Security Directory

A

Aeris

aeris.de

71

Aeris operates a professional e-commerce website specializing in ergonomic office chairs and furniture designed to promote movement and comfort at work. The company targets office workers and businesses seeking ergonomic solutions, leveraging a Shopify platform with multilingual support and a comprehensive customer claims portal. The website is well-structured, with good content quality and consistent branding, supporting a medium-sized business presence in Germany. Technically, the site uses modern web technologies including Shopify, Google Analytics, Hotjar, and GDPR-compliant cookie consent mechanisms, ensuring a solid digital infrastructure. Security posture is strong with HTTPS enforced and no exposed sensitive data, although explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security transparency and accessibility. Strategic recommendations include publishing a security policy, adding a vulnerability disclosure channel, and enhancing accessibility features to further strengthen trust and compliance.

S

SiteOne, s.r.o.

siteone.cz

56

SiteOne, s.r.o. is a Czech-based digital agency specializing in design, development, and digital transformation services. The company positions itself as a stable partner for businesses seeking to translate their business goals into smart digital solutions. Their website demonstrates a professional and modern design, showcasing a strong portfolio of clients and testimonials, indicating a solid market presence in the technology sector. The company targets businesses looking for comprehensive digital solutions including web design, UX/UI, CMS and CRM integration, and technical consulting. Technically, the website employs modern JavaScript frameworks and tracking technologies such as Google Tag Manager, Google Analytics, Hotjar, and Microsoft Clarity. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, the absence of WHOIS data raises questions about domain registration transparency. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy and security best practices. Security headers are partially observed, but explicit CSP headers and security.txt files are not detected. No vulnerabilities or exposed sensitive data were found in the content. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main concern is the lack of WHOIS transparency, which should be addressed to enhance trustworthiness. Strategic recommendations include improving security header implementation, publishing incident response contacts, and adding vulnerability disclosure policies.

B

Born Digital s.r.o.

borndigital.ai

71

Born Digital s.r.o. operates the website borndigital.ai, offering an AI Agent platform designed to automate customer interactions and back-office workflows across multiple industries including finance, energy, telecommunications, and healthcare. The platform emphasizes no-code deployment, scalability, and integration of AI-powered automation tools such as digital humans and customer insight analytics. The company targets businesses seeking to enhance operational efficiency and customer engagement through intelligent automation solutions. The website presents a professional and consistent brand image with clear navigation and multilingual support, reflecting a mature digital presence for a company founded in 2020. Technically, the website is built on WordPress with Elementor, leveraging modern marketing and analytics technologies including Google Tag Manager, Hotjar, Microsoft Clarity, LinkedIn Insight, and HubSpot. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protection. However, it lacks visible security headers, published security policies, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is limited due to the absence of privacy and cookie policies and consent mechanisms, which poses compliance risks under GDPR and related regulations. Overall, the website demonstrates a solid business credibility and technical foundation but requires enhancements in privacy compliance and security transparency to strengthen trust and regulatory adherence. Strategic improvements in these areas will support the company’s growth and reputation in the competitive AI automation market.

R

ROWAN LEGAL, advokátní kancelář, s. r. o.

smartwhistle.cz

53

SmartWhistle.cz is a Czech Republic-based legal and compliance service platform specializing in whistleblowing solutions. The service is provided by ROWAN LEGAL, a well-established Czech law firm with over 30 years of experience and recognition in international legal rankings. The platform offers a comprehensive whistleblowing package including legal documentation, an online reporting tool, and outsourcing of responsible persons, targeting companies with 50 or more employees and public institutions. The website is professionally designed, mobile-optimized, and provides clear contact channels and business information. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, Google Analytics, Microsoft Clarity, Hotjar, and Smartlook for analytics and user behavior tracking. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though some security headers are not explicitly detected. The website demonstrates good performance and accessibility standards. From a security perspective, the site shows a mature posture with encrypted communications and anti-bot protections. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. The lack of WHOIS data reduces domain trustworthiness, but the professional presentation and business legitimacy mitigate concerns. Overall, SmartWhistle.cz is a credible and professional platform for whistleblowing compliance solutions in the Czech market, with strong legal backing and modern technical infrastructure. Strategic enhancements in security transparency and domain registration visibility would further strengthen trust and compliance posture.

U

UFC Collectibles

ufccollectibles.com

72

UFC Collectibles operates as an official licensed e-commerce store specializing in UFC memorabilia, targeting MMA fans and collectors. The business leverages Shopify's robust platform and integrates multiple marketing and analytics tools to optimize customer engagement and sales. The website demonstrates a professional design with clear branding and trust signals such as official partnership claims and customer reviews. Technically, the site is well-implemented with modern technologies, fast performance, and good mobile optimization. Security posture is solid with HTTPS enforcement and domain locking, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, UFC Collectibles presents a credible and trustworthy online retail presence with room for improvement in security transparency and DNS security.

S

Solarity

solarity.cz

51

Solarity is a Czech-based distributor and wholesaler specializing in photovoltaic systems, serving a broad B2B clientele across more than 50 countries. Their offerings include solar panels, inverters, battery storage, charging stations, and related accessories, complemented by financing options, technical support, and partner programs. The company maintains a professional online presence with a well-structured WordPress-based website optimized for SEO and user experience. Technically, the site leverages modern CMS tools and integrates analytics and marketing platforms with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and no exposed sensitive data, though additional security headers and explicit policies could enhance protection. Overall, Solarity presents a credible and trustworthy business with a strong digital footprint in the renewable energy sector.

P

PRK Partners s.r.o.

prkpartners.com

58

PRK Partners s.r.o. is a well-established legal services firm operating primarily in the Central European region, with offices in Prague, Ostrava, and Bratislava. The firm offers a broad range of legal advisory services including corporate law, mergers and acquisitions, and tax expertise. It holds a strong market position supported by multiple industry awards and partnerships, targeting businesses and professionals seeking high-quality legal counsel. The website is professionally designed, multilingual, and provides comprehensive information about services and recent news. Technically, the website is built on the Solidpixels CMS platform and integrates modern web technologies including Google Fonts, Google Analytics, Facebook Pixel, HotJar, and Leady tracking. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with a strong SSL configuration but lacks some advanced security headers, which could be improved. From a security perspective, the site implements a cookie consent mechanism aligned with GDPR requirements and provides detailed privacy and cookie policies. However, no explicit security policy or incident response contact information is found. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional nature of the site and trust indicators mitigate some risk. Overall, PRK Partners presents a credible and professional online presence with strong content quality and privacy compliance. The main risk lies in the lack of transparent domain registration data, which should be addressed to enhance trustworthiness and security posture.

C

Carl Stahl ARC GmbH

carlstahl-architektur.com

65

Carl Stahl ARC GmbH is a medium-sized German company specializing in stainless steel cable and net systems for demanding architectural projects. Their offerings include consulting, planning, static calculations, manufacturing, and installation services targeted primarily at architects, planners, and construction professionals. The company positions itself as a reliable partner providing flexible and sustainable solutions for architectural safety and design. Technically, the website is built on the Contao CMS and uses modern JavaScript libraries and services such as Weglot for multilingual support, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site is well-optimized for mobile and accessibility, with good SEO practices. Security-wise, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and some security headers. No explicit security or incident response policies are published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Marketin.no

marketin.no

66

Marketin.no is a Norwegian digital marketing and web development agency founded in 2018. The company specializes in creating digital concepts, SEO optimization, and managing measurable advertising campaigns such as Google Ads and Facebook Ads. Their market position is that of a results-driven agency targeting Norwegian businesses seeking to improve their online presence. The website is built on a modern tech stack including Next.js and integrates popular analytics and marketing tools like Google Tag Manager, Facebook Pixel, and Hotjar. While the website is professional and well-structured, it lacks critical privacy and cookie policies, which impacts GDPR compliance. Security posture is good with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and provides clear contact information and customer testimonials, supporting business credibility.

C

CLAGE VANNVARMERE

clage.no

51

CLAGE VANNVARMERE is a Norwegian company specializing in energy-efficient water heating solutions, primarily through-flow water heaters for showers, kitchens, and hand wash applications. The website presents a professional e-commerce platform built on WordPress with WooCommerce and Elementor, offering detailed product information and a catalog targeting consumers and businesses interested in sustainable water heating. The company holds the SINTEF GODKJENT certification, enhancing its trustworthiness in the energy sector. Technically, the site uses modern web technologies and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and incident response contact information. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is functional and professional but could improve in privacy and security transparency.

D

Dick Johnson

dickjohnson.fi

63

Dick Johnson is a Finnish e-commerce business specializing in men's cosmetics and apparel, targeting men who seek quality grooming products and stylish clothing. The company operates a Shopify-based online store with a clear market niche in men's grooming and fashion in Finland. The website is professionally designed with good content quality and consistent branding, supporting a positive user experience and trustworthiness. Technically, the site leverages modern e-commerce technologies and integrates multiple marketing and analytics tools, ensuring robust digital infrastructure and performance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trust. Strategic recommendations include enhancing security transparency and contact information to further improve trust and compliance.

B

Bizzdesign

bizzdesign.com

76

Bizzdesign is a well-established enterprise architecture software company, founded in 1999, offering a powerful SaaS platform designed to support organizations in their digital transformation journeys. The company holds a strong market position as a leader in the Gartner Magic Quadrant for EA tools for nine consecutive years, serving enterprise clients across various industries. Their key services include enterprise architecture management, business architecture, application portfolio management, and risk security management, targeting roles such as CIOs, enterprise architects, and business leaders. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, Hotjar, Pardot, and other marketing and analytics tools. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting is provided by Hosting Concepts B.V., and the domain is long-established and consistent with the business history. From a security perspective, the site enforces HTTPS with good SSL configuration and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy and X-Content-Type-Options are missing. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy and cookie policy and consent mechanism in place, though no explicit security policy or incident response contacts are published. Overall, the website presents a low risk profile with strong business credibility and digital maturity. Strategic recommendations include enabling DNSSEC, adding missing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to enhance trust and security posture.

L

Liveto

liveto.io

67

Liveto is a Finnish technology company specializing in comprehensive event management solutions including ticketing, access control, POS systems, and event applications. Established in 2017, Liveto serves event organizers primarily in Finland with a SaaS platform that integrates multiple event-related services. The website is built on HubSpot CMS and incorporates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar, demonstrating a mature digital infrastructure. Cookie consent is implemented via Cookiebot, indicating attention to privacy compliance, although explicit privacy policy and terms of service pages were not detected in the provided content. Security posture is generally good with HTTPS enabled and domain registration protected by privacy services, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Overall, Liveto presents a professional and trustworthy online presence with room for improvement in explicit privacy and security disclosures.

K

KM Beta a.s.

kmbeta.cz

59

KM Beta a.s. is a well-established Czech manufacturer specializing in building materials for rough construction, including roofing tiles, masonry systems, ceiling systems, and dry mortar mixes. The company targets construction professionals and homeowners within the Czech Republic, offering a comprehensive product portfolio and regional sales support. The website reflects a professional and consistent brand image with clear navigation and rich content, supporting the company's market position as a leading local manufacturer. Technically, the website employs modern web technologies such as JavaScript, Google Tag Manager, Hotjar, and a cookie consent management system, ensuring good performance, mobile optimization, and accessibility. The site uses HTTPS with strong SSL configuration, but lacks some security headers and explicit security policies, which could be improved to enhance security posture. Security-wise, the site demonstrates good practices like encrypted connections and cookie consent but lacks visible incident response or vulnerability disclosure information. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and business information appear legitimate and trustworthy. Overall, KM Beta's digital presence is strong, with good privacy compliance and user experience. Strategic improvements in security policy transparency and domain registration clarity are recommended to further strengthen trust and compliance.

W

Wienerberger

wienerberger.cz

72

Wienerberger.cz is the Czech Republic website for Wienerberger, a leading manufacturer of building materials including bricks, roof tiles, facing bricks, and paving products. The site targets construction professionals and homeowners seeking quality building solutions. The company is positioned as a major player in the manufacturing sector with a broad product portfolio. Technically, the website is built on Adobe Experience Manager, leveraging modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and Hotjar for user behavior analysis. The site is well-optimized for SEO and mobile devices, with good design and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be further verified. The absence of WHOIS data limits domain trust verification, but the professional presentation and compliance with GDPR indicate a legitimate business. Overall, the website is secure, compliant, and professionally maintained, supporting Wienerberger's market presence.

W

Webaula Oy

webaula.fi

58

Webaula Oy is a Finnish technology company specializing in WordPress website development, digital marketing, and analytics services. Established in 2012 and based in Vaasa, Finland, the company has completed over 450 projects, positioning itself as a reputable local service provider. Their website reflects a professional and consistent brand image, targeting businesses seeking tailored WordPress solutions and digital marketing expertise. The company leverages modern web technologies and popular analytics tools to deliver optimized digital experiences. Technically, the website is built on WordPress using the Understrap theme and Elementor page builder, integrating multiple third-party services such as Google Analytics, Facebook Pixel, Hotjar, and Crisp Chat. Hosting appears to be managed by Cloud City Oy, consistent with the domain registrar and nameservers. The site demonstrates good mobile optimization, SEO practices, and moderate performance, although accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly present, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is transparent and consistent with the business information, supporting the legitimacy of the domain. Overall, Webaula Oy presents a trustworthy and professional online presence with a solid technical foundation and compliance posture. Strategic enhancements in security headers, privacy policy visibility, and accessibility would further strengthen their digital maturity and risk management.

Betsul.bet.br is an online gambling platform focused on sports betting and casino games, targeting the Brazilian market. The site claims government authorization and highlights its credibility with a Reclame Aqui RA 1000 seal. The platform offers a variety of betting options including sports, e-sports, and live casino games, catering to adult users interested in regulated online gambling. Technically, the site uses modern web technologies including Cloudflare DNS, Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is served over HTTPS and uses Cloudflare for DNS and likely CDN services, providing a solid security foundation. However, the site lacks visible privacy policies, cookie consent mechanisms, and terms of service pages, which are critical for compliance with privacy regulations such as GDPR. No direct contact information or incident response contacts are found, which may impact user trust and compliance. Overall, the site is professionally designed with good content quality and moderate SEO and accessibility features. The WHOIS data is consistent with the business claims, showing a domain registered with Cloudflare nameservers and an expiry date in 2025, aligning with the recent regulatory environment for gambling in Brazil.

G

GORDIC spol. s r.o.

gordic.cz

66

GORDIC spol. s r.o. is a well-established Czech software company specializing in information systems for public administration and private sector clients. With over 30 years of experience, the company offers a broad portfolio including cybersecurity, cloud services, and training. Their market position is strong within the Czech Republic, supported by compliance with GDPR, ISO standards, and ISMS frameworks. The website reflects a mature digital presence with professional design and comprehensive service offerings. Technically, the site leverages modern frameworks such as Liferay and React, integrates multiple analytics and marketing tools, and maintains good performance and accessibility standards. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contacts could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy indicated by the website content and compliance programs. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure policies, and increasing transparency on data retention.

Green REV Institute operates the European Vegan Summit, a pioneering non-profit event platform in Poland and Europe that connects activists, politicians, business leaders, and academics to promote veganism, climate action, and animal rights. The organization focuses on advocacy, networking, and education to foster a sustainable and ethical food system. The website reflects a professional and consistent brand image with clear messaging targeted at stakeholders interested in vegan activism and policy change. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager and Hotjar, indicating a moderate to advanced digital maturity. The presence of a cookie consent mechanism with granular controls demonstrates good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be added for enhanced protection. Overall, the site is trustworthy, well-maintained, and aligned with its mission.

G

Green REV Institute

greenadvocacyacademy.eu

42

Green Advocacy Academy is a Polish non-profit educational project focused on empowering young people for climate advocacy and food system transformation. It is operated by Green REV Institute, a recognized green vegan think tank active in multiple international advocacy coalitions. The website uses WordPress with modern block editor plugins and includes analytics tools such as Google Tag Manager and Hotjar. While the site is well designed and content-rich, it lacks explicit privacy and cookie policies and security headers, which are important for GDPR compliance and security posture. No contact emails or phone numbers are directly visible, but social media channels are active and linked. The domain registration is consistent and legitimate, supporting the credibility of the organization.

F

Fundacja Green REV Institute

roslinnaszkola.pl

44

Roślinna Szkoła is a Polish non-profit initiative advocating for plant-based meals in schools as part of a broader green transformation focused on climate-friendly and ethical food systems. The website serves as an educational and advocacy platform, promoting awareness about sustainable food choices and supporting local communities and activists. Technically, the site is built on WordPress with modern plugins and accessibility features, hosted by a Polish registrar. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is limited due to missing explicit policies and consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

G

Green REV Institute

futurefood4climate.eu

48

Future Food 4 Climate is a Polish non-profit coalition focused on transforming the food system towards plant-based, ethical, and ecological choices. It operates through advocacy, education, and coalition building, targeting policymakers and civil society. The website is built on WordPress with modern plugins and tracking tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some security headers and formal privacy policies. WHOIS data indicates a legitimate domain registration consistent with the organization's profile.

F

FRS Syltfähre GmbH & Co. KG

frs-syltfaehre.de

67

FRS Syltfähre GmbH & Co. KG is a well-established regional ferry operator providing car and passenger ferry services between Havneby on Rømø and List on Sylt. The company operates up to 32 daily departures, catering primarily to tourists and travelers seeking reliable and comfortable transportation across the North Sea. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service information including booking, schedules, fares, and travel tips. The company is part of the larger FRS group, indicating a stable market position and operational backing. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating analytics tools such as Microsoft Clarity, Google Tag Manager, and Hotjar for user behavior insights. Hosting and DNS are managed via Cloudflare, enhancing performance and security. Accessibility features and SEO best practices are well implemented, contributing to a positive user experience across devices. From a security perspective, the site enforces HTTPS and uses reputable third-party services, with no evident vulnerabilities or exposed sensitive data. Privacy and cookie policies are clearly presented with consent mechanisms, aligning with GDPR requirements. However, explicit security headers and incident response policies are not prominently disclosed, representing an area for improvement. Overall, the website demonstrates a strong security posture, good privacy compliance, and solid business credibility. The risk level is low, with recommendations focusing on enhancing security header implementation, publishing incident response information, and maintaining vigilance on third-party scripts.

G

Green REV Institute

greenrev.org

55

Green REV Institute is a Polish non-profit organization dedicated to advocating for sustainable food systems, animal rights, and climate action. The organization operates through educational programs, advocacy campaigns, coalition building, and publication of reports and magazines. Their target audience includes activists, experts, policymakers, and informed consumers interested in environmental and social justice. The website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and integrates third-party services like Stripe and Hotjar for payments and analytics. Security posture is good with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers are recommended. The WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the website is professional, content-rich, and trustworthy, serving as an effective platform for the organization's mission.

W

Worldsoft AG

worldsoft-partner.website

60

Worldsoft-Partner.website is a German-language franchise platform operated by Worldsoft AG, a Swiss company established in 2000. The website offers a turnkey business concept for individuals and entrepreneurs to start their own internet agency, leveraging Worldsoft's 20+ years of experience and a large customer base. The business model focuses on creating mobile-optimized websites quickly using proprietary tools, supported by online training, marketing materials, and personal coaching. Technically, the site uses a modern JavaScript stack with multiple analytics and marketing integrations, including Google Analytics, Facebook Pixel, LinkedIn Insight, Hotjar, and Elfsight widgets. The website is mobile-optimized and well-structured, providing a professional user experience. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and visible security headers. Privacy compliance is partially met with a privacy policy linked externally but lacks a cookie consent mechanism. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

I

Information Week

informationweek.com

73

InformationWeek is a well-established technology news and analysis media brand founded in 1979 and currently owned by Informa PLC. The website serves IT professionals and business leaders by providing in-depth coverage of IT management, artificial intelligence, cybersecurity, cloud computing, and data privacy. It holds a strong market position as a trusted source of technology insights. Technically, the website employs a modern technology stack including JavaScript frameworks, New Relic monitoring, and various analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and content-rich, though the lack of publicly available WHOIS data slightly impacts trust scores.

H

Hansel Oy

hansel.fi

75

Hansel Oy is a Finnish government-owned company specializing in centralized public procurement services. The website serves as an official portal for public sector organizations in Finland to access procurement frameworks and related services. The company holds a strong market position as a key government procurement facilitator, focusing on efficiency and compliance. The website content is professionally presented, targeting public sector entities with clear information about services and privacy practices. Technically, the site employs modern JavaScript frameworks such as Alpine.js and HTMX, integrates consent management via Cookiebot, and uses analytics tools like Hotjar and Piwik Pro. The security posture is robust with HTTPS enforcement, security headers, and monitoring via Sentry, although some legacy libraries like jQuery 2.2.4 could be updated. Privacy compliance is well addressed with a comprehensive privacy policy and explicit cookie consent mechanisms. Overall, the site is trustworthy, secure, and well-aligned with its government service mission.

E

Ekokompassi

ekokompassi.fi

75

Ekokompassi is a Finnish non-profit organization providing an industry-independent environmental management system tailored to organizations with expert assistance. The website reflects a focused service offering in environmental consultancy, targeting organizations seeking to improve their environmental practices. The domain is well-established since 2009 and registered transparently under Suomen luonnonsuojeluliitto ry, reinforcing trust and legitimacy. Technically, the site is built on WordPress with modern SEO and analytics tools, including Google Analytics, Hotjar, and Cookiebot for consent management. Security posture is good with HTTPS enforced and standard security practices, though DNSSEC is not implemented and no explicit security or incident response policies are published. Privacy compliance is basic with a cookie consent mechanism but lacks a clearly visible privacy policy or terms of service on the homepage. Overall, the site is professional, accessible, and trustworthy, with room for improvement in privacy transparency and DNS security.

R

Rideer Nordic Oy

tilausajot.net

52

Tilausajot.net, operated by Rideer Nordic Oy, is a well-established Finnish online platform specializing in competitive bidding for charter taxi and bus transportation services. Founded in 2011, it serves a broad audience including private individuals, companies, and associations across Finland. The platform facilitates efficient request and offer management, supported by a growing network of transportation providers. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Maps API, and Cloudflare for security and performance. It integrates comprehensive analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, balanced with a detailed cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and Cloudflare protection, though some security headers could be improved. The domain registration is consistent and transparent, reinforcing business legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly service with good privacy and security practices.

S

Syndicat des Villes & Communes luxembourgeoises

syvicol.lu

63

The Syndicat des Villes & Communes luxembourgeoises (Syvicol) website serves as the official online presence for the Luxembourg municipal syndicate, focusing on promoting and defending the interests of cities and communes in Luxembourg. The site targets local government entities and provides information relevant to their collective interests. The business model is that of a non-profit government association, with a clear focus on advocacy and representation within the public sector. Technically, the website employs modern web technologies including Bootstrap icons, Google Fonts, Google Tag Manager, Hotjar analytics, and Cookiebot for cookie consent management. The site is served over HTTPS, ensuring secure communication. The presence of a detailed cookie consent mechanism indicates a commitment to privacy compliance, although explicit privacy and terms of service pages were not detected in the provided content. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, bot protection via Google reCAPTCHA, and controlled script loading through Google Tag Manager. However, the absence of visible security headers and lack of explicit security policies or incident response contacts suggest areas for improvement. The WHOIS data is unavailable or malformed, which reduces domain trustworthiness, but the official .lu domain and professional site design mitigate some concerns. Overall, the website is professional, secure, and compliant with basic privacy standards, but it would benefit from publishing clear privacy policies, terms of service, and contact information to enhance trust and compliance. Strategic recommendations include improving security headers, adding vulnerability disclosure mechanisms, and enhancing accessibility features.

L

lux-airport

lux-airport.lu

53

Luxembourg Airport operates as a key regional transportation hub offering passenger and cargo air services with over 100 destinations and 14 airlines. The airport provides comprehensive services including parking, transport options, shopping, dining, and special assistance, targeting travelers and business passengers. The website demonstrates a mature digital presence with multilingual support, modern technologies, and strong branding consistency. Technical infrastructure is based on WordPress with integrations for analytics, accessibility, and cookie compliance. Security posture is solid with HTTPS and privacy mechanisms, though explicit security headers and incident response policies are absent. WHOIS data is unavailable, limiting domain trust verification, but the professional website and official social media presence support legitimacy. Overall, the airport's digital platform is well-structured, user-friendly, and compliant with GDPR, serving its audience effectively.

E

Empat.tech

empat.tech

70

Empat.tech is a Ukrainian-based technology company specializing in custom software and mobile app development services, targeting startups and enterprises globally. Established in 2013, the company has completed over 300 projects across 23 markets, serving clients including Fortune 500 companies and Y Combinator alumni. Their service portfolio includes mobile app development, fintech software, product development, and dedicated developer hiring, positioning them as a trusted partner in the technology sector. The website reflects a professional and consistent brand image with strong trust signals such as client testimonials, press mentions, and industry recognitions.

C

CoronaWhy

coronawhy.org

66

CoronaWhy is a volunteer-driven, international non-profit research organization focused on leveraging artificial intelligence and data science to support the global fight against COVID-19. The organization coordinates over a thousand volunteers worldwide to analyze COVID-19 related data and provide actionable insights to the medical community. Their partnerships with reputable organizations such as NASA JPL, Google Cloud, and CGI enhance their technical capabilities and credibility. The website reflects a mature digital presence with professional design, multimedia content, and active social media engagement. Technically, the site uses modern web technologies including Webflow CMS, Google Analytics, and reCAPTCHA, ensuring good performance and security posture. However, the absence of explicit privacy policies, terms of service, and direct contact information slightly reduces privacy compliance and business credibility scores. Overall, CoronaWhy demonstrates a strong commitment to transparency, collaboration, and scientific rigor, positioning itself as a trusted resource in the COVID-19 research community.

A

American Mathematical Society

ams.org

71

The American Mathematical Society (AMS) is a well-established non-profit organization dedicated to advancing mathematical research, education, and professional development. The website serves as a comprehensive portal for AMS's diverse offerings including publications, memberships, conferences, grants, and advocacy efforts. The AMS holds a strong market position as a leading mathematical society with a global reach and a history dating back to 1888. The site targets mathematicians, educators, students, and professionals, providing valuable resources and community engagement opportunities. Technically, the website employs modern web technologies such as Bootstrap 5, jQuery, MathJax, and integrates multiple analytics and tracking tools including Google Analytics, Hotjar, and Microsoft Clarity. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. Overall, the AMS website reflects a mature digital infrastructure supporting a reputable organization. The lack of WHOIS data is mitigated by consistent branding, comprehensive contact information, and domain name alignment. The security and privacy practices align well with expectations for a large non-profit educational entity. Strategic recommendations include enhancing security headers, publishing a dedicated security policy and incident response contacts, and ongoing monitoring of third-party scripts to maintain security integrity.

S

STT Viestintäpalvelut

viestintapalvelut.fi

56

STT Viestintäpalvelut is a Finnish media communication service provider specializing in enhancing brand visibility through comprehensive media communication tools, press release distribution, communication planning, and visual communication services. The website is professionally designed using HubSpot CMS and integrates modern marketing and analytics technologies such as Google Analytics, Hotjar, and HubSpot's own lead and messaging tools. While the technical infrastructure is solid with HTTPS and cookie consent mechanisms in place, the site lacks explicit privacy and terms of service pages, as well as visible contact information, which slightly impacts its privacy compliance and business credibility scores. Security posture is generally good but could be improved by adding security headers and incident response information.

A

Agile Partner

agilepartner.net

54

Agile Partner is a medium-sized technology company based in Luxembourg, specializing in custom software development and agile transformation services. With over 18 years of experience and a team of approximately 50 professionals, the company targets businesses seeking tailored digital solutions and agile coaching to support their digital transformation. The website is professionally designed, multilingual (French and English), and provides clear information about their services, certifications, and contact details. Technically, the site is built on WordPress and leverages modern JavaScript libraries and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and HubSpot, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS domain registration data is a notable concern, reducing trust in domain legitimacy despite the professional presentation. Overall, the website is functional, secure, and business-focused, but would benefit from enhanced transparency in domain registration and security documentation.

P

PayFast (Pty) Ltd

paygate.co.za

69

PayFast (Pty) Ltd operates a secure and scalable online payment gateway primarily serving businesses in South Africa. The company offers a comprehensive payment processing platform designed to support merchants with efficient and reliable payment solutions. Their market position is solid within the regional fintech space, leveraging modern web technologies and integrations to provide a seamless user experience. The website reflects a mature digital infrastructure with WordPress CMS, SEO optimization, and multiple analytics and marketing tools integrated. Security posture is good with HTTPS enforced and domain registration consistent with the business identity, though some security headers and policies could be improved. Privacy compliance is evident with clear privacy and cookie policies and GDPR considerations. Overall, the business credibility is high with consistent branding and trust signals such as social media presence and structured data.

D

Digioh

digioh.com

70

Digioh is a technology company specializing in marketing efficiency solutions for ecommerce businesses. Their platform offers customizable quizzes, pop-ups, identity resolution, and personalization tools designed to increase conversion rates and customer engagement. The company positions itself as a leading marketing efficiency suite trusted by over 3,000 innovative companies. Technically, the website is built on modern frameworks such as Webflow and integrates widely used marketing and analytics tools including Google Tag Manager, Hotjar, and Facebook Pixel. The site demonstrates excellent design quality, mobile optimization, and SEO practices. Security-wise, the site enforces HTTPS and uses secure third-party services, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or data source limitations, which slightly reduces trustworthiness. Overall, Digioh presents a professional and credible online presence with strong marketing capabilities.

G

Donor Advised Fund Payment Option | Chariot

givechariot.com

52

The website www.givechariot.com is an active Wix-hosted site with basic business presence but lacks detailed business, compliance, and contact information. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Technically, the site uses standard Wix technologies and includes third-party marketing and analytics tools such as Hotjar and Apollo.io, indicating some level of digital maturity. However, the lack of visible privacy policies, cookie consent mechanisms, and security headers suggests a weak security posture and poor privacy compliance. Overall, the site appears to be a small-scale business or project with limited online presence and trust indicators.

O

Online Factory s.r.o.

smartform.cz

50

Smartform.cz is a Czech-based technology company operated by Online Factory s.r.o., specializing in form data validation and enrichment services. Their offerings include postal address autocompletion and validation, company data validation, email verification, name validation, and reverse geocoding. The company targets a broad audience ranging from small e-commerce shops to large enterprises, providing SaaS solutions with API integration and subscription pricing. The website demonstrates a strong market position with over 1000 companies relying on their services, including notable clients, and offers a professional, well-branded online presence.

B

Blackfish

blackfish.co

57

Blackfish is a well-established 360° software development and design studio based in the Czech Republic, founded in 2017. The company positions itself as an industry leader in Denmark and the Czech Republic, offering a comprehensive range of services including brand identity, UX/UI design, front-end and back-end development, 3D visuals, motion design, and marketing strategy. Their clientele includes notable companies, supported by strong trust indicators such as Clutch awards and Deloitte recognition. Technically, the website is built on WordPress with modern analytics and tracking tools integrated, demonstrating a mature digital infrastructure. Security posture is good with HTTPS and domain protection, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service on the homepage. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

G

Geniuso, s. r. o.

geniuso.sk

52

Geniuso, s. r. o. operates an e-commerce platform specializing in interactive talking books and educational accessories for children and teenagers. Their product line includes sound books paired with electronic pens that enhance learning and engagement. The company positions itself as a niche provider in the educational retail sector within Slovakia, emphasizing the importance of paper books in a digital era. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools with user consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent, though some security headers could be improved. WHOIS data confirms the legitimacy and consistency of the business identity. Overall, the website presents a trustworthy and user-friendly platform for its target audience.

C

CAR4WAY a.s.

car4way.cz

58

CAR4WAY a.s. operates a Czech Republic-based carsharing and vehicle leasing service, targeting individuals and businesses interested in flexible vehicle access solutions. The website presents a professional and consistent brand image with a clear focus on transportation services such as carsharing, operational leasing, and car rental. The business model is centered on providing smart mobility solutions to a general audience within the Czech market. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and various UI libraries, complemented by analytics and marketing tools such as Google Tag Manager, Hotjar, and Adform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

L

Louda Auto

autolouda.cz

68

Louda Auto is a large, well-established automotive dealership and service provider in the Czech Republic, founded in 2004. It operates as the largest certified dealer for 12 automotive brands with 18 branches nationwide, offering new and used vehicle sales, leasing, carsharing, and servicing. The website reflects a mature digital presence with modern technologies such as Blazor Server, Bootstrap, and multiple analytics and tracking tools. Privacy and cookie policies are implemented with clear consent mechanisms, supporting GDPR compliance. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

Z

ZAK TV

zaktv.cz

48

ZAK TV is a regional television broadcaster serving the Plzeňský and Karlovarský regions of the Czech Republic. The website offers live streaming of current broadcasts, an archive of programs, and services such as advertising and studio rental. The business operates as a small media entity with a consistent brand presence and active social media channels. Technically, the site uses a mix of legacy and modern web technologies including jQuery, Fancybox, AOS, and Clappr for video playback, supported by Google Analytics and Hotjar for analytics and user behavior tracking. While the site is accessible and professionally designed, it lacks critical privacy and cookie policies, which impacts GDPR compliance. Security posture is moderate with no visible security headers and no explicit SSL/TLS configuration details provided. Overall, the site is functional and credible but would benefit from enhanced security and privacy measures.

T

TUkas a.s.

tukas.cz

47

TUkas a.s. is a large, authorized automotive dealership and service provider operating in Prague, Czech Republic. The company represents seven major automotive brands including Kia, Dacia, Renault, Opel, Volvo, ŠKODA, Volkswagen, and Audi. Their business model focuses on new and used car sales, authorized servicing, and operational leasing, targeting both individual consumers and business clients. The website reflects a professional presence with clear branding and multiple partner brand logos, indicating a strong market position within the automotive retail and service sector in the region. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating modern tools such as Google Tag Manager, Hotjar, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and includes structured data for SEO enhancement. Security measures include HTTPS, Google reCAPTCHA v3, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website content and branding suggest a legitimate and established business. Security posture is moderate with good SSL configuration and use of anti-bot measures, but lacks explicit security policies or incident response information. Privacy compliance is good with visible privacy and cookie policies and GDPR indicators. Overall, the website is safe for general audiences, with no adult or explicit content detected. The site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, though improvements in security headers and WHOIS transparency are recommended. Strategic recommendations include enhancing security headers, maintaining up-to-date software, improving accessibility, and publishing clear security and incident response policies to strengthen trust and compliance.

K

Košice Región Turizmus

kosiceregion.com

65

Košice Región Turizmus operates a comprehensive tourism portal dedicated to promoting the Košice region in Slovakia. The website offers rich content including destination guides, cultural and natural attractions, event information, and travel tips aimed at tourists and visitors. The organization positions itself as a regional tourism authority, providing valuable resources to enhance visitor experience and regional visibility. The site supports multiple languages, enhancing accessibility for international tourists. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates popular analytics and marketing tools such as Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks some security headers and formal privacy and terms of service documentation. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the website content and branding appear professional and trustworthy. Overall, the site is a well-maintained regional tourism platform with moderate technical maturity and good user experience.

N

nedomysleno s.r.o.

ceskehrady.cz

48

Hrady CZ is a Czech cultural festival focusing on summer events held at historical castles and monuments across multiple regions. The website is professionally designed with good content quality, providing detailed event information, ticket sales, and partner listings. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and CDN hosting via Cloudfront, with integrated analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent implemented, though some HTTP security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data limits domain trust assessment, but the presence of detailed contact information and active social media channels supports legitimacy. Overall, the site is suitable for its target audience and business purpose.

U

Urban Innovative Actions

uia-initiative.eu

53

Urban Innovative Actions (UIA) is a European Union initiative dedicated to promoting pilot projects for sustainable urban development across European cities. The website serves as a platform to disseminate information about ongoing projects, news, events, and knowledge resources aimed at urban policymakers and stakeholders. The UIA operates under the EU framework, providing funding and guidance to innovative urban projects. Technically, the website is built on Drupal 8 CMS, leveraging modern front-end libraries such as Slick Slider and Chosen.js, and integrates analytics tools like Google Analytics and Hotjar with privacy-conscious configurations such as IP anonymization and cookie consent mechanisms. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. The site is well-structured, mobile-optimized, and accessible, providing a professional user experience. However, it lacks explicit privacy policy and terms of service pages, which are recommended for full GDPR compliance. Overall, the website is trustworthy, well-maintained, and aligned with its EU institutional backing.

S

Spolek Prague Prade

praguepride.com

65

Spolek Prague Prade operates as the largest LGBT+ organization in the Czech Republic, focusing on advocacy, community events, and fostering a respectful and safe environment for LGBT+ individuals. The website is bilingual (Czech and English) and provides comprehensive information about its mission and activities. Technically, the site is built on WordPress with several plugins for SEO, analytics, and cookie consent, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and standard security headers present, alongside a robust cookie consent mechanism. However, the absence of WHOIS data raises concerns about domain registration transparency, which could impact trust. Overall, the site is professional and trustworthy but would benefit from enhanced transparency regarding domain registration and published security policies.