Security Directory

N

NordSüd Verlag AG

nord-sued.com

50

NordSüd Verlag AG is a well-established Swiss children's book publisher with a strong market presence and a comprehensive digital platform. The website showcases a rich catalog of children's books, events, and related materials, targeting a general audience including parents, educators, and book enthusiasts. The company leverages modern web technologies including WordPress, WooCommerce, and Matomo analytics to provide a performant and user-friendly experience. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though DNSSEC is not enabled, representing an area for improvement. Privacy compliance is robust with clear cookie consent and a comprehensive privacy policy. Overall, the website reflects a professional and trustworthy business with consistent branding and high-quality content.

K

Klett Kinderbuch Verlag GmbH

klett-kinderbuch.de

10

Klett Kinderbuch Verlag GmbH is a small, independent German children's book publisher founded in 2008 and independent since 2015. The company focuses on publishing seven to ten new titles per half-year for children aged 2 to 12 and their adults. Their website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site uses the Contao CMS platform with modern JavaScript libraries like jQuery and Rocksolid Slider, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response information. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. Business credibility is supported by social media presence and professional content, though no direct contact emails or phone numbers are published on the site. Overall, the website is safe, trustworthy, and well-suited for its target audience.

G

Gerstenberg Verlag GmbH & Co. KG

gerstenberg-verlag.de

10

Gerstenberg Verlag GmbH & Co. KG is a well-established German publishing house specializing in children's literature, including iconic titles such as Eric Carle's 'Die kleine Raupe Nimmersatt' and Rotraut Susanne Berners Wimmelbücher. The company also publishes adult books focusing on culture, nature, lifestyle, and culinary topics, complemented by a range of papeterie products. The website serves as an e-commerce platform for these offerings and maintains a strong market position in the German and international children's book market. Technically, the website is built on the OXID eShop CMS platform, employs modern JavaScript libraries, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

C

CalmeMara Verlag

calmemaraverlag.de

52

CalmeMara Verlag is a small German publishing company specializing in sustainable and vegan children's books, targeting families and children interested in environmentally friendly and ethical products. The website is built on WordPress with WooCommerce and uses the Avada theme, indicating a modern and flexible technical infrastructure. The site integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Pinterest Analytics, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and anti-spam measures in place, though explicit security policies and incident response contacts are not published. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the site is professional and trustworthy but could improve compliance documentation and security transparency.

A

Alice Jeunesse

alice-editions.be

43

Alice Éditions is an independent Belgian youth publishing house established in 1995, focusing on producing engaging and value-driven books for children and adolescents. The company emphasizes respect, openness, and dialogue through its publications. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and libraries, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS and secure forms, though some security headers and cookie consent mechanisms are missing. The WHOIS data is restricted, which is common for privacy but limits domain transparency. Overall, the site is trustworthy and serves its niche audience effectively.

M

MyDataKnox hosting

mydataknox.com

61

MyDataKnox hosting is a Croatian-based technology company specializing in web hosting, virtual private servers, domain registration, cloud backup, and related IT infrastructure services. Established in 2010, it has grown to become one of the fastest growing hosting providers in Croatia, supported by multiple ISO certifications that demonstrate its commitment to quality, security, and environmental responsibility. The company targets businesses and individuals seeking reliable and scalable hosting solutions, offering 24/7 customer support and free migration services to enhance customer satisfaction. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. The site is well-optimized for mobile devices, accessible, and structured with clear navigation. Cookie consent mechanisms comply with GDPR requirements, providing users control over functional, analytics, and marketing cookies. From a security perspective, MyDataKnox demonstrates strong practices including HTTPS enforcement, domain status protections, and adherence to ISO 27001 standards. However, enabling DNSSEC and publishing an incident response contact or security.txt file could further enhance security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website and business present a high level of professionalism, trustworthiness, and compliance, making it a reliable service provider in the hosting industry.

G

gymnastikaprovsechny.cz

gymnastikaprovsechny.cz

54

Gymnastika pro všechny is a Czech-based small business specializing in gymnastics training for all age groups, including children and adults. The website presents a professional and well-structured platform offering various courses, individual lessons, and workshops. The business emphasizes safety, proper technique, and comprehensive physical development. The team consists of qualified trainers with multilingual capabilities, enhancing accessibility for a diverse audience. Technically, the website is built on WordPress with Elementor, ensuring a modern and responsive design, though some improvements in security headers and SEO could be made. Security posture is solid with HTTPS and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or suspicious elements were detected. Overall, the website reflects a trustworthy and credible local sports training provider.

V

Verkehrsverbund Bremen/Niedersachsen GmbH

fahrplaner.de

64

The FahrPlaner website serves as the official digital platform for public transportation information and ticketing in the German regions of Niedersachsen and Bremen. Operated by Verkehrsverbund Bremen/Niedersachsen GmbH, it offers real-time timetable data, mobile ticket purchasing, and comprehensive route planning through a well-integrated app and web interface. The site is positioned as a regional leader in transportation services, targeting commuters and travelers within these areas. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and Leaflet.js for mapping, ensuring a responsive and accessible user experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security policies or vulnerability disclosures. Overall, the platform demonstrates a mature digital presence with good privacy compliance and trustworthy domain registration.

R

Regentalbahn GmbH

alex.info

57

The website www.laenderbahn.com/alex/ represents the alex regional train service operated by Regentalbahn GmbH, a subsidiary of the Netinera group. It offers daily direct train connections between Germany and the Czech Republic, targeting commuters and travelers in this region. The site provides comprehensive travel information, ticket sales, real-time updates, and customer service resources. The business model focuses on regional transportation services with a strong emphasis on customer convenience and cross-border connectivity. Technically, the website is built on Craft CMS and employs modern JavaScript libraries and frameworks such as jQuery and Mmenu for mobile navigation. It integrates multiple analytics and tracking tools including Matomo, Google Tag Manager, Facebook Pixel, and Hotjar, all managed with a cookie consent mechanism to comply with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the website enforces HTTPS and uses CSRF tokens to protect forms. While explicit HTTP security headers were not detected in the provided data, the site follows best practices in data protection and privacy compliance, including a comprehensive privacy policy and cookie management. No vulnerabilities or exposed sensitive data were found. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website branding and content strongly indicate a legitimate business. Overall, the site is professional, trustworthy, and well-maintained, serving its target audience effectively. The main risk lies in the missing WHOIS registration data, which should be verified externally. Strategic recommendations include enhancing HTTP security headers, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further strengthen security posture.

BILS Verkehrsbetriebe mbH is a German transportation company whose website is currently in maintenance mode, providing minimal content. The site uses WordPress CMS with jQuery and custom maintenance plugins. The technical infrastructure is basic but functional, with HTTPS enabled and a login form present. However, the absence of privacy, cookie, and terms of service policies, as well as lack of contact information, limits the site's professionalism and user trust. Security posture is moderate due to HTTPS but lacks important security headers and explicit security policies. Overall, the website's current state restricts comprehensive analysis and indicates a need for content and compliance improvements.

R

Regentalbahn GmbH

vogtlandbahn.de

57

The website www.laenderbahn.com/vogtlandbahn/ represents the Vogtlandbahn, a regional passenger rail service operating in the Vogtland region of Germany. It is part of Regentalbahn GmbH and affiliated with the parent company Netinera. The site offers comprehensive information on train schedules, ticketing options, real-time departure data, and customer services, targeting regional travelers and commuters. The business model focuses on providing reliable and comfortable regional rail transport connecting multiple cities and towns. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. From a technical perspective, the site employs modern web technologies including JavaScript libraries, Matomo analytics, Google Tag Manager, and Facebook Pixel for tracking and marketing. It is built on Craft CMS and demonstrates good mobile optimization and accessibility features. Security is well addressed with HTTPS enforcement, security headers, and CSRF protection, though there is room for improvement in publishing explicit security policies and incident response information. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR requirements. Contact information is clearly provided, including phone numbers and physical addresses, enhancing business credibility. Overall, the website is a trustworthy and professional digital presence for a regional transportation provider. However, the absence of WHOIS registration details introduces some uncertainty about domain legitimacy, warranting further verification. Strategic recommendations include publishing a dedicated security policy, establishing a vulnerability disclosure program, and enhancing incident response transparency to further strengthen trust and compliance.

V

vlexx GmbH

vlexx.de

53

vlexx GmbH is a regional rail transport company operating in the German states of Rheinland-Pfalz, Hessen, and Saarland. The company provides passenger rail services with a focus on comfort, modern amenities, and sustainability. Their website offers comprehensive information on schedules, tickets, service, career opportunities, and leisure travel, targeting regional commuters and travelers. The company is positioned as a reliable regional transport provider with a medium-sized workforce and a solid market presence since its founding in 2014. The parent company is Netinera Deutschland GmbH, indicating a strong backing in the rail transport sector. Technically, the website is built on Craft CMS, uses modern JavaScript libraries, and is hosted behind Cloudflare, ensuring good performance and security. Privacy and cookie policies are present and GDPR compliant, though explicit terms of service and incident response policies are not found. Security posture is good with HTTPS and CSRF protections, but could be improved with additional security headers and vulnerability disclosure mechanisms. Overall, the website is professional, trustworthy, and well-structured for its audience.

C

Cube Infrastructure Managers

cubeinfrastructure.com

10

Cube Infrastructure Managers is an independent European asset manager specializing in mid-market infrastructure investments since 2007. The company focuses on sectors such as energy transition, telecommunications, transport, and environment, emphasizing sustainable and socially responsible investments. Their market position is solid with over €4 billion capital raised and a portfolio of 40+ investments. The website reflects a mature digital presence built on WordPress with modern technologies and good SEO practices. Security posture is strong with HTTPS and reCAPTCHA implemented, though some security headers are missing and no public security policy is found. Privacy compliance is well addressed with clear privacy and cookie policies. The absence of WHOIS data is a concern but does not outweigh the professional presentation and trust signals on the site. Overall, the site is trustworthy and professionally managed.

O

Osthannoversche Eisenbahnen Aktiengesellschaft

ohe-ag.de

53

Osthannoversche Eisenbahnen Aktiengesellschaft (OHE) is a well-established transportation company based in Germany, specializing in regional rail and bus services primarily in Niedersachsen. Founded in 1944, OHE operates workshops and infrastructure services, positioning itself as a key regional player with a strong focus on reliability and customer satisfaction. The website reflects a professional digital presence with clear business information and a user-friendly interface. Technically, the site uses modern web technologies including Craft CMS, jQuery, and FontAwesome, hosted behind Cloudflare DNS services, and integrates Matomo for privacy-conscious analytics. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and well-optimized for users.

O

ODEG – Ostdeutsche Eisenbahn GmbH

odeg.de

10

ODEG – Ostdeutsche Eisenbahn GmbH is the largest private railway operator in eastern Germany, providing regional passenger rail services. The company offers comprehensive information on schedules, fares, tickets, and customer service through its website. The business targets a broad audience including daily commuters and travelers in the region. The website demonstrates a moderate level of digital maturity, leveraging TYPO3 CMS and modern JavaScript libraries to deliver a responsive and user-friendly experience. Privacy compliance is well addressed with a comprehensive privacy policy and a cookie consent mechanism that includes retargeting disclosures. Security posture is adequate with HTTPS enforcement and no visible vulnerabilities, though the absence of a published security policy and incident response contacts suggests room for improvement. Overall, the website is professional, trustworthy, and aligned with the company's business objectives.

D

Die Länderbahn GmbH DLB

laenderbahn.com

59

Die Länderbahn GmbH DLB is a well-established private railway company operating regional passenger transport services in Germany and the Czech Republic. With a history spanning over 130 years and multiple regional brands such as alex, trilex, and vogtlandbahn, the company holds a strong market position in the transportation sector. It is a subsidiary of NETINERA Deutschland GmbH, indicating a solid corporate backing. The website provides comprehensive information about the company’s services, history, and career opportunities, targeting both customers and potential employees. Technically, the website is built on a modern CMS platform (Craft CMS) and employs various analytics and marketing tools including Matomo, Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile-optimized with good SEO practices and a clear navigation structure. Security measures such as HTTPS and CSRF tokens are implemented, though some security headers and explicit incident response policies are absent. From a security and compliance perspective, the website includes a detailed privacy policy and cookie consent mechanism compliant with GDPR. However, the absence of WHOIS data for the domain raises questions about domain registration transparency, although the website content and branding strongly support legitimacy. No critical vulnerabilities or adult content were detected, and the site maintains a professional and trustworthy online presence. Overall, the website reflects a mature digital presence for a transportation company with good technical and privacy practices. Strategic improvements in security headers and public incident response information could further enhance trust and compliance.

K

Komuneid

komuneid.com

50

Komuneid is a French digital agency based in Montpellier, specializing in website creation, SEO, digital strategy, and eCommerce solutions since 2007. The company positions itself as a global digital agency offering comprehensive services including content creation, web design, development, and social media propagation. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to data protection. However, the absence of WHOIS data raises questions about domain registration legitimacy, which should be verified. Security posture is generally good with HTTPS enforced and privacy plugins in use, but lacks advanced security headers and incident response information. Overall, the website presents a trustworthy and professional digital agency with room for improvement in security transparency and domain legitimacy verification.

E

ERGO Aktiv

ergoaktiv.cz

45

ERGO Aktiv is a specialized neurorehabilitation center based in the Czech Republic, focusing on patients with acquired brain injuries such as stroke and head trauma. The organization offers comprehensive rehabilitation services including expert consultations, tailored rehabilitation programs, home rehabilitation, and social support to help patients return to normal life and employment. Their market position is that of a niche healthcare provider with a unique rehabilitation concept and advanced equipment. Technically, the website is built on WordPress with modern plugins and multimedia integration, demonstrating a moderate to good level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the credibility of the business.

C

CEREBRUM 2007

cerebrum2007.cz

51

CEREBRUM 2007 is a Czech non-profit patient organization dedicated to supporting individuals who have suffered brain injuries, including strokes, trauma, and tumors. The organization provides a community center, counseling services, educational workshops, and publishes informational materials to aid patients and their families. The website is well-structured, professionally designed, and targets patients, caregivers, healthcare professionals, and the general public interested in brain injury awareness. It maintains an active presence on multiple social media platforms and offers a newsletter for ongoing engagement. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO, Contact Form 7, and Google services such as Analytics and reCAPTCHA. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some security headers are missing, and there is no explicit cookie consent banner, which could be improved for better GDPR compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and spam protection on forms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable publicly, likely due to privacy protection, but the website content and business information appear consistent and legitimate. Overall, the site presents a trustworthy and professional digital presence for a small non-profit organization. Strategically, the organization should enhance its privacy compliance by implementing a cookie consent mechanism and consider publishing a security or incident response policy to further build trust. Regular updates and security header improvements will strengthen its security posture. The website effectively supports its mission and audience with clear navigation, relevant content, and community engagement tools.

N

Nadační fond Čas je mozek

nfcasjemozek.cz

42

Nadační fond Čas je mozek is a Czech non-profit organization dedicated to stroke awareness, education, and patient rehabilitation support. The foundation educates the public on stroke symptoms and the importance of timely emergency response, organizes fundraising events, and provides financial aid to stroke survivors. The website reflects a focused mission with clear content and active social media engagement. Technically, the site uses standard web technologies including jQuery, Font Awesome, and Google Analytics, with a cookie consent mechanism implemented. However, the absence of a privacy policy and security headers indicates room for improvement in privacy and security compliance. The WHOIS data is missing, which limits domain trust verification, but the website content and contact information support legitimacy. Overall, the site is well-structured and professional, serving a clear non-profit healthcare mission.

N

Nadační fond Čas je mozek

casjemozek.cz

44

The website www.casjemozek.cz represents a Czech non-profit initiative named 'Čas je mozek' focused on educating the public about stroke symptoms, prevention, and treatment. Founded in 2015, it is affiliated with reputable Czech medical societies, providing authoritative content and organizing charitable events. The site offers extensive educational resources, patient stories, and news updates, targeting the general public and healthcare professionals in the Czech Republic. Technically, the site uses modern web technologies including JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS domain registration data, slightly reduce its trustworthiness. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and incident response contacts. Overall, the site is a credible and valuable resource for stroke awareness but would benefit from enhanced transparency and security best practices.

C

Centous Solutions

techdignity.com

57

Centous Solutions is a small, India-based company specializing in developing Shopify apps aimed at enhancing e-commerce store performance, customer experience, and operational efficiency. Their portfolio includes apps for shipping protection, customer reviews, background music, product options, bulk image import, tagging, and inventory automation. The company also offers related services such as store setup, sales marketing, app installation, and troubleshooting. The website is built on WordPress and integrates modern technologies including Bootstrap, jQuery, and Google Tag Manager, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in the Shopify app niche.

L

LangShop

langshop.app

67

LangShop is a SaaS provider specializing in e-commerce translation solutions, offering a Shopify translation app and Magento 2 translation extension. The company targets e-commerce store owners seeking multilingual capabilities and seamless migration between Magento and Shopify platforms. The website demonstrates a solid market position with clear service offerings and a professional digital presence. Technically, the site is built on Magento 2 with integrations of modern JavaScript libraries and marketing tools, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized and SEO-friendly, with comprehensive privacy and cookie policies including consent mechanisms. Security posture is good with HTTPS enforced and domain registration locked, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained, with room for improvement in publishing explicit security policies and incident response contacts.

D

DPD

dpd.fr

68

DPD France operates as a major parcel delivery service provider, offering comprehensive shipping, tracking, and delivery management solutions for both professional and individual customers. The website reflects a mature digital presence with multilingual support and integration into the broader DPDgroup network. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, ensuring responsive design and good user experience. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and fraud alert information, although explicit security policies and incident response details are not publicly disclosed. Overall, the site is trustworthy and professionally maintained, supporting DPD's market position in France and internationally.

D

DRiV

drivparts.com

63

DRiV is a company specializing in the manufacturing and distribution of quality automotive parts, targeting automotive professionals and parts buyers. The website presents a professional and consistent brand image with a focus on quality and safety in auto parts. Technically, the site is built on Adobe Experience Manager CMS and employs modern web technologies including jQuery, Vue.js components, and integrates tracking tools such as Google Tag Manager and Facebook Pixel. The site is accessible, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS registration data is a significant concern, indicating potential issues with domain legitimacy or privacy protection. Overall, the site is functional and professional but requires improvements in privacy compliance and transparency to enhance trust and security.

F

Foire de Marseille

foiredemarseille-lavitrine.com

50

The website www.foiredemarseille-lavitrine.com serves as the official exhibitor platform for the Foire de Marseille event scheduled from September 26 to October 6, 2025. It provides visitors and exhibitors with essential information including exhibitor listings and product promotions. The platform is positioned as a regional event tool, operated under the umbrella of GL Events, a recognized event organizer. The website demonstrates a good level of content quality and user experience, with clear navigation and mobile optimization. Technically, it is built on WordPress CMS, utilizing standard libraries such as FontAwesome and Matomo for analytics, and incorporates GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and branding suggest a legitimate business presence. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer contact information.

A

Anixy

anixy.com

43

Anixy is a French company specializing in event management services, particularly focusing on fairs and public salons. They offer comprehensive ticketing management from preparation to post-event analysis, positioning themselves as a leader in their niche within France. The website is built on WordPress using Elementor and integrates modern SEO and tracking tools such as Yoast SEO and Google Tag Manager. The technical infrastructure is solid with HTTPS and cookie consent mechanisms in place, though some security headers are missing. Contact information is clearly provided, enhancing business credibility. However, formal security policies and incident response details are absent, indicating room for improvement in compliance and security transparency.

G

Gimii

gimii.fr

43

Gimii is a French technology company specializing in innovative consent management solutions for websites and mobile applications. Their core offering, the Consent Raiser, is designed to increase user consent rates for cookies by incentivizing users with donations to associations, thereby combining privacy compliance with social impact. The company targets website publishers, advertisers, and non-profit associations, positioning itself as a niche player in the consent management market with a socially responsible business model. Founded in 2022, Gimii operates primarily in France and maintains a professional online presence with a well-structured website and active LinkedIn profile. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, and integrates marketing and analytics tools like HubSpot and Google Analytics. The site is hosted with Cloudflare DNS and enforces HTTPS, reflecting a good baseline security posture. However, explicit privacy and cookie policies are not found in the provided content, and there is no visible security or incident response policy, which are areas for improvement. Overall, Gimii demonstrates a solid digital maturity for a small company, with good content quality and business credibility but room to enhance privacy compliance and security transparency.

C

Corps Touristique

corps-touristique.at

49

Corps Touristique is a small, Austria-based non-profit association representing international and national tourism organizations. The website serves as a platform to promote tourism and provide information about member countries and events. The business model focuses on association and representation within the hospitality sector, targeting tourism organizations and stakeholders in Austria. The site is professionally designed using WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity. The technical infrastructure is stable with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service, though a cookie consent mechanism is present. Overall, the website is trustworthy and functional but could improve compliance and security transparency.

R

Regionalna razvojna agencija Primorsko-goranske županije

prigoda.hr

46

Regionalna razvojna agencija Primorsko-goranske županije (PRIGODA) is a government-established regional development agency focused on coordinating sustainable and balanced regional growth in the Primorsko-goranska County of Croatia. Founded in 2017, it serves as a support center for local governments and legal entities, providing consultancy and project management services, especially related to EU funding and strategic regional development. The website reflects a professional government entity with detailed information on projects, funding opportunities, and regional strategies. Technically, the site is built on WordPress with modern plugins and SEO optimizations, though it lacks some advanced security headers and explicit privacy policies. The security posture is adequate with HTTPS and Google Analytics tracking, but could be improved with better security policies and headers. Overall, the site is trustworthy and well-positioned as a regional government resource, but should enhance privacy and security transparency to improve compliance and user trust.

S

S-Bahn Berlin GmbH

abo-antrag.de

64

The website www.abo-antrag.de is an official online subscription management portal operated by S-Bahn Berlin GmbH, a medium-sized transportation company under Deutsche Bahn. It provides services for purchasing, managing, and canceling public transport subscriptions for Berlin and Brandenburg residents. The site is well-branded with official logos and integrates with partner domains such as sbahn.berlin and bahn.de. Technically, it is built on ASP.NET WebForms with modern JavaScript libraries and uses Adobe Analytics and Usercentrics for tracking and consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security policies and vulnerability disclosure information. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a general audience without any adult or questionable content.

C

CYQUEST GmbH

cyquest.net

10

CYQUEST GmbH operates as a specialized provider of online assessment, self-assessment, and study orientation solutions, combining psychological expertise with modern web technologies to enhance employer branding and recruitment processes. The company targets businesses and educational institutions primarily in Germany, offering scientifically validated tools and interactive applications to improve selection decisions and candidate engagement. The website demonstrates a professional and consistent brand presence with strong client references and ISO 27001 certification, indicating a mature security posture. Technically, the website is built on WordPress using the Enfold theme, leveraging modern JavaScript libraries such as jQuery and integrating Google Analytics 4 and Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security practices include HTTPS enforcement and use of security plugins, but the absence of security headers and cookie consent mechanisms suggests room for enhancement. The security posture is solid with ISO 27001 certification, but the lack of visible incident response contacts and missing WHOIS registration data raise concerns about domain legitimacy and transparency. No WAF or blocking mechanisms were detected, and the site content is safe and business-focused without any adult or questionable material. Overall, CYQUEST presents as a credible and professional business with a good digital presence and security foundation, but should address domain registration transparency, privacy compliance (cookie consent), and security header implementation to strengthen trust and compliance.

E

eEducation Austria

digikomp.at

59

Digi.komp is an Austrian educational initiative focused on fostering digital competencies across various school levels. The website serves as a resource hub offering competency models, teaching examples, and online testing tools primarily targeted at educators and students within Austria. The initiative is supported by eEducation Austria and the Austrian Ministry of Education, indicating strong institutional backing and trustworthiness. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, providing a responsive and structured user experience. However, there is room for improvement in security practices, such as implementing security headers and cookie consent mechanisms. Overall, the site is professional, content-rich, and aligned with its educational mission.

C

Commission de Surveillance du Secteur Financier

cssf.lu

76

The Commission de Surveillance du Secteur Financier (CSSF) is a public institution responsible for supervising professionals and products within the Luxembourg financial sector. It serves both professionals and consumers by providing regulatory frameworks, publications, and guidance. The CSSF holds a key market position as Luxembourg's financial regulatory authority, offering services such as supervision of financial entities and dissemination of financial data. The website targets financial sector stakeholders and consumers seeking authoritative information and regulatory updates. Technically, the website is built on WordPress, utilizing modern web technologies including jQuery and Font Awesome, and integrates Matomo for analytics. The site demonstrates good digital maturity with responsive design, accessibility features, and a cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie-based security measures. However, explicit HTTP security headers are not detected, and no public security or incident response policies are found. No vulnerabilities or exposed sensitive data are evident. The absence of WHOIS data limits domain trust verification, but the official nature and content quality support legitimacy. Overall, the CSSF website is a professional, secure, and compliant platform serving as a trusted source for financial regulation in Luxembourg. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and security posture.

N

NETINERA Deutschland GmbH

netinera.de

57

NETINERA Deutschland GmbH is a major transportation company in Germany, operating since 2004 in regional rail and bus services. It is a subsidiary of Trenitalia, part of one of Europe's largest transport groups. The company offers a broad portfolio of rail and bus transport services along with maintenance and infrastructure support. The website reflects a mature business with a clear market position and extensive subsidiary network. Technically, the site uses SITEFORUM CMS and Bootstrap 3, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and incident response readiness are recommended.

V

Verkehrsverbund Bremen/Niedersachsen GmbH (VBN)

vbn.de

64

Verkehrsverbund Bremen/Niedersachsen GmbH (VBN) operates as a regional public transportation authority providing integrated ticketing, timetable information, and mobility services across Bremen and Lower Saxony. The website serves a broad audience including commuters, families, students, and groups, offering comprehensive transport options and customer support. The business model focuses on facilitating seamless public transport usage through digital platforms and partnerships with transport operators. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery, Bootstrap, and Leaflet for interactive maps and widgets. The integration of HAFAS public transport widgets enhances user experience for timetable and ticketing queries. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and follows good security practices, though explicit security headers like Content-Security-Policy could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the website presents a trustworthy, professional, and user-friendly platform supporting VBN's mission. Strategic improvements in security policy transparency and header implementation would further enhance its posture.

JSB stavební is a small family-owned construction company operating primarily in Prague and the Central Bohemian region since 2016. The company specializes in comprehensive renovations of apartments, family houses, and offices, as well as the construction of smaller commercial projects and family homes. Their website presents a professional image with clear service descriptions and galleries showcasing completed projects, targeting local residential and commercial clients. Technically, the website is built using standard web technologies including Bootstrap, jQuery, and Font Awesome, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS usage or hosting details. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site lacks HTTPS verification in the provided data, security headers, and privacy or cookie policies, indicating potential compliance and security gaps. The absence of WHOIS data limits domain legitimacy verification, although the website content and contact details appear consistent with a legitimate small business. Overall, the site is functional and informative but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

S

SMART Design | Gregic Advisory

sm-art-design.com

37

SMART Design | Gregic Advisory is a Croatian technology company specializing in advanced SMART web solutions, including custom web shops, web applications, and AI integrations. Positioned as a leader in the Zagreb region, the company targets businesses and professionals seeking high-performance, secure, and adaptive digital platforms. Their offerings emphasize nano-optimized code, dynamic content, and loyalty programs, reflecting a modern and innovative approach to web development. The website demonstrates a high level of digital maturity with professional design, responsive layouts, and comprehensive GDPR-compliant cookie management. Security posture is solid with HTTPS and secure forms, though explicit security policies and incident response details are absent. Overall, the company presents a trustworthy and professional image with strong client references including government and educational institutions.

O

Onlysollo

onlysollo.cz

42

Onlysollo.cz is a niche e-commerce website specializing in premium gymnastics and bodyweight training equipment. Founded by a professional gymnast, the brand leverages expert knowledge to offer high-quality mats, balance tools, and accessories, targeting athletes and fitness enthusiasts primarily in the Czech Republic but shipping worldwide. The website is built on WordPress with WooCommerce, featuring a modern and responsive design with integrated social media and multi-currency support. Security posture is adequate with HTTPS and anonymized analytics but lacks advanced security headers and published policies. Privacy compliance is limited due to missing cookie consent mechanisms and GDPR-specific disclosures. Overall, the site presents a trustworthy and professional front for a small retail business with room for improvement in privacy and security transparency.

C

Czech Gymnastics Federation

gymtv.cz

55

GymTV is the official TV channel of the Czech Gymnastics Federation, providing live streaming and archived video content of gymnastics competitions. The website serves a niche audience of gymnastics enthusiasts primarily in the Czech Republic and operates as a non-profit media outlet affiliated with the national federation. The digital infrastructure is based on WordPress CMS with common plugins for analytics, translation, and UI enhancements, reflecting a moderate level of digital maturity. The site is well-branded, mobile-optimized, and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and published security policies. The absence of WHOIS registrant data is likely due to privacy protection, which is common for such organizations. Overall, the website is legitimate, professional, and focused on its core mission of gymnastics event broadcasting.

F

forward

forward.live

55

The website forward.live represents the 'fwd: Bundesvereinigung Veranstaltungswirtschaft e.V.', a German non-profit association dedicated to the event industry. It serves as a central platform for members of the event sector, focusing on political advocacy, networking, knowledge transfer, and sustainability initiatives. The organization positions itself as a key voice for the industry at the national and regional levels, with a clear emphasis on community and future-oriented development. The site content is professionally presented in German, targeting industry professionals and stakeholders. Technically, the website is built on WordPress using Elementor and several Jet plugins, with SEO optimization via Yoast. It employs modern web technologies including jQuery and Google Tag Manager for analytics. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks visible security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for this type of organization. No explicit security or incident response policies are publicly available, suggesting an area for enhancement. Overall, the website demonstrates a strong business credibility and compliance posture with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

R

R.I.F.E.L. Research Institute for Exhibition and Live-Communication e.V.

rifel-institut.de

45

R.I.F.E.L. Research Institute for Exhibition and Live-Communication e.V. is a small, Germany-based non-profit organization specializing in research within the exhibition and live communication sectors. The website serves as a platform to showcase their research activities, provide access to an online shop, and offer contact channels for stakeholders. Their market position is niche, targeting professionals and organizations involved in exhibitions and live events. The business model combines research services with e-commerce capabilities, supporting their mission and outreach. Technically, the website is built on WordPress with WooCommerce integration, leveraging common web technologies such as jQuery and PHP. Hosting is managed via Corpex DNS, and the site employs HTTPS with a good SSL configuration. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The presence of Jetpack and WooCommerce analytics indicates moderate user tracking. From a security perspective, the site uses HTTPS but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance compliance and security posture, supporting the organization's credibility and user trust.

B

BrandEx

brand-ex.org

60

BrandEx is a specialized event and award platform focused on recognizing excellence in live communication and brand experience within the German-speaking market. Established in 2017, it organizes annual award ceremonies celebrating creativity and innovation in categories such as architecture, events, and special awards. The website serves as a hub for ticket sales, jury information, news updates, and industry networking, targeting marketing professionals, event organizers, and creative agencies. Technically, the site is built on WordPress with modern plugins for SEO, cookie management, and analytics, hosted behind Cloudflare DNS. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and DNSSEC are not implemented. Privacy compliance is strong, reflecting GDPR requirements with detailed cookie categories and user consent options. No critical vulnerabilities or suspicious indicators were found. Overall, BrandEx presents a professional, trustworthy, and well-maintained digital presence aligned with its business goals.

The Landesinnungsverband Elektro- und Informationstechnik Schleswig-Holstein is a regional trade association representing over 800 electrical and information technology companies in Schleswig-Holstein, Germany. The organization focuses on advocacy, member support, training, and standardization within the electrical trade sector. Their website provides comprehensive information about their services, events, and industry news, targeting professionals and apprentices in the electrical industry. Technically, the site is built on the Contao CMS platform and uses modern JavaScript libraries to enhance user experience. The site is well-structured, mobile-optimized, and maintains good SEO practices. Security-wise, the site enforces HTTPS and uses secure forms with CSRF tokens, but lacks advanced HTTP security headers and a public security policy. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

B

Banque centrale du Luxembourg

apieceofluxembourg.lu

60

The website 'A Piece of Luxembourg' is an official platform managed by the Banque centrale du Luxembourg, offering unique numismatic products that celebrate Luxembourg's culture, history, and heritage. It targets collectors and enthusiasts interested in Luxembourg-themed euro coins and related products, positioning itself as a niche leader in this specialized market. The business model revolves around e-commerce sales combined with cultural promotion, leveraging the authority and trust of the central bank. Technically, the website is built on WordPress and employs modern web technologies such as jQuery, FontAwesome, Swiper.js, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and a moderate performance profile. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain registration transparency but does not significantly detract from the site's legitimacy given its official affiliation. Overall, the website presents a low-risk profile with strong business credibility and good technical and security posture. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

D

Dopravní koridor Poodří, z.s.

dopravnikoridorpoodri.cz

59

Dopravní koridor Poodří, z.s. is a Czech non-profit organization focused on advocating for transportation corridor development, particularly high-speed rail projects, in the Poodří region. The organization collaborates with multiple municipalities and regional authorities to influence infrastructure planning and environmental considerations. Their website serves as an information hub and communication platform for stakeholders and the public. Technically, the website is built on WordPress using the Avada theme and Fusion Builder framework, incorporating modern JavaScript libraries like Splide.js for interactive elements. The site is hosted under the REG-GRANSY registrar with consistent DNS settings. Performance and mobile optimization are good, though accessibility is basic. SEO practices are adequately implemented. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. Overall, the website presents a professional and trustworthy front for the organization, with clear contact information and relevant content. Strategic improvements in security headers and incident response documentation could further strengthen their posture.

SoviSol GmbH is a medium-sized German company specializing in the procurement and supply of solar energy components, including photovoltaic modules, battery storage systems, inverters, and mounting systems. With over 10 years of experience, the company targets professional customers such as solar installers, builders, and project developers. Their website presents a professional image with clear navigation, relevant content, and a focus on sustainable energy solutions. The company maintains multiple physical locations in Germany and provides clear contact information. Technically, the website uses modern frontend technologies like jQuery, Bootstrap, and Swiper.js, and integrates Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and performs moderately well.

E

Eurener

eurener.com

47

Eurener is a Spanish photovoltaic module manufacturer specializing in high-quality, durable solar panels primarily targeting the European residential and commercial markets. The company emphasizes sustainability, advanced solar technologies, and premium design, supported by industry certifications and awards such as the TOP Brand seal and Ecovadis platinum medal. The website is built on WordPress with Elementor, featuring modern web technologies and multilingual support, providing a professional user experience with good navigation and mobile optimization. Security posture is adequate with HTTPS and domain registration protections, but lacks advanced DNS security and explicit security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for improvement in privacy and security transparency.

F

Fair-ON-Pay Association

fair-on-pay.com

52

Fair-ON-Pay Association is a Swiss-based non-profit organization founded in 2022 that promotes equal pay in companies through certification and auditing services. It offers a recognized certification process with multiple levels, audited by SGS, to help companies demonstrate their commitment to equal pay and social responsibility. The association is a member of the Equal Pay International Coalition (EPIC), enhancing its credibility and international standing. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. It integrates Google Analytics and a GDPR-compliant cookie consent mechanism, reflecting a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website and business present a trustworthy and professional image with clear contact information and partner relationships.

E

E3/DC

e3dc.com

50

E3/DC operates as a German-based company specializing in energy storage solutions, particularly for photovoltaic systems. The website presents a professional and well-structured digital presence built on WordPress, leveraging modern technologies such as Bootstrap and various marketing and analytics tools. The company positions itself as a price-winning provider in the energy storage sector, targeting end customers with photovoltaic installations. Technically, the site is well-optimized for mobile and SEO, with HTTPS enforced and cookie consent mechanisms in place. However, the absence of WHOIS data and lack of explicit privacy and security policies reduce the overall trustworthiness and compliance posture. Security best practices such as security headers and incident response information are missing, indicating room for improvement in security maturity. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.