Security Directory

A

ALDI SUISSE TOURS

aldi-suisse-tours.ch

72

ALDI SUISSE TOURS is a travel service provider operating under the ALDI SUISSE brand, offering affordable travel packages including hotels, beach holidays, round trips, and cruises primarily targeting the Swiss market. The website is professionally designed with consistent branding and provides a comprehensive cookie consent mechanism ensuring GDPR compliance. Technically, the site uses modern web technologies including Cookiebot for consent management, Google Tag Manager for analytics, and Kameleoon for marketing optimization, hosted on AWS Cloudfront CDN. Security posture is strong with HTTPS enforced and appropriate security headers, though no explicit security policy or incident response information is publicly available. Overall, the site is trustworthy and well-positioned in the retail travel sector with good privacy compliance and user experience.

A

ALDI SUISSE AG

aldi-mobile.ch

70

ALDI Mobile, operated by ALDI SUISSE AG, is a telecommunications service provider in Switzerland offering affordable mobile subscriptions and prepaid plans. The website presents a professional and user-friendly interface with clear information about their services, pricing, and contact options. The business targets general consumers seeking cost-effective mobile solutions with no minimum contract duration and lifetime discounts. Technically, the website leverages modern frameworks such as Next.js and React, ensuring good performance, mobile optimization, and accessibility. Security-wise, the site enforces HTTPS, implements standard security headers, and uses cookie consent management, although it lacks a dedicated security policy or incident response page. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, making it a reliable platform for customers.

P

Polarstern Energie

polarstern-energie.de

57

Polarstern Energie operates as a renewable energy provider in Germany, offering 100% clean electricity and gas sourced sustainably. The company positions itself as a committed player in the global energy transition, targeting environmentally conscious consumers. Their website reflects a professional and consistent brand image with clear messaging about their services and mission. Technically, the site is built using modern frameworks such as Nuxt.js, hosted on Azure DNS infrastructure, and integrates third-party tools like Cookiebot for consent management and Zoho SalesIQ for customer engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with comprehensive policies and active consent mechanisms. Overall, the website demonstrates a mature digital presence suitable for a medium-sized energy company.

P

PLAYGROUNDS

lasalleouverte.ch

62

PLAYGROUNDS is a Swiss-based platform dedicated to providing information and community engagement around playgrounds, targeting families and children. The website is professionally designed with a consistent brand presence and offers detailed content relevant to its niche audience. Technically, the site leverages modern web technologies including Umbraco CMS, Google Maps API, and various JavaScript libraries to deliver an interactive user experience. Security-wise, the site enforces HTTPS, employs security headers, and integrates cookie consent mechanisms compliant with GDPR, although it lacks explicit security policy and incident response disclosures. Overall, the website demonstrates a solid security posture and good privacy compliance, with moderate technical performance and user experience.

P

PLAYGROUNDS

chindaktiv.ch

52

PLAYGROUNDS is a Swiss-based platform dedicated to providing information and community engagement around playgrounds, targeting families and children. The website is professionally designed with a consistent brand presence and offers key services such as playground information and event listings. The platform uses Umbraco CMS and integrates modern web technologies including Google Tag Manager, reCAPTCHA, and Google Maps API to enhance user experience and security. Cookie consent is implemented comprehensively, reflecting good privacy compliance practices. Security posture is strong with HTTPS and security headers in place, although no explicit security policy or incident response information is published. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

R

Reichle & De-Massari AG

rdm.com

55

Reichle & De-Massari AG (R&M) is a well-established global provider specializing in cabling and connectivity solutions for high-end communication networks since 1964. Their website reflects a professional B2B business model targeting industries such as Local Area Networks, Data Centers, and Public Networks. The company positions itself as a leader in telecommunications infrastructure solutions with a broad international reach. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates marketing and analytics tools such as HubSpot and Hotjar, indicating a mature digital presence. The site includes GDPR-compliant cookie consent mechanisms via Cookiebot, demonstrating attention to privacy regulations. Security-wise, while HTTPS is implied and cookie consent is managed, the absence of visible security headers and incomplete WHOIS data suggest areas for improvement in security posture and domain transparency. Overall, the website is professional and trustworthy but would benefit from enhanced security configurations and clearer domain registration information.

R

RADIX Schweizerische Gesundheitsstiftung

radix.ch

69

RADIX Schweizerische Gesundheitsstiftung is a Swiss non-profit health foundation dedicated to health promotion and prevention. The organization targets Swiss residents interested in improving their health and well-being through educational programs and services. The website reflects a professional and consistent brand image, with a clear focus on healthcare and public health sectors. The foundation operates with a medium-sized organizational footprint and leverages modern web technologies to engage its audience effectively. Technically, the website is built on the Umbraco CMS platform and integrates a variety of modern JavaScript libraries and APIs, including Google Tag Manager, reCAPTCHA, Cookiebot for consent management, and Google Maps API. The site demonstrates good mobile optimization and moderate performance, with a solid SEO foundation and basic accessibility features. From a security perspective, the site enforces HTTPS, employs strong security headers, and uses cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy and incident response information represents an area for improvement. Overall, RADIX.ch presents a trustworthy and professionally maintained online presence with strong privacy compliance and a clear focus on user data protection. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party script security to sustain and improve its security posture.

N

NaturaSì

naturasi.it

61

NaturaSì operates as a large retail e-commerce platform specializing in organic and natural products, primarily targeting health-conscious consumers in Italy. The website is built using modern web technologies such as Vue.js and Vuetify, providing a good user experience with mobile optimization and clear navigation. The site integrates Cookiebot for cookie consent management and Google Consent Mode to restrict ad and analytics storage by default, reflecting a basic level of privacy compliance. However, the absence of visible privacy policies, terms of service, and contact information limits transparency and user trust. Security posture is moderate with HTTPS enforced but lacks additional security headers and explicit incident response information. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security practices.

D

Denns BioMärkte

denns-biomarkt.de

69

Denns BioMärkte operates as a large-scale organic retail chain in Germany, offering a comprehensive range of organic products including food, fresh produce, bakery items, ecological drugstore goods, and natural cosmetics. The company is part of the BioMarkt Verbund, a recognized network of organic markets, and emphasizes certified organic products from reputable associations such as Bioland, Biokreis, Naturland, and Demeter. The website reflects a professional retail business model targeting general consumers interested in organic and ecological products. Technically, the website is built using modern frameworks like React and Gatsby, hosted on Microsoft Azure DNS infrastructure, and incorporates essential marketing and tracking tools such as Google Tag Manager and Facebook Pixel. The site includes a cookie consent mechanism via Cookiebot, indicating compliance efforts with GDPR regulations. Security-wise, while HTTPS is implied and cookie consent is implemented, the site lacks visible advanced security headers and formal security policies or incident response contacts. No blocking or WAF challenges were detected, allowing full content access. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security policies and transparency.

P

PCI Proxy

docvault.app

62

DocVault, operated by PCI Proxy, offers a specialized PCI compliant document vault solution enabling businesses to securely collect and validate sensitive customer documents without direct handling. Positioned as a niche leader, the company targets businesses requiring stringent PCI compliance in document processing. The website reflects a professional and consistent brand image with clear messaging and a focus on security and compliance. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for consent management, hosted on Webflow's platform with good performance and mobile optimization. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and detailed security or incident response policies, which could enhance trust and compliance. Overall, the site demonstrates a mature digital presence suitable for its business model and audience.

W

Wojewódzki Ośrodek Dokumentacji Geodezyjnej i Kartograficznej w Katowicach

orsip.pl

72

ORSIP 2.0 is a regional government geoportal operated by the Wojewódzki Ośrodek Dokumentacji Geodezyjnej i Kartograficznej in Katowice, Poland. It provides comprehensive spatial data services, including interactive map applications, open data access, and web map services for the Silesian Voivodeship. The platform targets public administration, local governments, researchers, and citizens interested in regional spatial information. The website is well-structured, professionally designed, and offers extensive content relevant to its audience. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, with a focus on accessibility and mobile optimization. The hosting and domain registration are stable and consistent with the official nature of the service. Security measures include HTTPS enforcement, DNSSEC, cookie consent mechanisms, and CAPTCHA on contact forms, reflecting a good security posture. While no explicit security policy or incident response contacts are published, the overall security and privacy compliance are strong, with GDPR-aligned cookie and privacy policies. The WHOIS data confirms legitimacy and long-term operation, supporting trustworthiness. No vulnerabilities or suspicious content were detected, and the site is safe for general audiences. Overall, ORSIP 2.0 represents a mature, reliable government geoportal with solid technical and security foundations, serving an important role in regional spatial data dissemination and public service.

P

PCI Proxy

pci-proxy.com

68

PCI Proxy is a technology company specializing in secure payment data management solutions. Their platform enables organizations to build and control payment flows securely by leveraging tokenization and compliance offloading, thereby minimizing PCI scope and preventing vendor lock-ins. The company targets businesses that require robust payment data security and compliance solutions, offering key services such as a Universal Token Vault and 3-D Secure authentication. The website demonstrates a professional digital presence with good mobile optimization and clear navigation, supported by modern web technologies including Webflow CMS, Google Analytics, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, but the overall professional presentation and use of trusted third-party services support a positive risk assessment. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing clearer contact and legal information to strengthen trust and compliance.

Appenzeller Bahnen is a regional transportation company operating rail services across the Swiss cantons of Appenzell Innerrhoden, Appenzell Ausserrhoden, and St.Gallen. The company provides travel information, ticketing, and group travel services, positioning itself as a key regional mobility provider. The website reflects a professional digital presence with clear branding and relevant content tailored to travelers in the region. Technically, the site is built on the Contao CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile-optimized and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and a published security policy or incident response contacts. Overall, the website is trustworthy, secure, and professionally maintained, supporting the company's business objectives effectively.

Toggenburg Tourismus operates the website toggenburg.swiss, serving as a regional tourism portal for the Toggenburg area in Switzerland. The site provides comprehensive information about the region's natural attractions, seasonal activities, and accommodations, targeting tourists and visitors interested in authentic nature experiences in the Swiss Alps. The business is positioned as a small, regional tourism promoter with a clear focus on hospitality and outdoor leisure. Technically, the website is built on the Contao Open Source CMS platform and employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and social sharing tools like ShareThis. Hosting is provided by Hostpoint, a reputable Swiss hosting provider. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website uses HTTPS with a valid SSL certificate and implements a detailed cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and some recommended security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business identity, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence for Toggenburg Tourismus, with good content quality and compliance. Strategic improvements in security headers and DNS security could further strengthen its posture.

M

Mosterei Möhl AG

moehl.ch

51

Mosterei Möhl AG is a well-established family-owned company specializing in the production and retail of apple juices and ciders, with a history spanning over 130 years. The company operates primarily in Eastern Switzerland and offers a diversified product portfolio including apple wines, ciders, and related beverages. The website reflects a professional and consistent brand image, targeting consumers interested in high-quality apple-based products and related experiences such as museum visits. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating analytics and marketing tools such as Google Analytics, LinkedIn Insight, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS, uses security headers, and manages cookie consent effectively, although it lacks explicit published security policies or incident response contacts. Overall, the site demonstrates a mature digital presence with moderate tracking and good privacy compliance, suitable for a medium-sized manufacturing and retail business.

Appenzellerland Tourismus AR operates a regional tourism website focused on promoting activities, accommodation, and restaurants in the Appenzellerland region of Switzerland. The website targets tourists and visitors seeking information and inspiration for their stay. The business model centers on tourism promotion and providing comprehensive regional information, positioning itself as a key regional tourism authority. Technically, the site is built on the Contao Open Source CMS, leveraging modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Plausible Analytics for privacy-friendly analytics. The site is well-optimized for mobile devices and includes good SEO practices. Security-wise, the website enforces HTTPS, implements cookie consent with granular controls, and uses reputable third-party services, reflecting a mature security posture. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and compliant with GDPR through Cookiebot integration, but could improve transparency by adding terms of service and contact information.

F

Feathr™

feathr.com

66

Feathr™ is a small retail business specializing in artisan wallpaper, wall murals, and fabrics created in collaboration with independent artists globally. The company emphasizes eco-friendly inks and modern designs, targeting consumers and interior design enthusiasts who value originality and craftsmanship. The website is built on WordPress with WooCommerce, integrating modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Cookiebot for privacy compliance. The technical infrastructure is solid, with good mobile optimization and SEO practices. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and branding suggest a genuine business. Privacy policy and terms of service are not explicitly found, indicating room for compliance improvement.

P

Plastenco design s.r.o.

plastenco.cz

64

Plastenco design s.r.o. is a Czech-based eco-design studio specializing in transforming local plastic waste into innovative design products using advanced 3D printing technology. The company targets exceptional firms and architects interested in sustainable design and circular economy principles. Their business model revolves around product design, custom projects, workshops, and collaboration with academic and technological partners. The website demonstrates a professional and modern digital presence built on SvelteKit, with multimedia content and active social media integration. Security posture is adequate with HTTPS and cookie consent, but lacks some security headers and formal privacy documentation. The absence of WHOIS data limits domain trust assessment, though the website content and partnerships support legitimacy. Overall, the site is well-designed, content-rich, and aligned with the company's sustainability mission.

H

Hive

hive.co

65

Hive is a specialized marketing platform designed for live event promoters, offering integrated tools for email and SMS marketing, CRM, automation, and analytics to optimize ticket sales. The platform integrates seamlessly with popular ticketing providers, enabling real-time data synchronization and targeted fan engagement. Hive positions itself as a niche leader in event marketing technology, supported by a professional website with comprehensive resources and customer testimonials. Technically, Hive leverages modern web technologies including Webflow CMS, Google Analytics, PostHog, and Cookiebot for consent management, ensuring a fast, mobile-optimized, and accessible user experience. The site employs secure HTTPS connections and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. From a security perspective, Hive demonstrates good practices such as HTTPS enforcement, secure form handling, and privacy compliance with GDPR indicators. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement. The WHOIS data is redacted, which is common but reduces transparency regarding domain ownership. Overall, Hive presents a trustworthy and professional online presence with strong business credibility and technical implementation. Strategic recommendations include enhancing security transparency, publishing incident response information, and improving direct contact availability to further strengthen trust and compliance.

S

Steiner Optics

steiner-optics.com

72

Steiner Optics is a specialized manufacturer and retailer of high-quality optics products targeting hunting, tactical, marine, and adventure markets. The website presents a professional and consistent brand image with a focus on quality optics equipment. The technical infrastructure is based on Drupal 10 CMS, integrating modern analytics tools such as PostHog and Google Analytics, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is good with HTTPS enabled and partial security headers, though improvements are recommended for full compliance and protection. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness despite the professional website presentation. No adult or questionable content is present, making the site safe for general audiences.

S

Sweden Abroad

swedenabroad.se

56

Sweden Abroad is an official Swedish government website providing comprehensive information about Sweden's embassies and consulates worldwide. It serves Swedish citizens abroad with travel advice and assistance information, as well as non-Swedish citizens interested in traveling or moving to Sweden. The site is well-positioned as a trusted government resource with a large global footprint through its network of over 100 foreign missions. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and Microsoft Application Insights for telemetry, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience across devices. Security-wise, the site enforces HTTPS and uses privacy-compliant tracking mechanisms, though it could improve by adding explicit security headers and publishing a security policy or vulnerability disclosure. Overall, the website demonstrates a strong security posture and high trustworthiness consistent with its government affiliation.

Zucchetti is a leading Italian company specializing in software, hardware, and related services for businesses, professionals, and public administration. The website presents a professional and business-focused digital presence, targeting primarily Italian enterprises and professionals. The company positions itself as a market leader in Italy with a comprehensive offering. Technically, the website employs a proprietary CMS with JavaScript frameworks such as MooTools and jQuery, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and SEO-friendly, though some modern security headers are missing. Security posture is solid with HTTPS and consent mechanisms but lacks explicit published security policies or incident response information. Overall, the site is safe, professional, and trustworthy with no adult or questionable content detected.

K

Kaegi.com

kaegi.com

62

Kaegi.com represents a Swiss chocolate wafer brand with a professional online presence focused on retail and brand marketing. The website is built on WordPress with modern SEO and analytics tools, indicating a moderate level of digital maturity. The site includes a comprehensive cookie consent mechanism, reflecting awareness of privacy compliance requirements. However, the absence of WHOIS data and domain registration information raises concerns about domain legitimacy. The security posture is generally good with HTTPS and cookie consent, but lacks some security headers and explicit privacy and terms policies. Overall, the website is safe and professional but would benefit from enhanced transparency and contact information.

T

thurgautravel.ch

thurgautravel.ch

64

Thurgautravel.ch is a Swiss-based travel agency specializing in worldwide river cruises, boasting over 20 years of experience. The website targets travelers interested in thematic and scenic river journeys across Europe, Asia, and South America. The business positions itself as a pioneer in the river cruise market, offering diverse travel experiences including active, gourmet, and city cruises. Technically, the site is built on WordPress and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized with good SEO practices and structured data implementation. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though lacks explicit security headers and published privacy or security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance documentation and security best practices.

M

Maestrani Schweizer Schokoladen AG

maestrani.ch

63

Maestrani Schweizer Schokoladen AG is a well-established Swiss family-owned chocolate manufacturer with a history dating back to 1852. The company produces and markets Swiss chocolate under its own brands Minor and Munz, operates a B2B webshop for promotional chocolates, and offers a visitor experience called Chocolarium. The website is professionally designed, multilingual, and provides comprehensive information about the company, its products, and career opportunities. Technically, the site is built on Drupal 10 with modern web technologies, is mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and consent management, though some security headers and explicit policies could be improved. Overall, the site reflects a mature digital presence aligned with the company's market position and business model.

R

Reisebüro Mittelthurgau Fluss und Kreuzfahrten AG

mittelthurgau.ch

60

Reisebüro Mittelthurgau Fluss und Kreuzfahrten AG is a Swiss travel agency specializing in sustainable and premium river cruises across Europe. The company offers a variety of travel packages including themed cruises, gourmet festivals, solo travel, and worldwide cruises, targeting discerning travelers interested in luxury and eco-friendly travel experiences. The website reflects a mature digital presence with a focus on user experience and clear business communication. Technically, the site leverages modern web technologies such as Vue.js and Concrete5 CMS, supported by robust analytics and marketing tools including Google Tag Manager, Hubspot, and Mouseflow. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Overall, the site demonstrates good compliance with privacy regulations and provides comprehensive contact and business information, reinforcing trustworthiness.

C

Cebia, spol. s r.o.

carolina.cz

60

Carolina.cz is a Czech Republic-based mobile application focused on vehicle management, offering services such as vehicle history verification, cost tracking, valuation, insurance, and financing. The app is co-owned by Cebia, spol. s r.o., a company specializing in automotive data services, and ESSOX s.r.o., a financial services provider. The website presents a professional and user-friendly interface with clear navigation and comprehensive content tailored to motorists in the Czech market. Technical infrastructure includes modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and integrates app download links for multiple platforms including Android, iOS, and Huawei AppGallery. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and published security policies. WHOIS data is missing, which impacts domain trustworthiness, though business legitimacy is supported by visible partnerships and contact information. Overall, the site demonstrates a solid digital presence with room for security and compliance enhancements.

V

Virgin Limited Edition

virginlimitededition.com

70

Virgin Limited Edition is a luxury hospitality brand offering exclusive retreats worldwide, owned by Sir Richard Branson's Virgin Group. The website presents a professional and consistent brand image targeting affluent travelers seeking ultra-luxury vacation experiences. The technical infrastructure leverages modern technologies including Microsoft Azure hosting, Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for bot protection, indicating a mature digital presence. Security posture is strong with HTTPS enforced and anti-CSRF protections, though improvements in security headers and explicit security policies are recommended. Privacy compliance is supported by a detailed cookie consent mechanism, but a formal privacy policy page was not detected. Overall, the website is safe, professional, and trustworthy, though the absence of WHOIS data and contact information slightly reduces credibility.

B

Beretta Defense Technologies

berettadefensetechnologies.com

65

Beretta Defense Technologies is a specialized defense technology company manufacturing advanced equipment for military and law enforcement sectors. The company operates under the Beretta holding umbrella, leveraging established brand recognition and partnerships with related defense brands. Their website presents a professional image with clear focus on defense technology products and solutions. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency. Overall, the company appears credible and professionally positioned in the defense sector, but could improve compliance and security transparency.

B

Beretta Defense

berettadefense.com

62

Beretta Defense is a defense sector company specializing in manufacturing and supplying a range of firearms and defense equipment including pistols, assault rifles, submachine guns, shotguns, and grenade launchers. They also provide armorer training courses and maintain product documentation to support law enforcement and military clients. The website presents a professional and consistent brand image targeting defense professionals and agencies. Technically, the site is built on WordPress with modern SEO and tracking tools, including Google Analytics and Cookiebot for cookie consent. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and published privacy or terms policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security practices.

I

iGP Gaming

igpgaming.com

60

iGP Gaming is a technology company specializing in providing tailored iGaming platform solutions to operators in the gaming industry. The website presents a professional and modern design built on WordPress with Elementor, targeting B2B clients seeking powerful gaming experiences. The company appears to be newly founded in 2024, consistent with the domain registration date. The site includes a comprehensive cookie consent mechanism via Cookiebot, indicating attention to privacy compliance, although explicit privacy policy and terms of service pages are not detected in the provided content. Technically, the site uses modern web technologies and integrates Google Tag Manager for analytics, but lacks some security headers and explicit security policies. Overall, the security posture is moderate with room for improvement in transparency and security best practices.

N

Nimblr

nimblrsecurity.com

73

Nimblr is a security awareness training provider focused on reducing IT security incidents caused by user actions through smart simulations and training. The company operates a professional website built on the HubSpot CMS platform, integrating modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, and Cookiebot for cookie consent management. The website is well-designed, mobile-optimized, and provides clear messaging about its services, targeting businesses seeking to improve their security culture. From a technical perspective, the site uses modern technologies and maintains good performance and SEO practices. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism but lacks explicit security headers and published security policies. The domain registration is consistent with the company's founding date and shows no suspicious patterns, enhancing trustworthiness. Overall, the website presents a moderate to good security posture with room for improvement in privacy compliance and contact transparency.

K

Kinet s.r.o.

vladeko.cz

50

Vladeko.cz is a Czech-based company specializing in the manufacturing and retail of wooden garden furniture and structures, including pergolas, altány, garden houses, and children's playground equipment. The company operates both a physical showroom in Tachlovice and an e-commerce platform, targeting homeowners, municipalities, and businesses interested in quality wooden garden products. Their business model combines custom woodworking services with online sales, supported by design, visualization, and installation offerings. The website reflects a mature digital presence with a clear product catalog and user-friendly navigation. Technically, the website is built on the PrestaShop CMS platform, utilizing modern web technologies such as Bootstrap for responsive design, Google Analytics and Tag Manager for tracking, and Cookiebot for consent management. The site is served over HTTPS with a good SSL configuration, though some security headers could be improved. Performance is moderate, with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits transparency, but the presence of physical contact information and partner links supports legitimacy. Overall, Vladeko.cz presents a trustworthy and professional online presence for a medium-sized retail and manufacturing business in the garden furniture sector. Strategic improvements in security headers and transparency around privacy and incident response would enhance their security posture and compliance standing.

Bonver Casino is an online gambling platform targeting the Czech market, offering exclusive casino games, slots, bonuses, and free spins. The website is professionally designed using modern web technologies such as React, Next.js, and Material-UI, indicating a moderate level of digital maturity. The presence of a cookie consent mechanism via Cookiebot and Facebook Pixel integration shows awareness of privacy and marketing needs. However, the absence of publicly available WHOIS data and lack of visible privacy policy or terms of service pages limit the transparency and trustworthiness of the business. Security posture appears basic with HTTPS implied but no detailed security headers or policies found. Overall, the site serves its niche audience but would benefit from enhanced transparency and security disclosures.

A

ASTRA GAMES s.r.o.

cassoclub.cz

57

ASTRA GAMES s.r.o. operates the cassoclub.cz website, providing gambling and lottery services primarily through physical casino and gaming hall locations across the Czech Republic. The company has an established presence since 2002 and offers membership services such as e-cards. The website is built on WordPress and integrates standard technologies including jQuery, Google Analytics, and Cookiebot for cookie consent management. The site is professionally designed with good navigation and mobile optimization, targeting adult gambling customers in the Czech market. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response information. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent mechanism. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is understandable given the business sector. Overall, the website is functional, professional, and compliant with key privacy regulations, serving its target audience effectively.

U

Ušetřeno.cz s.r.o.

usetreno.cz

67

Ušetřeno.cz s.r.o. operates a well-established Czech online platform specializing in comparison and brokerage services across energy, finance, insurance, and telecommunications sectors. The company offers consumers tools to compare prices and services such as energy suppliers, loans, mortgages, insurance policies, and mobile tariffs, aiming to help users save money efficiently. As part of the ČSOB group, Ušetřeno.cz benefits from strong market positioning and credibility within the Czech Republic. The website features a professional design, clear navigation, and interactive calculators that enhance user engagement and experience. Technically, the website leverages modern web technologies including Vue.js for frontend interactivity, Google Tag Manager for analytics, and Cookiebot for cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, although some accessibility features could be improved. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place; however, the absence of explicit security headers and a security.txt file indicates room for enhancement in security posture and incident response readiness. The WHOIS data for the domain is unavailable, which raises concerns about transparency and domain registration legitimacy. Despite this, the website's content quality, business information, and affiliation with a reputable financial group mitigate some trust concerns. Overall, the platform demonstrates a solid business and technical foundation with moderate security maturity, suitable for its consumer-facing financial services role. Strategic recommendations include implementing comprehensive security headers, publishing a vulnerability disclosure policy, enhancing accessibility compliance, and improving transparency around domain registration and incident response contacts to strengthen trust and security culture.

T

Toman Motors

tomanmotors.com

65

Toman Motors is a Czech Republic-based specialist in American and sports cars, offering import, sales, and servicing with a focus on exclusive brands such as Hennessey. The company positions itself as a premium provider with over a decade of market presence and a comprehensive portfolio of vehicles and automotive services. The website is professionally designed, mobile-optimized, and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent mechanisms, though the absence of explicit security policies and incident response information suggests room for improvement. A notable concern is the lack of WHOIS domain registration data, which impacts trust and legitimacy assessments. Overall, the site presents a credible business front but would benefit from enhanced transparency and security disclosures.

B

Brunswick Bowling

brunswickbowling.com

57

Brunswick Bowling is a well-established company specializing in high-performance bowling equipment and supplies, targeting bowlers of all skill levels. The company positions itself as a leading supplier in the retail bowling industry, offering a wide range of products including bowling balls, bags, shoes, and apparel. The website reflects a professional retail business model with a focus on e-commerce and brand consistency. Technically, the site is built on Craft CMS, hosted on DigitalOcean infrastructure, and employs modern web technologies such as Google Tag Manager, Facebook Pixel, and Cookiebot for tracking and consent management. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the website uses HTTPS, implements CSRF tokens, and has a cookie consent mechanism, but lacks explicit security policies and some security headers. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is trustworthy and professionally maintained but would benefit from publishing clear privacy and terms of service pages and providing explicit contact information to enhance compliance and user trust.

L

LaserMaxx74

lasermaxx74.fr

57

LaserMaxx74 is a small local entertainment business based in Annecy, France, specializing in laser game and quiz boxing activities. The company targets a broad audience including families and children aged 8 and above, offering event hosting for birthdays, corporate events, and bachelor/bachelorette parties. The website is professionally designed using modern web technologies and integrates booking services through a partner platform. The digital infrastructure includes analytics and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is typical and justified for this business type. Overall, the website presents a trustworthy and professional image suitable for its market niche.

S

SYNOT TIP, a.s.

synottip.sk

66

SYNOT TIP, a.s. operates a professional online sports betting and gaming platform primarily targeting Slovak customers. The website offers a variety of betting options including live bets, virtual games, and promotions, positioning itself as a leading player in the Slovak market. The company branding is consistent and the site content is relevant and professionally presented. Technically, the site uses a modern tech stack including ASP.NET, jQuery, and integrates third-party services such as Google Analytics, Hotjar, Zendesk, and Cookiebot for analytics, customer support, and privacy compliance. Security posture is solid with HTTPS enforced, anti-CSRF protections, and bot detection mechanisms in place. However, explicit security policies and incident response contacts are not published, and no terms of service page was found. Overall, the site is trustworthy and compliant with GDPR, with a comprehensive cookie consent mechanism. The domain WHOIS data aligns well with the business claims, reinforcing legitimacy.

K

Kingsbet

kingsbet.cz

64

Kingsbet is an online gambling and sports betting platform targeting the Czech market, offering online casino games, live casino, and sports betting services with promotional bonuses. The website is professionally designed with consistent branding and good content quality tailored for adult users interested in gambling. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager, Microsoft Clarity, and Cookiebot for cookie consent management. The site is accessible without any WAF or blocking mechanisms, indicating good availability. However, the absence of WHOIS data and lack of visible privacy policy or terms of service pages reduce transparency and trustworthiness. Security posture is moderate with HTTPS enforced but missing security headers and no explicit security or incident response policies disclosed.

N

NetAction.cz

netaction.cz

44

NetAction.cz is a small professional studio based in the Czech Republic specializing in the creation, management, and promotion of websites and e-shops. Established since 2000, the company offers comprehensive services including web development, SEO optimization, and marketing strategies aimed at increasing client revenue and online presence. The website is well-structured and provides detailed service descriptions and client references, indicating a mature business model focused on long-term client relationships. Technically, the website employs JavaScript, jQuery 1.7.2, and Cookiebot for cookie consent management. While the site is accessible and functional, it uses an outdated jQuery version and lacks modern security headers, which could pose security risks. The site includes a cookie consent banner compliant with GDPR, but lacks explicit privacy and terms of service pages, limiting full privacy compliance. Security posture is moderate with HTTPS presumably enabled (though SSL configuration details are not provided), and cookie consent mechanisms in place. However, the absence of security headers and outdated libraries suggest room for improvement. No vulnerabilities or malicious content were detected. The WHOIS data is missing, which reduces domain legitimacy verification and trustworthiness. Overall, the website is professional and business-focused with good content quality and user experience. Strategic recommendations include updating technical components, enhancing security headers, publishing comprehensive privacy and security policies, and improving domain registration transparency to strengthen trust and compliance.

T

Traficon Oy

traficon.fi

54

Traficon Oy is a Finnish specialist company focused on traffic planning and transportation consulting. Their website presents a professional image with clear contact details and a focus on expert services in traffic safety and planning. The company targets municipalities, infrastructure planners, and transport authorities, positioning itself as an established player in the Finnish transportation sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforced and appropriate security headers, alongside a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, the site lacks explicit security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is well-designed, mobile-optimized, and trustworthy, reflecting a mature digital presence for a small-sized professional services firm.

A

ASFAC

asfac.pt

56

ASFAC is a Portuguese association representing specialized credit institutions, focusing on industry representation, financial education, legislative updates, and statistical information. The website serves as an information hub for consumers and financial entities interested in specialized credit. Technically, the site is built on WordPress with Bootstrap and jQuery, incorporating modern analytics (Matomo) and a robust cookie consent mechanism (Cookiebot), reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though formal security and incident response policies are not published. Overall, the site is professional, compliant with GDPR, and trustworthy, with room for improvement in explicit security policy disclosures and contact information transparency.

N

Národní divadlo Brno

divadlojedarek.cz

51

Národní divadlo Brno operates the website divadlojedarek.cz, offering gift vouchers for theater performances in Brno. The site targets cultural consumers and gift buyers in the Czech Republic, providing an online platform for purchasing vouchers valid for one year. The business model focuses on enhancing theater attendance through flexible gift options. Technically, the site is built on WordPress with integration of modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. The website demonstrates good design quality, mobile optimization, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.

S

Spirii

spirii.com

68

Spirii is a Denmark-based company specializing in EV charging solutions and eMobility business platforms. Their offerings include a Charge Point Management System, an EV charging app, and a suite of services such as branded solutions, financial services, grid services, and operational support. The company operates across multiple European countries with dedicated offices and subsidiaries, positioning itself as an experienced and reliable player in the eMobility sector. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for privacy compliance, delivering a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, but the presence of VAT registration and detailed business information supports the company's credibility. Overall, Spirii presents a professional and trustworthy digital presence with room for improvement in transparency around security policies and domain registration details.

C

Centrum dopravního výzkumu, v. v. i.

kombinovanapreprava.cz

55

The website 'kombinovanapreprava.cz' represents the Centrum dopravního výzkumu, a research and informational center focused on continental combined transport. It provides transparent information, legislative guidance, and e-learning services with certification aimed at professionals and stakeholders in the transportation and logistics sectors. The site is built using modern web technologies including React, Gatsby, and Material UI, and incorporates Google reCAPTCHA v3 and Cookiebot for security and privacy compliance. The website is accessible without any WAF or security challenge blocking content. However, WHOIS data is unavailable, indicating privacy protection, which slightly reduces trustworthiness. The site lacks a visible privacy policy page and security.txt, which are recommended for compliance and security transparency.

K

KNDS Deutschland GmbH & Co. KG

kmweg.de

62

KNDS Deutschland GmbH & Co. KG is a leading European defense technology company specializing in the development, production, and support of military land systems. As part of the KNDS group, formed by the merger of Krauss-Maffei Wegmann and Nexter, the company offers comprehensive solutions including armored vehicles, artillery systems, training, logistics, and customer service. Their market position is strong, serving armed forces in over 50 countries with a broad product portfolio and extensive expertise. Technically, the website is built on modern frameworks such as Next.js and React, with cloud-hosted media assets and integrated analytics via Matomo. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS, domain protection statuses, and cookie consent mechanisms, though it lacks explicit public security policies or incident response contacts. No vulnerabilities or suspicious activities were detected, and the WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with the company's stature in the defense industry. Strategic improvements could focus on enhancing security transparency and formalizing vulnerability disclosure processes.

K

KNDS France

knds.fr

65

KNDS France is a leading European defense manufacturer specializing in air-land defense systems, including armored vehicles, artillery, and robotics. It operates as part of the KNDS Group, with a strong presence in France and multiple subsidiaries across Europe and globally. The company supports armed forces with comprehensive lifecycle services and is a key player in major defense programs such as SCORPION. Technically, the website is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and domain protections, though DNSSEC is not enabled. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and mature digital presence aligned with its business stature.

S

Symfonický orchestr hlavního města Prahy FOK

fok.cz

55

The website fok.cz represents the official Symphonic Orchestra of the City of Prague (FOK), a well-established cultural institution founded in 1934. It provides information about concert programs, educational activities, ticket sales, and orchestra profiles. The site is professionally designed using Drupal 11 CMS and Bootstrap, offering a responsive and accessible user experience. It includes GDPR-compliant cookie consent mechanisms and clear contact information, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate organization.