which reduces transparency and trust, though the active and professional web presence suggests legitimate operation. Overall, the site is a valuable resource for its target audience but should enhance its privacy disclosures and security posture to improve trust and compliance.

L

Led Media

ledmedia.ba

49

Led Media is a leading digital outdoor advertising company operating in Bosnia and Herzegovina, offering digital advertising services primarily targeting local businesses and advertisers. The website is built on WordPress using Elementor, indicating a modern and maintainable technical infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

A

ADLUUX

adluux.com

62

The website 'ADLUUX' appears to be a small-scale business or service entity established around 2019, as indicated by the domain registration date. The site uses modern web technologies such as Bootstrap 4 for styling and Google Analytics for visitor tracking, hosted under Amazon Registrar, Inc. The content available is minimal and primarily technical, lacking detailed business descriptions, contact information, or privacy and terms policies. The cookie consent mechanism is implemented, indicating some attention to privacy compliance, though no explicit privacy policy is found. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers, which are recommended for enhanced protection. Overall, the site is accessible without WAF or security challenges, but the lack of comprehensive content and contact details limits its business credibility and privacy compliance scores.

U

UNIP

unip.hr

43

UNIP is a Croatian association established in 2022 to promote and protect the rights of publishers of informational publications. It focuses on collective rights management, advocacy, and professional development within the media sector. The website reflects a small but professional organization targeting media publishers and related legal entities in Croatia. Technically, the site is built on WordPress with Elementor, using modern web technologies and SEO best practices. Security posture is solid with HTTPS and cookie consent implemented, though it lacks explicit security policies and headers. Overall, the site is trustworthy and well-aligned with its stated business purpose.

The website cmsimpleforum.com serves as a community forum dedicated to CMSimple_XH, an open source content management system. It provides a platform for users and developers to discuss general topics, security, installation, development, and third-party plugins related to CMSimple_XH. The forum is powered by phpBB software and hosts a significant volume of posts and active members, indicating a well-established community presence since its domain registration in 2008. The site targets CMSimple_XH users and developers globally, offering multilingual support forums and resources. Technically, the site uses standard web technologies including jQuery and Font Awesome, with moderate performance and good mobile optimization. However, there is no evidence of advanced security headers or cookie consent mechanisms, and DNSSEC is not enabled, which suggests room for improvement in security posture. Privacy compliance is basic, with a privacy policy page present but no cookie banner or GDPR explicit indicators. Contact information is limited to a forum contact form, with no direct emails or phone numbers publicly listed. Overall, the site is a niche community resource with moderate technical maturity and security practices.

A

Anoxinon e.V.

anoxinon.de

67

Anoxinon e.V. is a small non-profit organization based in Germany dedicated to promoting data privacy and free software. The organization provides community-oriented digital services including a social network (Anoxinon Social), a blog focused on data security and free software (Anoxinon Media), and a privacy-friendly messaging service based on the Jabber/XMPP standard (Anoxinon Messenger). Their mission emphasizes fostering a collaborative and privacy-respecting digital world. The website is well-structured, primarily in German, and targets users interested in privacy, free software, and community-driven internet services. Technically, the website is built using the Hugo static site generator, leveraging Bootstrap for layout and Fork Awesome for icons. Hosting is provided by servercow, as indicated by the nameservers. The site is mobile-optimized with good SEO practices and moderate performance. No advanced CMS or complex frameworks are detected, reflecting a straightforward and maintainable technical infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide explicit security or incident response policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. No analytics or tracking scripts are detected, indicating a privacy-respecting approach. The absence of vulnerability disclosure or security.txt files suggests room for improvement in transparency and security maturity. Overall, Anoxinon e.V. presents a trustworthy and professional online presence consistent with its non-profit mission. The website is safe for general audiences, free of adult or questionable content, and demonstrates a solid foundation in privacy and community values. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance their security posture and compliance standing.

K

KickFire

kickfire.com

69

KickFire is a B2B technology company specializing in first-party intent data to help sales and marketing teams identify and engage in-market buyers. The company positions itself as a leader in B2B intent data and is now part of Foundry, a larger parent organization. Their services focus on uncovering website visitors who do not fill out forms, thereby tapping into an 'Invisible Pipeline' to increase sales pipeline and revenue. The website is professionally designed, mobile-optimized, and built on the HubSpot CMS platform, integrating modern marketing and analytics tools such as Google Analytics and Facebook Pixel. Privacy and cookie policies are present and indicate GDPR compliance, with a clear cookie consent mechanism implemented. However, the absence of WHOIS data for the domain raises concerns about domain transparency and trustworthiness, although the website content and parent company association mitigate some of these concerns. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and dedicated security policy pages. Overall, the website demonstrates a mature digital presence suitable for its B2B audience but would benefit from improved domain registration transparency and enhanced security practices.

The Discover LBJ website serves as the official digital archive for the Lyndon B. Johnson Presidential Library, providing access to a wide range of archival collections, digitized materials, and research resources. It targets researchers, historians, students, and the general public interested in presidential history and LBJ's legacy. The site is government-operated under the National Archives and Records Administration, positioning it as a trusted and authoritative source in its niche. Technically, the website is built on Drupal CMS with modern integrations such as React and Gutenberg editor components. It leverages Cloudflare for DNS and likely CDN services, ensuring moderate performance and good mobile responsiveness. Accessibility and SEO optimizations are well implemented, contributing to a positive user experience. From a security standpoint, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and a formal security policy or incident response contact, which are areas for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Analytics usage includes Google Analytics and Tag Manager, indicating moderate user tracking. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in security and privacy compliance that, if addressed, would enhance its posture and user trust.

O

Occupational Safety and Health Administration

osha.gov

66

The Occupational Safety and Health Administration (OSHA) is a U.S. federal government agency under the Department of Labor dedicated to ensuring safe and healthy working conditions by setting and enforcing standards and providing training, outreach, education, and assistance. The website serves as a comprehensive resource for employers, workers, and safety professionals, offering regulatory information, enforcement data, training resources, and contact channels. It holds a strong market position as the authoritative source for occupational safety and health in the United States. Technically, the website is built on Drupal 10 with modern frameworks such as Bootstrap and integrates Google services for analytics and translation. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate likely due to the extensive content and third-party integrations. The site uses HTTPS with strong SSL configuration and includes security headers, but could enhance security posture by adding more explicit headers and publishing vulnerability disclosure information. Security-wise, OSHA's website shows a mature security posture with no visible vulnerabilities or exposed sensitive data. However, it lacks a cookie consent mechanism and explicit incident response contact information, which are areas for improvement to align with privacy regulations and best practices. The WHOIS data is unavailable, which is typical for government .gov domains, but the domain's legitimacy is strongly supported by official branding and consistent government affiliation. Overall, the website is professional, trustworthy, and well-maintained, serving its public service mission effectively. Strategic recommendations include implementing cookie consent, publishing security policies and incident response contacts, and enhancing security headers to further strengthen trust and compliance.

The AHLA Foundation is a non-profit organization focused on strengthening the American hotel and lodging industry workforce through scholarships, training programs, mentorship, and anti-trafficking initiatives. The website presents a professional and content-rich platform targeting hospitality workers, donors, and industry partners. It offers clear navigation, donation mechanisms, and highlights partnerships with reputable organizations. Technically, the site uses WordPress CMS with common libraries such as jQuery and Font Awesome, and integrates analytics and monitoring tools like Google Tag Manager, Microsoft Clarity, and New Relic. Security posture is good with HTTPS and security headers implemented, though cookie consent mechanisms and explicit security policies are lacking. The absence of WHOIS data limits domain trust assessment but the overall digital presence supports legitimacy.

I

International Arctic Science Committee

iasc.info

56

The International Arctic Science Committee (IASC) is a non-governmental organization dedicated to fostering international cooperation in Arctic research. The website serves as a hub for Arctic scientists, policymakers, and stakeholders, providing information on working groups, capacity building programs, events, and news related to Arctic science. The organization positions itself as a key facilitator in Arctic research collaboration, with a focus on scientific advancement and community engagement. Technically, the website is built on Joomla CMS with modern front-end technologies including Bootstrap and jQuery. It employs HTTPS with good SSL configuration and uses Google Analytics for visitor tracking. The site is mobile-optimized and features a professional design with clear navigation, although accessibility features could be improved. The presence of CSRF tokens in forms indicates attention to security in user input handling. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide publicly accessible security policies or incident response information. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which is a notable gap given GDPR requirements. The WHOIS data is privacy protected, which is typical for NGOs, and does not raise immediate concerns. Overall, the website is trustworthy and professional, serving its niche audience effectively. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and regulatory adherence.

J

Jedes Alter zählt

jedesalter.ch

54

The website 'Jedes Alter zählt' is a German-language site likely focused on community or educational content, as suggested by the presence of the Edwiser Bridge plugin which integrates Moodle LMS with WordPress. The site uses WordPress CMS with the Astra theme, indicating a standard and modern technical infrastructure. However, the content is minimal with no explicit business descriptions, contact information, or privacy and security policies, which limits the ability to fully assess the business model or market position. Technically, the site is moderately optimized for mobile and uses common web technologies but lacks advanced SEO and accessibility features. Security posture is weak due to absence of security headers and policies, and the domain WHOIS is privacy protected, reducing transparency. Overall, the site appears to be a small-scale or community-oriented platform with room for improvement in compliance, security, and business transparency.

T

T3CH.com LLC

status.io

63

Status.io, operated by T3CH.com LLC, is a mature SaaS provider specializing in hosted system status pages for applications, web services, and developer APIs. Founded in 2011 and based in the US, the company offers a customizable platform with incident tracking, subscriber notifications, and extensive integrations, positioning itself as a transparent and developer-friendly market player. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site leverages modern web technologies including jQuery, Bootstrap, and Google Analytics, hosted on AWS infrastructure. The platform demonstrates good performance, mobile optimization, and SEO practices. Security measures include HTTPS enforcement, security headers, and client transfer protection on the domain, although DNSSEC is not enabled. Security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the site lacks explicit security policy documentation and vulnerability disclosure channels, which could enhance trust further. Overall, Status.io presents a low-risk profile with a solid technical foundation and business credibility. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to strengthen security transparency and compliance.

4

404 d.o.o.

somoborac.com

44

SoMo Borac is a well-established digital media event and conference organized by 404 d.o.o., focusing on digital awards and industry trends in the Croatian and regional market. The website presents a professional and consistent brand image, targeting digital professionals and stakeholders. The technical infrastructure is based on WordPress with modern front-end libraries and analytics tools, supporting multilingual content and good mobile responsiveness. Security posture is adequate with HTTPS and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, but terms of service and security policies are absent. Overall, the site is trustworthy and professionally maintained, with strong industry partnerships and media presence.

V

VanTosh

vantosh.com

64

VanTosh is an IT managed services and solutions provider specializing in digital transformation through automation and open source technologies. The company offers a broad portfolio including managed IT services, cloud solutions, hosting, training, and specialized solutions such as Icinga services and DevOps. The website reflects a niche market position targeting business and industrial clients seeking innovative IT infrastructure and service management. Technically, the site is built using the Hugo static site generator with modern frontend libraries like Bootstrap and jQuery, hosted by OVH sas. The site performs moderately well with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and domain status protections, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is basic with privacy and cookie policies present but no consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

T

Trust Alliance New Zealand

trustalliance.co.nz

43

Trust Alliance New Zealand operates as a membership consortium focused on creating a trusted and verifiable data sharing ecosystem for New Zealand's primary sector including producers, growers, exporters, and retailers. The website presents a professional image with clear messaging about its mission to enable secure data sharing and compliance with evolving global standards. The business model centers on collaboration and data interoperability projects such as the Digital Wallet and Digital Farm Environment Plan. The target audience is primarily New Zealand agricultural stakeholders and related service providers.

F

Fédération Suisse des directrices et directeurs d’Hôpitaux

fsdh.ch

35

The Fédération Suisse des directrices et directeurs d’Hôpitaux (FSDH) is a Swiss non-profit association representing hospital directors and senior executives, primarily serving the French-speaking region of Switzerland. The website provides information about membership, contact details, and association activities, targeting healthcare leadership professionals. The organization positions itself as a key representative body advocating for hospital management interests in Switzerland. Technically, the website is built on Joomla CMS with common web technologies such as jQuery, Bootstrap, and Google services for analytics and bot protection. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enforced and use of Google reCAPTCHA; however, it lacks comprehensive security headers and published security or privacy policies, indicating room for improvement in compliance and security transparency. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

R

RudderStack

rudderlabs.com

72

RudderStack is a technology company specializing in real-time customer data infrastructure, enabling businesses to collect, transform, and deliver customer event data with full privacy control. Positioned as a reliable and scalable solution, RudderStack offers over 200 integrations and emphasizes compliance with major security frameworks such as SOC 2, GDPR, and HIPAA. The website reflects a mature digital presence with comprehensive content, customer testimonials, and case studies that demonstrate business value and efficiency gains. Technically, the website leverages modern frameworks like Next.js and React, hosted on Vercel, ensuring fast performance and excellent mobile optimization. The use of multiple analytics and marketing tools indicates a sophisticated approach to user tracking and engagement, balanced with privacy considerations. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, RudderStack presents a trustworthy and professional online presence with a strong focus on security and compliance. The lack of WHOIS data limits domain registration trust analysis, but the website's quality and certifications support legitimacy. Strategic recommendations include publishing incident response contacts and vulnerability disclosure policies to enhance transparency and security readiness.

The website dnsstatus.com serves as a status monitoring page for DNS Made Easy and Constellix services, providing operational status updates, maintenance notifications, and incident reports for enterprise DNS services. The site targets enterprise customers and users of these DNS services, positioning itself as a reliable source for network status information. Technically, the site leverages the Status.io platform, Bootstrap framework, jQuery, Font Awesome, Google reCAPTCHA for bot protection, and Clicky Analytics for user tracking. The design is professional and mobile-optimized with good user experience and navigation clarity. However, the security posture is moderate with some best practices observed but lacking explicit security headers and comprehensive policies. The WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. No privacy, cookie, or terms of service policies are found, and no direct contact information is provided, which impacts trust and compliance scores. Overall, the site is safe for general audiences and focused on technical status reporting.

C

CloudBreach Ltd

cloudbreach.io

72

CloudBreach Ltd operates a specialized online platform providing cloud security trainings and certifications, focusing on practical, real-life scenario-based learning for cloud environments such as AWS and Azure. The company targets individuals and professionals seeking to enhance their cloud security skills. The website is professionally designed using WordPress with the Avada theme and integrates advanced LMS capabilities via Learndash, indicating a mature digital infrastructure for e-learning. Hosting appears to be on Microsoft Azure, supporting scalability and reliability. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partially addressed with a cookie consent mechanism via iubenda, but explicit privacy and terms policies are not found in the provided content. Overall, the website presents a credible and professional front for a small technology education business, with room for improvement in security and compliance documentation.

The OpenPOWER Foundation is a well-established open developer community focused on the POWER Architecture, providing a collaborative platform for hardware and software innovation within the semiconductor industry. With over 350 members, it holds a strong market position as a democratizer of RISC-based processor technology. The website reflects a professional and consistent brand image, targeting technology professionals and organizations interested in open hardware development. Technically, the website is built using modern web technologies including Bootstrap, jQuery, and Font Awesome, hosted by VanTosh and generated via Hugo. It demonstrates good mobile optimization and SEO practices, with moderate performance and basic accessibility features. Analytics are handled via Matomo, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and has domain protections in place, but lacks DNSSEC and security headers. There is no visible security policy or incident response information, and the cookie policy lacks a consent mechanism. These gaps suggest room for improvement in security posture and privacy compliance. Overall, the website is trustworthy and professional with a strong business credibility score. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent mechanisms, and publishing a dedicated security policy to enhance trust and compliance.

LF Projects, LLC operates as a Delaware series limited liability company, establishing separate projects as series under the main entity. The website serves as a corporate presence, providing basic information about the company structure and projects. The technical infrastructure is based on WordPress with common plugins such as Yoast SEO and Google Tag Manager, supported by DNSimple DNS services and monitored via New Relic. The website is accessible without any WAF or security challenges, indicating good availability. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled and domain transfer protection, but DNSSEC is not enabled and security headers are missing, representing areas for improvement. Overall, the site is professional but could enhance compliance and security transparency.

O

OODA Loop

oodaloop.com

57

OODA Loop is a well-established intelligence and analysis platform founded in 2007, serving global business leaders, technologists, and security professionals. The company offers a subscription and membership-based model providing in-depth analysis, news briefs, events such as OODACon, podcasts, and daily intelligence reports. The website is professionally designed using WordPress with modern technologies and integrates membership management and analytics tools. Security posture is solid with HTTPS and domain management best practices, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is basic, lacking explicit cookie consent and GDPR-aligned policies. Overall, the platform presents a credible, professional presence with strong business credibility and moderate technical maturity.

D

DFIR Diva

dfirdiva.com

74

DFIR Diva is a specialized digital forensics and incident response blog focused on providing beginner-friendly content, free and affordable training resources, and community event information related to DFIR, OSINT, and cybersecurity. The website operates primarily as an educational and resource hub with affiliate partnerships to various cybersecurity training providers, positioning itself as a niche player in the cybersecurity education market. The technical infrastructure is based on WordPress with a modern plugin ecosystem, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced DNS security and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences, but could improve its compliance and security transparency.

C

Carnegie Mellon University

cmu.edu

70

Carnegie Mellon University is a prestigious private global research university based in Pittsburgh, USA, recognized among the top 20 universities in the United States. It offers a broad range of undergraduate, graduate, and continuing education programs with a strong emphasis on technology, artificial intelligence, and interdisciplinary research. The university has a large faculty body, notable alumni, and a history of pioneering contributions to AI and robotics. The website reflects a mature digital presence with comprehensive academic and campus life information targeting students, faculty, alumni, and researchers. Technically, the website is built on Drupal 10 CMS and integrates multiple modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enabled and no visible sensitive data exposure, but lacks explicit security headers and a vulnerability disclosure policy. The WHOIS data is unavailable, which is typical for .edu domains due to registry policies, but the domain and content strongly indicate legitimacy. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, serving as a key digital asset for Carnegie Mellon University.

I

Intercad SA

intercad.ch

60

Intercad SA is a Swiss-based specialist company providing innovative and tailored GIS, CAD, and BIM software solutions primarily targeting municipal offices and technical departments. Their website reflects a professional B2B service provider with a clear focus on geographic data management and technical office software. The company maintains a moderate digital maturity with a WordPress-based infrastructure enhanced by Elementor and various Jet plugins, supporting a responsive and content-rich user experience. Security posture is adequate with HTTPS enforced and some security plugins in use, but lacks explicit published security policies or vulnerability disclosures. Overall, the website is trustworthy and well-positioned in its niche, though improvements in privacy and security transparency are recommended.

P

Peraton

peraton.com

76

Peraton is a prominent national security company specializing in delivering mission-critical technologies and IT solutions to protect the United States and its allies. The company operates primarily in the government sector, focusing on cybersecurity, cloud services, digital transformation, and engineering. Their market position is strong, supported by a comprehensive portfolio of services and a clear commitment to national security missions. The website reflects a mature digital presence with consistent branding and professional content aimed at government agencies and defense stakeholders. Technically, the website is built on WordPress using modern frameworks such as Foundation and integrates multiple analytics and marketing tools including Google Analytics and MonsterInsights. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and employs tracking opt-out mechanisms, but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with a cookie policy present but no explicit privacy or terms of service pages found. Overall, the website presents a low risk profile with strong business credibility but could enhance transparency and security posture by publishing detailed privacy, security, and incident response information.

S

Smart911

smart911.com

66

Smart911 is a well-established emergency safety service platform founded in 1999, providing residents and families with the ability to create safety profiles that assist 9-1-1 and first responders during emergencies. The platform is widely endorsed by thousands of public safety agencies nationwide and operates under the parent company Rave Mobile Safety. The website offers a free service for residents and commercial solutions for public safety agencies, positioning itself as a trusted leader in emergency response technology. The site features comprehensive content, professional design, and strong trust indicators including SOC 2 and HIPAA/HITECH compliance.

F

Forbes Brasil

forbes.com.br

63

Forbes Brasil is a leading business and economy media publication in Brazil, offering news, analysis, rankings, and branded content primarily targeting business professionals, investors, and entrepreneurs. The website is built on WordPress and leverages modern web technologies including Google Tag Manager, Cloudflare DNS, and performance optimizations like WP Rocket. The site is well-structured, mobile-optimized, and integrates social media channels effectively. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers and privacy compliance mechanisms like cookie consent are lacking. WHOIS data aligns well with the website's claims, indicating legitimacy. Overall, the site presents a professional and trustworthy digital presence with room for improvement in privacy and security policy transparency.

S

SPAR Handels AG

spar.ch

59

SPAR Handels AG is a well-established Swiss grocery retailer operating a website primarily in German, targeting local customers with fresh food offers. The website is built on TYPO3 CMS and uses modern web fonts from Typekit, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. The absence of these elements suggests room for improvement in privacy compliance and security posture. Overall, the website is accessible and functional but would benefit from enhanced security and compliance features to better protect users and align with regulatory requirements.

I

ITSP Magazine

itspmagazine.com

71

ITSP Magazine operates a modern multimedia platform focused on technology, cybersecurity, and societal issues through podcasts, webinars, and panels. The company targets professionals and enthusiasts interested in these domains, positioning itself as a niche media network with a clear mission to foster intellectual exchange globally. The website is professionally designed, mobile-optimized, and hosted on Squarespace, leveraging modern web technologies and standard analytics tools. Security posture is strong with HTTPS and HSTS enabled, complemented by privacy and cookie policies that indicate GDPR compliance. However, the absence of publicly available WHOIS data suggests privacy protection or recent domain registration, which slightly impacts transparency. Overall, the platform demonstrates a solid digital maturity and trustworthy presence in its market segment.

G

Genesis Digital

webinarjam.com

69

WebinarJam, operated by Genesis Digital, is a leading webinar software platform trusted by over 75,000 businesses globally. It offers a comprehensive suite of features including live and automated webinars, reliable HD streaming, live chat, AI-powered agenda planning, flexible scheduling, and multi-device compatibility. The platform is designed to help coaches, consultants, educators, and professionals scale their impact and engage large audiences effectively. Technically, the website leverages modern technologies such as Google Analytics, Google Tag Manager, Freshchat, and is hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Security posture is good with HTTPS enforced and secure embedding practices, though visible security headers and privacy compliance mechanisms are lacking in the provided content. Overall, the site presents a professional and trustworthy image with excellent content quality and user experience.

Thinkific is a prominent SaaS platform specializing in enabling users to create, market, and sell online courses, memberships, communities, and digital products. The company positions itself as a leading learning platform with a professional and well-branded website targeting educators, entrepreneurs, and course creators. The website demonstrates a mature digital presence with extensive use of modern web technologies and marketing tools such as HubSpot, Mixpanel, and Google Tag Manager. However, the absence of WHOIS registration data raises questions about domain registration transparency, although the website content and branding strongly suggest legitimacy. Security posture is moderate with no visible security headers or explicit security policies, and privacy compliance is limited due to missing privacy and cookie policies in the provided content. Overall, the website is professional and trustworthy from a business perspective but would benefit from enhanced transparency and security disclosures.

Laboratoria is a well-established educational organization focused on empowering women in Latin America through technology training, specifically offering a free data analysis course called Jornada de Dados. The website presents a clear and professional overview of the course structure, prerequisites, and community benefits, targeting women interested in technology careers. The technical infrastructure leverages common web technologies such as jQuery, Font Awesome, and multiple analytics/tracking pixels including Google Tag Manager, Facebook Pixel, and TikTok Pixel. While the site is mobile optimized and well-structured, there is room for improvement in security headers and explicit privacy compliance mechanisms. The security posture is moderate with no critical vulnerabilities detected but lacks advanced security policies and incident response information. Overall, the domain WHOIS data aligns with the business claims, supporting legitimacy and trustworthiness.

K

Koroška. Sonce, jug, poletne, radosti

koroska.info

57

The website www.koroska.info serves as a tourism information portal focused on the Carinthia region in Austria, promoting summer activities such as cycling, hiking, and climbing. It targets tourists and visitors interested in outdoor recreational opportunities in this Alpine region. The site is multilingual and uses a professional design with consistent branding and clear navigation, enhancing user experience and trustworthiness. The business model appears to be informational and promotional, likely supported by regional tourism partnerships.

K

Vakantie in Karinthië, Oostenrijk | officiële reisgids

karinthie.com

56

The website www.karinthie.com serves as an official travel guide for the Karinthië region in Austria, targeting tourists seeking vacation information including tips, activities, hotels, and regional highlights. The site is built on TYPO3 CMS and leverages modern frontend technologies and analytics tools such as Matomo and Cookiebot for consent management. The content is primarily in Dutch and is well-structured for tourism promotion. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response or security policies are published. The absence of WHOIS data raises concerns about domain registration legitimacy, but the website content and external partnerships suggest a legitimate tourism portal. Overall, the site demonstrates good digital maturity with room for improvement in security transparency and contact information availability.

T

Tourismusregion Villach - Faaker See - Ossiacher See

visitcarinthia.at

51

Visit Carinthia is a regional tourism website promoting holidays in Carinthia, Austria, offering information on hotels, offers, and local attractions. The site targets tourists and travelers interested in the region, positioning itself as an authoritative source for tourism in Carinthia. The website employs a modern technical infrastructure based on TYPO3 CMS, enhanced with popular JavaScript libraries and frameworks such as jQuery, Foundation, and Owl Carousel, ensuring a responsive and user-friendly experience. It integrates advanced analytics and marketing tools including Matomo, Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement, comprehensive cookie consent mechanisms, and appropriate security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with a clear and comprehensive privacy policy and cookie consent banner. However, explicit contact information and security incident response details are not readily found, which could be improved to enhance trust and transparency. Overall, the website is professional, secure, and well-optimized for its purpose.