Security Directory

H

Harley-Davidson® Praha

harley-davidson-praha.cz

51

Harley-Davidson® Praha is an established authorized dealer and service center for Harley-Davidson motorcycles located in Prague, Czech Republic. Founded in 2005, the company offers a comprehensive range of services including new and used motorcycle sales, rentals, authorized servicing, and retail of branded clothing and accessories. The website reflects a strong brand presence with consistent Harley-Davidson branding and a clear focus on motorcycle enthusiasts and potential buyers in the local market. The business model integrates retail, service, and event engagement, positioning it as a key player in the regional motorcycle retail sector. Technically, the website employs modern JavaScript libraries such as jQuery and Glide.js for UI components, integrates Facebook SDK and Google Tag Manager for marketing and analytics, and uses Google reCAPTCHA for form security. Hosting is provided by Wedos, a Czech hosting provider, consistent with the domain's WHOIS data. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected in the HTML content, and there is no visible security policy or incident response information published. Tracking and retargeting scripts are present but managed with user consent. The WHOIS data is consistent and transparent, supporting the legitimacy of the business. Overall, the website demonstrates a good balance of content quality, technical implementation, and privacy compliance, with a solid business credibility score. Strategic improvements in security headers and published security policies would enhance the security posture and trustworthiness further.

S

Silnice LK a.s.

silnicelk.cz

50

Silnice LK a.s. is a regional transportation service company specializing in the maintenance and upkeep of roads, greenery, and related infrastructure within the Liberecký kraj region of the Czech Republic. The company provides essential services including summer and winter road maintenance, vegetation management, and repair of road components, positioning itself as a key regional player in transportation infrastructure services. The website reflects a professional and consistent brand image, targeting local government entities, residents, and road users in the region. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, jQuery, and Bootstrap, hosted likely within the Czech Republic under a reputable registrar. The site uses Insite CMS, supports mobile optimization, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and employs cookie consent with default denial of storage, indicating a privacy-conscious approach. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing security and incident response policies, and expanding accessibility features to further strengthen the security posture and user trust.

A

Asociace autoškol ČR, z.s.

asociaceautoskol.cz

47

Asociace autoškol ČR, z.s. is a Czech non-profit association dedicated to improving the quality and standards of driving schools and driver education in the Czech Republic. The organization provides educational seminars, develops innovative testing materials including hazard perception videos, and offers support services such as an ombudsman for driving schools and students. It maintains partnerships with government bodies and safety organizations, positioning itself as a key stakeholder in national driver education and road safety. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google services such as reCAPTCHA v3 and Google Analytics. The site is mobile-optimized with a good user experience and clear navigation. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements, although a formal privacy policy page is not found. From a security perspective, the site uses HTTPS and bot protection but lacks visible security headers and formal security policies. No critical vulnerabilities were detected in the content or scripts. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, but the professional presentation and official contact information mitigate concerns. Overall, the website is a credible and professional platform supporting a non-profit association with a clear mission in driver education. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

W

WebView

webview.pt

47

WebView is a Portuguese digital communication company specializing in creating and developing digital experiences including UI/UX design, websites, microsites, and mobile applications. The company positions itself as a full-service agency offering end-to-end solutions from design and development to hosting and SEO. Their portfolio indicates a mature business with over 20 years of experience and a substantial client base. Technically, the website is built on Joomla CMS with modern JavaScript libraries and uses Matomo analytics, reflecting a moderate level of digital maturity and privacy awareness. Security posture is adequate with HTTPS enforced but lacks advanced security headers and visible incident response mechanisms. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and security practices.

ALEA - Ação Local de Estatística Aplicada is an educational project affiliated with the Instituto Nacional de Estatística in Portugal. It provides educational resources, challenges, and statistical information aimed primarily at students, educators, and the general public interested in statistics and civic education. The platform is well-positioned as a government-supported initiative to enhance statistical literacy and education in Portugal. Technically, the website is built on Joomla! CMS with Bootstrap and jQuery frameworks, offering a responsive and moderately performant user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable resource for its audience.

A

AMT - Autoridade da Mobilidade e dos Transportes

amt-autoridade.pt

59

AMT - Autoridade da Mobilidade e dos Transportes is a Portuguese government regulatory authority responsible for overseeing and supervising the mobility and transport sectors including terrestrial, railway, maritime, and fluvial transport. The organization provides regulatory frameworks, consumer protection, public consultations, and knowledge management services. It holds a strong national position as the official transport regulator in Portugal, serving a broad audience including consumers, transport operators, and government stakeholders. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Video.js, ensuring good mobile optimization and accessibility. The site uses HTTPS with an excellent SSL configuration and integrates Google Analytics for user tracking with appropriate cookie consent mechanisms. However, some security headers are missing, and there is no explicit security policy or incident response information published. From a security perspective, the site demonstrates good practices including secure video embedding and no exposed sensitive data. The absence of a security.txt file and incident response contact points are areas for improvement. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business purpose and country. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen the security posture and user trust.

C

CICAP

cicap.pt

42

CICAP is a Portuguese arbitration center specializing in consumer conflict resolution, offering services such as information, mediation, conciliation, and arbitration primarily within the Porto Metropolitan Area. The website is professionally designed using WordPress and modern plugins, providing a clear presentation of its services and legal framework. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. The absence of direct contact emails and phone numbers on the analyzed content limits immediate user engagement. Technically, the site uses HTTPS and standard security practices but could improve by adding security headers and a vulnerability disclosure policy. Overall, CICAP presents a trustworthy and regionally focused service with room for enhanced privacy and security transparency.

Associação Nacional do Ramo Automóvel (ARAN) is a Portuguese national association representing the automotive sector. The organization provides member support, training, publications, and events to automotive professionals and companies in Portugal. The website reflects a mature and professional digital presence with clear branding and comprehensive content tailored to its target audience. The association recently renewed its leadership, signaling ongoing organizational vitality. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap, jQuery, and Font Awesome. It incorporates GDPR-compliant cookie consent mechanisms and uses Google Analytics for traffic analysis. The site is mobile-optimized and structured with SEO best practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating good baseline security hygiene. However, no advanced security headers were detected, and there is no public security policy or incident response contact information. The absence of a vulnerability disclosure or security.txt file suggests room for improvement in transparency and security maturity. Overall, ARAN's website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers and incident response disclosures would further strengthen its security posture and stakeholder confidence.

Beira Amiga is a small non-profit association based in Portugal focused on consumer defense and legal support. The organization collaborates with local government and legal entities to promote consumer rights and awareness. Their website serves as an informational and community engagement platform, primarily targeting consumers and legal professionals in the Viseu region. The site is built on WordPress and uses common JavaScript libraries such as jQuery and bxSlider for UI elements. While the site is functional and provides clear contact information, it lacks key compliance documents such as privacy and cookie policies, which are critical for GDPR compliance. Security posture is basic with no advanced security headers or DNSSEC enabled, though HTTPS is used throughout. No signs of tracking or advertising scripts were found, indicating minimal user tracking.

T

TRIAVE - Centro de Conflitos de Consumo do Vale do Ave/Tribunal Arbitral

triave.pt

47

TRIAVE is a regional consumer arbitration tribunal serving the Vale do Ave area in Portugal, integrated within the national consumer arbitration network. It provides dispute resolution services, complaint handling, and consumer support, targeting local consumers and municipalities. The website is professionally designed using WordPress and modern web technologies, with good mobile optimization and clear navigation. Privacy and cookie policies are implemented with GDPR compliance, and contact information is clearly presented. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and a vulnerability disclosure policy. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

C

Confederação do Comércio e Serviços de Portugal

ccp.pt

48

Confederação do Comércio e Serviços de Portugal (CCP) is a well-established Portuguese confederation representing the commerce and services sectors. The organization provides economic data, legal information, events, and member support services, positioning itself as a key player in promoting competitiveness and innovation within Portugal's commerce and service industries. The website reflects a professional and consistent brand image, targeting Portuguese businesses and stakeholders in these sectors. Technically, the website is built on WordPress with modern libraries such as jQuery, Owl Carousel, and FancyBox. It employs Google Analytics for tracking and uses a cookie consent mechanism compliant with GDPR. The site is hosted likely on SiteGround, with moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent registration. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

A

ASFAC

asfac.pt

56

ASFAC is a Portuguese association representing specialized credit institutions, focusing on industry representation, financial education, legislative updates, and statistical information. The website serves as an information hub for consumers and financial entities interested in specialized credit. Technically, the site is built on WordPress with Bootstrap and jQuery, incorporating modern analytics (Matomo) and a robust cookie consent mechanism (Cookiebot), reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though formal security and incident response policies are not published. Overall, the site is professional, compliant with GDPR, and trustworthy, with room for improvement in explicit security policy disclosures and contact information transparency.

A

APED - Associação Portuguesa de Empresas de Distribuição

aped.pt

50

APED (Associação Portuguesa de Empresas de Distribuição) is a Portuguese association representing retail distribution companies. The website serves as a portal for information about the association's strategic axes, social organs, member areas, news, and initiatives. It targets retail companies and stakeholders in Portugal, providing documentation and support to its members. The site is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and Swiper for interactive elements. The technical infrastructure is modern and mobile-optimized, with good SEO and accessibility basics. Security posture is solid with HTTPS and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is addressed with cookie consent and a privacy policy, but terms of service and vulnerability disclosure policies are absent. Overall, the site is professional, trustworthy, and well-aligned with the business it represents.

E

European Automobile Manufacturers' Association

futuredriven.eu

59

The website represents the European Automobile Manufacturers' Association (ACEA) and serves as a platform to promote their #FutureDriven initiative focused on the EU automotive industry's future, sustainability, and mobility revolution. It provides policy recommendations, manifestos, and multimedia content targeting policymakers, industry stakeholders, and the public. The technical infrastructure is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response contacts are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for a large industry association.

L

La Stampa

lastampa.it

65

La Stampa is a prominent Italian news media organization providing comprehensive news coverage on politics, economy, and current events in Italy and worldwide. The website serves a broad general audience with a professional digital news publishing model supported by subscriptions and advertising. Technically, the site employs modern JavaScript libraries, asynchronous loading, and third-party services for analytics and advertising, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility practices, though some accessibility features could be enhanced. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks publicly documented security policies or incident response procedures. Overall, the website is trustworthy and professionally managed, with no signs of blocking or malicious activity.

A

American Planning Association

planning.org

69

The American Planning Association (APA) operates planning.org as the leading membership organization for professional planners in the United States. The website serves as a comprehensive resource hub offering membership services, professional certification (AICP), publications, conferences, career resources, and policy advocacy. APA holds a strong market position as the largest and most authoritative planning organization, targeting planners, students, employers, and government officials. The website's content is rich, professionally presented, and well-structured to support its diverse audience. Technically, the site employs a modern tech stack including Bootstrap, jQuery, HubSpot marketing tools, and integrates multiple analytics and advertising platforms. The site is mobile-optimized and accessible, with good SEO practices.

K

K2

k2centrum.se

54

K2 is Sweden's national knowledge center for public transportation, serving as a collaborative platform where academia, public authorities, and industry stakeholders converge to discuss and develop collective mobility solutions. The organization is supported and financed by Lund University, Malmö University, VTI, and regional governmental bodies, positioning it as a key player in Sweden's transportation research and development landscape. The website reflects a professional and well-structured digital presence, offering research publications, educational courses, events, and partnership information targeted at researchers, practitioners, and students in the field of public transport. Technically, the website is built on WordPress with modern web technologies including jQuery and responsive CSS, ensuring good mobile optimization and accessibility. The site employs HTTPS with a strong SSL configuration, though it lacks some advanced security headers and cookie consent mechanisms. The presence of a secure newsletter subscription form indicates attention to data collection security, but privacy compliance could be enhanced with clearer cookie policies and vulnerability disclosure information. From a security perspective, the site demonstrates a solid baseline with HTTPS and secure form handling but would benefit from implementing additional HTTP security headers and publishing incident response or vulnerability disclosure policies. The absence of WHOIS data for the exact queried subdomain is a minor concern but likely due to querying the subdomain rather than the base domain. Overall, the site is trustworthy, professional, and safe for general audiences. Strategically, K2 should focus on enhancing privacy compliance by adding cookie consent and detailed privacy notices, improving security posture with security headers, and publishing clear vulnerability disclosure and incident response contacts to build further trust and compliance with GDPR and related regulations.

W

WP App Studio

wpappstudio.com

63

WP App Studio is a specialized WordPress development platform offering a Platform-as-a-Service (PaaS) solution that enables users to build and maintain WordPress web applications efficiently without coding. The company targets WordPress developers and makers, providing tools for app design, code generation, and plugin creation. The business operates under eMarket Design LLC, with a domain registered since 2012, indicating established market presence. The website is professionally designed with clear navigation and relevant content, supporting a good user experience and trustworthiness. Technically, the site leverages WordPress CMS, various plugins, and third-party libraries, hosted on infrastructure involving Amazon Registrar and Cloudflare DNS services. Security posture is solid with HTTPS and domain protection statuses, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with room for enhanced security and privacy practices.

M

MYRIAD-EU

myriadproject.eu

52

MYRIAD-EU is a European Union funded research project focused on developing a harmonised framework for multi-hazard, multi-sector, and systemic risk management. The project addresses interconnected risks such as droughts, floods, and their cascading effects on ecosystems, energy, finance, food, infrastructure, and tourism sectors. The website presents detailed information about the project, its pilots across Europe, and its mission to improve disaster prevention and mitigation through scientific collaboration. Technically, the website is built on WordPress, uses modern JavaScript libraries like jQuery and Slick, and integrates analytics tools such as Google Tag Manager and Matomo. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms, though it lacks explicit privacy and terms of service pages. Security posture is good with HTTPS enabled, but could be improved with additional security headers and published policies. WHOIS data is privacy protected, which is typical for EU projects, and does not detract from the site's legitimacy. Overall, the site is professional and trustworthy, serving as an informative platform for the MYRIAD-EU project.

E

ERTRAC

ertrac.org

74

ERTRAC is a European advisory council focused on road transport research and innovation, aiming to coordinate and promote sustainable, safe, and efficient mobility solutions. The website reflects a mature and professional organization targeting policymakers, researchers, and industry stakeholders in the transportation sector. The digital infrastructure is built on WordPress with modern plugins and themes, providing a good user experience with mobile optimization and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy and well-maintained, supporting ERTRAC's role as a key player in European transport research.

F

FEHRL

augmentedccam.com

56

AUGMENTED CCAM is a European research project focused on advancing the readiness of Physical, Digital, and Communication infrastructure to support large-scale deployment of Cooperative, Connected and Automated Mobility (CCAM) solutions. Funded by the European Union's Horizon Europe programme and the Swiss State Secretariat for Education, Research and Innovation, the project provides research, tools, workshops, and dissemination resources to stakeholders in the transportation infrastructure sector. The website serves as a portal for project information, partner details, news, and resources, targeting researchers, infrastructure operators, and policymakers.

M

Memento Historia - Magazín o dávné a ještě dávnější historii

memento-historia.cz

41

Memento Historia is a Czech-language online magazine dedicated to ancient and medieval history, providing educational articles and multimedia content such as podcasts on YouTube. The website targets history enthusiasts and the general public interested in historical topics, operating primarily as a content publisher monetized through advertising networks like Seznam SSP and Google Ads. The site demonstrates a consistent and professional brand presentation with a good quality of content and user experience. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Google Fonts, and integrates analytics and advertising scripts from Google and Seznam. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers, and no explicit privacy or cookie policies are found, though a cookie consent mechanism is present. The WHOIS data for the domain is unavailable, which limits the ability to verify domain registration legitimacy and age. Despite this, the website appears professionally maintained with active content updates and social media presence. No critical security vulnerabilities or adult content were detected, and the site is safe for general audiences. Overall, Memento Historia is a niche media site with solid content and technical foundation but would benefit from improved transparency in privacy policies, enhanced security headers, and WHOIS data availability to strengthen trust and compliance.

A

Apex Timing - Solutions logicielles pour les loisirs multiactivités et sports mécaniques

apex-timing.com

59

Apex Timing is a specialized software company providing comprehensive management solutions for leisure centers and karting activities, including leisure karting and competitive karting. The company offers integrated tools such as certified cash registers, online booking, timing systems, and customer management, serving a global clientele across 53 countries with over 800 clients. Their business model focuses on SaaS subscriptions and partnerships with other leisure and sports technology providers. Technically, the website is built on WordPress with Elementor and related plugins, delivering a professional and responsive user experience. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and incident response documentation are recommended. Overall, the company presents a trustworthy and mature digital presence, though the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy.

R

Repsol

repsol.pt

69

Repsol Portugal operates as a major energy supplier providing electricity, gas, and related services to individual consumers. The website is well-branded and professionally designed, targeting retail customers with a clear focus on energy solutions and customer benefits. The technical infrastructure leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools including Google Tag Manager, Adobe Web SDK, and Gigya, and employs security best practices such as HTTPS and reCAPTCHA. However, the absence of explicit privacy and terms of service policies on the accessible pages indicates room for improvement in compliance transparency. Overall, the security posture is strong with proper headers and no detected vulnerabilities, but privacy compliance could be enhanced by publishing comprehensive policies and contact points for incident response.

Childhood Education International is a well-established international non-profit organization focused on advancing education and child development globally since 1892. The organization operates a professional website that highlights its global network, educational services, publications, and partnership opportunities. The site targets educators, donors, and partners interested in international development and education innovation. The business model centers on collaboration, professional learning, and advocacy to improve educational outcomes worldwide. The organization maintains a reputable market position with certifications and trust indicators supporting its credibility. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and multiple analytics and marketing tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting and DNS are managed via reputable providers, with Cloudflare DNS and GoDaddy registrar. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks DNSSEC and explicit security headers. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and terms of service are present and GDPR compliant. However, no explicit security policy or incident response contacts were identified, suggesting room for improvement in security governance. Overall, the website presents a professional, trustworthy, and content-rich platform for its audience. The risk profile is low with minor security enhancements recommended. Strategic focus on publishing security policies and enabling DNSSEC would strengthen the security posture and trust further.

The website kontrolatachometru.cz is an official government platform operated by the Czech Ministry of Transport, providing a service to verify vehicle odometer readings based on VIN numbers. It serves vehicle owners and buyers in the Czech Republic by displaying mileage data collected during technical inspections and emission tests. The platform is positioned as a trusted public service to enhance transparency and prevent odometer fraud. Technically, the site uses a modern ASP.NET MVC framework with popular frontend libraries such as jQuery, Bootstrap, AdminLTE, and DataTables, hosted by Active24. The site is moderately performant, mobile-optimized, and includes CAPTCHA protection to prevent automated abuse. Security posture is adequate but could be improved by adding explicit security headers and publishing privacy and cookie policies. No analytics or advertising scripts were detected, indicating minimal user tracking. Overall, the site is professional, trustworthy, and safe for general audiences.

The European Environment and Sustainable Development Advisory Councils Network (EEAC Network) is a well-established non-profit organization that unites advisory bodies from national and regional governments across Europe. It provides independent advice on climate change, environment, and sustainable development, facilitating collaboration through working groups, conferences, and publications. The network has a strong presence with eighteen member councils from thirteen countries, reflecting a significant role in shaping environmental policy in Europe. Technically, the website is built on Drupal 10, leveraging modern libraries such as jQuery, Swiper.js, and Font Awesome, hosted by Xynta Hosting B.V. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and incident response policies. Privacy compliance is basic with privacy and cookie policies present but no consent mechanism. Overall, the website is professional, trustworthy, and serves its target audience effectively.

The European Environment and Sustainable Development Advisory Councils Network (EEAC Network) is a well-established non-profit organization that unites advisory bodies from national and regional governments across Europe. It focuses on providing independent advice related to climate change, environment, and sustainable development. The network facilitates collaboration through working groups, conferences, and publications, serving as a key platform for environmental policy advisory in Europe. The website reflects a professional and consistent brand presence, targeting government entities, policymakers, and experts in sustainability. Technically, the website is built on Drupal 10 with modern libraries such as Swiper.js and Font Awesome 6, hosted by Xynta Hosting B.V. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is adequate with privacy and cookie policies present, though a cookie consent mechanism is missing. Overall, the website is trustworthy and professionally maintained, with clear contact information and social media presence. There are no signs of malicious activity or content safety concerns. Strategic improvements could focus on enhancing security transparency and GDPR compliance mechanisms.

C

Connected Automated Driving

connectedautomateddriving.eu

46

Connected Automated Driving is a European-focused knowledge base and community platform dedicated to Connected, Cooperative and Automated Mobility (CCAM). The website serves as a hub for research, innovation projects, policy updates, standards, and data sharing related to automated driving technologies. It targets researchers, policymakers, industry stakeholders, and the broader CCAM community, providing structured information and event updates to support the advancement of automated mobility in Europe. Technically, the site is built on WordPress with modern plugins and analytics tools such as Google Analytics and Matomo, ensuring a good level of digital maturity and user engagement tracking. The site is well-structured, mobile-optimized, and SEO-friendly, with clear navigation and consistent branding. Security-wise, the website enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, it lacks explicit security headers and incident response information, which could be improved. The domain WHOIS data is not publicly available due to EURid privacy policies, but the website's professional presentation and EU funding acknowledgments support its legitimacy. Overall, the site presents a trustworthy and valuable resource for the CCAM community with moderate to high security and privacy compliance.

Á

Área Metropolitana de Lisboa

aml.pt

47

Área Metropolitana de Lisboa (AML) is a regional government organization coordinating development policies across 18 municipalities in the Lisbon metropolitan area. The website serves as an official portal providing information on regional initiatives, cultural events, social development, and transport authority functions. AML holds a key position as a metropolitan authority facilitating economic, social, and environmental strategies in coordination with local governments. The site targets residents, local authorities, and stakeholders interested in regional development and public services. Technically, the website is built on WordPress with Bootstrap and jQuery, optimized for performance using WP Rocket, and supports multilingual content via Weglot. It employs modern web standards, including HTTPS, CSP, and cookie consent mechanisms, ensuring a secure and privacy-compliant user experience. Security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website reflects a professional, trustworthy, and well-maintained digital presence for a government entity.

E

European Automobile Manufacturers' Association

acea.be

52

The European Automobile Manufacturers' Association (ACEA) is a prominent industry association representing Europe's major car, truck, van, and bus manufacturers. The website serves as a comprehensive platform for industry news, data, publications, and advocacy efforts focused on advancing sustainable and innovative mobility solutions in Europe. ACEA positions itself as the authoritative voice of the EU automotive sector, emphasizing zero-emission transport and technological progress. The site is professionally designed, mobile-optimized, and rich in relevant content for stakeholders and the public. Technically, the website is built on WordPress with modern plugins and frameworks such as Yoast SEO, Bootstrap, and jQuery. It leverages external services for analytics (Google Analytics, Tag Manager) and marketing (MailPoet, AddEvent). Hosting appears to be provided by SiteGround, ensuring good performance and reliability. The site implements GDPR-compliant privacy and cookie policies with explicit consent mechanisms, reflecting a mature approach to privacy compliance. From a security perspective, the site uses HTTPS with strong SSL configuration and employs cookie consent tools. While explicit security headers are not fully visible in the HTML, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the security posture is solid but could benefit from enhanced header implementation and vulnerability disclosure mechanisms. The domain WHOIS data aligns well with the website's claims, showing consistent registrant information and domain age appropriate for an established industry association. No suspicious patterns were found, supporting the site's legitimacy and trustworthiness. The website's content is safe for general audiences, with no adult or questionable material present. Overall, ACEA's website demonstrates a high level of professionalism, technical maturity, and compliance, making it a reliable resource for automotive industry stakeholders and the public.

N

Národní divadlo Brno

ndbrno-onlinearchiv.cz

47

The website 'Archiv NDB – Online archiv' serves as an online archive for the National Theatre Brno, providing detailed historical information about theatre premieres, roles, and persons from 1884 to the present. It targets theatre enthusiasts, artists, students, and researchers interested in the cultural heritage of the National Theatre Brno. The site is professionally designed with consistent branding and links to official partner sites, establishing a trustworthy presence in its niche cultural sector. Technically, the site is built on WordPress with common plugins and a custom theme, hosted by Wedos, a known Czech hosting provider. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS usage but missing key security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional, safe, and credible but would benefit from enhanced security and compliance measures.

D

DUOSEG

duoseg.com

48

DUOSEG is a Portuguese insurance consultancy specializing in a broad range of personal and business insurance products, including niche offerings such as motorsport insurance and affinity partnerships. The company positions itself as a trusted partner for both individuals and enterprises, supported by client testimonials and partnerships with major insurance providers. The website is built on a modern WordPress platform using the Avada theme and several popular plugins, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides clear contact channels, enhancing user experience and business credibility. Security posture is generally good with HTTPS enforced and secure forms, but lacks advanced security headers and visible privacy compliance documentation. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, though the website content and external references support its authenticity. Strategic improvements in privacy compliance, security headers, and domain registration transparency would strengthen overall trust and compliance.

B

BARBOT

barbot.pt

49

BARBOT is a well-established Portuguese paint brand with a history spanning over 100 years, offering a wide range of paint products and professional services. The website targets both consumers and professionals in Portugal, providing product catalogs, color consultancy, and DIY project inspiration. The digital infrastructure is built on WordPress with WooCommerce and Elementor, indicating a mature e-commerce platform with modern web technologies. Security posture is strong with HTTPS enforcement and CAPTCHA on login forms, though there is room for improvement in security headers and published policies. Privacy compliance is basic, with a cookie consent banner but no explicit privacy or terms of service pages detected. Overall, the website is professional, trustworthy, and well-positioned in the retail paint market in Portugal.

C

Confederação do Desporto de Portugal

cdp.pt

46

Confederação do Desporto de Portugal is a Portuguese sports confederation representing various sports organizations and promoting sports activities nationally. The website is built on WordPress using the Divi theme and incorporates SEO enhancements via Rank Math. It demonstrates a moderate level of digital maturity with good design, mobile optimization, and SEO practices. Security posture is adequate with HTTPS enabled and SSL well configured; however, the absence of security headers and vulnerability disclosure mechanisms indicates room for improvement. Privacy compliance is minimal due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance documentation.

F

Fédération Internationale de Motocyclisme

fim-moto.com

58

The Fédération Internationale de Motocyclisme (FIM) operates as the global governing body for motorcycle sport and motorcycling activities. It commands a strong market position as the authoritative international federation, organizing multiple world championships and providing comprehensive regulatory frameworks. The website serves a diverse audience including motorcycling enthusiasts, federations, and members of the FIM family, offering news, official documents, event calendars, and educational resources. Technically, the site is built on TYPO3 CMS and integrates modern analytics tools such as Matomo and Google Tag Manager, alongside multimedia content from YouTube and Google Maps APIs. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced, but could benefit from additional security headers and explicit security policies. Despite the strong digital presence and professional content, the absence of WHOIS registration data for the domain introduces a notable risk factor. This inconsistency may be due to privacy protection or a lookup failure but warrants further investigation. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the website reflects a mature and professional digital asset for an international sports federation, with recommendations focusing on enhancing security headers, clarifying domain registration status, and publishing incident response information.

I

International Motorcycling Federation (FIM)

fim-heritage.com

61

The FIM Heritage Programme website serves as a digital platform for the International Motorcycling Federation's initiative to conserve and promote motorcycle competition heritage worldwide. It offers certification services for historic competition motorcycles and organizes historic events to engage enthusiasts and collectors. The site is professionally designed with clear navigation and rich content targeted at motorcycle fans and stakeholders in the heritage community. Technically, the website employs modern frameworks such as Bootstrap and jQuery, with responsive design and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and incident response information. The absence of WHOIS registration data raises some legitimacy concerns, but the strong branding and external links to official FIM domains support authenticity. Overall, the site is a credible resource for motorcycle heritage with room for security and transparency improvements.

F

Fédération Internationale de Motocyclisme

fim-awards.com

49

The Fédération Internationale de Motocyclisme (FIM) operates the FIM Awards website to celebrate and recognize world champions in motorcycling disciplines globally. The site serves as an informational and promotional platform for annual award ceremonies, trophies, and related motorcycling events. It targets motorcycling enthusiasts, sports professionals, and stakeholders within the motorcycling sports community. The organization positions itself as a reputable international non-profit entity dedicated to the sport's promotion and recognition. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Google Tag Manager and Matomo for analytics, and integrates Google Maps API for location services. The site demonstrates good mobile optimization, SEO practices, and a professional design, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses reputable analytics tools. However, it lacks explicit security headers and does not provide visible incident response or vulnerability disclosure information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and branding strongly indicate a legitimate organization. Overall, the website presents a professional and trustworthy front for the FIM Awards, but improvements in transparency regarding domain registration, security policies, and contact information would enhance trust and compliance. Strategic recommendations include implementing security headers, publishing incident response contacts, and verifying domain registration details to strengthen credibility and security posture.

F

FIM (Fédération Internationale de Motocyclisme)

fim-touring.com

48

FIM Touring is a specialized international organization dedicated to promoting motorcycle touring and leisure activities worldwide. The website serves as an information hub for events, challenges, and loyalty programs targeting motorcycle enthusiasts globally. It leverages a modern Drupal 9 CMS infrastructure with common web technologies and integrates social media and tracking pixels for marketing purposes. The site is hosted on SiteGround and uses HTTPS with a clientTransferProhibited domain status, indicating a reasonable security baseline. However, there are gaps such as lack of DNSSEC, security headers, and explicit security or incident response policies. Privacy and cookie policies are present but basic, and no direct contact information is publicly displayed. Overall, the website is professional, relevant, and trustworthy for its niche audience.

The website www.ceske-knizni-novinky.cz is a Czech-language informational portal dedicated to providing extensive listings and descriptions of new book releases primarily for the year 2025 and previous years. It targets Czech-speaking readers interested in literature across various categories including women, men, children, youth, and multiple genres such as fantasy, historical, and detective books. The site aggregates content and links to a reputable external book database (CBDB.cz) for detailed book information. The business model is content aggregation and informational service with a niche focus on the Czech book market. The site is small in scale with consistent branding and good content quality.

REGBU.COM is a Czech-based online media website launched in 2021, offering articles across various lifestyle and technology categories. The site uses WordPress CMS with multilingual support via TranslatePress and monetizes through Google AdSense advertising. The technical infrastructure includes Cloudflare DNS and standard web technologies such as jQuery and Google Fonts. While the site is accessible and uses HTTPS, it lacks critical compliance documents such as privacy policy and terms of service, and does not provide explicit contact information. Security posture is moderate with no advanced security headers or DNSSEC enabled. Overall, the site appears to be a small-scale media outlet with basic digital maturity and moderate security controls.

K

Kresťanskodemokratické hnutie

kdh.sk

55

Kresťanskodemokratické hnutie (KDH) is a Slovak political party representing conservative Christian-democratic values. The website serves as an official communication platform providing information about the party's program, representatives, and news updates. It targets conservative voters and citizens interested in Christian democratic principles. The party is established with a domain age since 2003 and is a member of the European People's Party, indicating a strong political network and legitimacy. Technically, the website is built on WordPress 6.8.2 using the Breakdance page builder plugin, integrated with GDPR-compliant cookie management (Complianz), Mailchimp for newsletters, and Google Tag Manager for analytics. The site is hosted on websupport.sk, uses HTTPS with good SSL configuration, and includes modern UI elements like sliders and responsive menus. SEO and accessibility are adequately addressed, though some improvements in security headers could be made. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and avoids exposing sensitive data. However, no explicit security policy or incident response information is provided, and no vulnerability disclosure mechanism is found. The site appears secure with no visible vulnerabilities or WAF blocking. Overall, the website is professional, trustworthy, and compliant with GDPR. It effectively supports the party's communication and engagement goals. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure channel to strengthen security posture and trust.

A

ASITIS

asitis.cz

59

ASITIS is a specialized consultancy focused on climate change adaptation and mitigation, offering services primarily in energy, sustainability, water management, regional development, and urban greenery. The company targets municipalities, public sector entities, and private firms, positioning itself as a trusted partner in the Czech Republic for climate-related strategic planning and reporting. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, it is built on WordPress with modern performance and analytics tools integrated, including Google Tag Manager and Usermaven. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and explicit incident response contacts are missing. Overall, the domain registration data aligns well with the business profile, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen compliance and trust.

A

Autonómia Alapítvány

autonomia.hu

41

Autonómia Alapítvány is a well-established Hungarian non-profit organization focused on strengthening civil society and supporting marginalized groups, particularly Roma integration. Operating since 1990, it delivers community development programs, advocacy, and international cooperation. The website reflects a professional and consistent brand presence with clear contact information and social media integration. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, and integrates Google Maps and analytics tools. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and serves its audience effectively.

Közösségfejlesztők Egyesülete is a Hungarian non-profit organization dedicated to community development, social programs, and professional support within civil society and local development sectors. The website serves as an informational and resource platform for community developers and related stakeholders, offering training, publications, and event information. The organization has an established presence since 2014, reflected in the domain age and content maturity. Technically, the website is built on WordPress with a modern tech stack including jQuery and standard JavaScript libraries. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with privacy and cookie policies present, though a cookie consent mechanism is missing. Overall, the website is professional and trustworthy, serving its niche audience effectively.

SWOV is a well-established Dutch national scientific institute specializing in road safety research. The organization provides valuable knowledge, data, and expert advice to improve traffic safety in the Netherlands. Their website reflects a professional and authoritative presence with clear content targeting researchers, policymakers, and the general public interested in traffic safety. The site is built on a modern Drupal 10 CMS platform, featuring good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS and DNSSEC enabled, cookie consent implemented, and no visible critical vulnerabilities. However, the site could improve by adding explicit security headers and a vulnerability disclosure policy. Overall, the website demonstrates high legitimacy, trustworthiness, and compliance with privacy regulations.

A

Austroads

austroads.com.au

63

Austroads is a government-related organization focused on supporting efficient, reliable, and safe road transport across Australia and New Zealand. It provides authoritative guidance, research, and standards covering drivers, vehicles, road safety, infrastructure, environment, and transport operations. The website serves government agencies, transport authorities, health professionals, and industry stakeholders with comprehensive resources including guides, publications, data services, and training programs. The organization holds a leading market position as a collaborative body for road transport standards in the region. Technically, the website is built on the Squiz Matrix CMS platform and leverages modern web technologies such as jQuery, Google Analytics, Google Tag Manager, Hotjar, and DataTables. It uses Cloudflare for DNS and likely CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the website enforces HTTPS and employs secure forms with validation. However, it lacks DNSSEC, a published security policy, incident response contacts, and a cookie consent mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered by the Department of Finance, consistent with its government affiliation, and domain status codes indicate protection against unauthorized changes. Overall, Austroads presents a trustworthy, professional, and authoritative online presence with a strong business credibility and technical foundation. Strategic improvements in privacy compliance and security transparency would further enhance its posture and user trust.

C

Centrum dopravního výzkumu, v. v. i.

cdvgis.cz

58

Centrum dopravního výzkumu, v. v. i. is a Czech public research institution specializing in transport research and infrastructure diagnostics under the Ministry of Transport. The organization offers a broad range of services including laboratory testing, transport safety analysis, smart city solutions, and professional training. The website reflects a well-structured and professional digital presence with clear navigation, comprehensive content, and active social media engagement. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Facebook Pixel for tracking, and is hosted with CDN support for performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response disclosures are absent. The WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the official nature of the institution and consistent branding mitigate concerns. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

The website 'Magazín Cyklostrategie.cz' is a Slovak language content blog providing informational articles across a broad range of topics including energy, home, business, sports, and construction. It targets a general audience interested in products and services on the internet. The site operates on a WordPress platform with common web technologies such as Bootstrap, jQuery, and Font Awesome, indicating a moderate level of technical maturity. The design and user experience are good with clear navigation and mobile optimization. However, the site lacks critical business contact information, privacy policies, and terms of service, which impacts its credibility and compliance posture. Security-wise, HTTPS is enabled but security headers are missing, and no incident response or vulnerability disclosure mechanisms are present. The absence of WHOIS data reduces trust in domain legitimacy. Overall, the site is functional and informative but requires improvements in compliance, security, and business transparency to enhance trust and professionalism.

C

Centrum dopravního výzkumu, v. v. i.

audit-bezpecnosti.cz

46

The website 'Audit Bezpečnosti' is managed by Centrum dopravního výzkumu, v.v.i., a Czech research center specializing in transportation safety. It serves as an authoritative resource for road safety auditors and professionals, providing training schedules, methodologies, official documents, and accreditation information aligned with EU directives. The site is well-positioned within the Czech transportation safety sector and recognized by the European Commission for excellence in road safety. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI plugins, ensuring good mobile responsiveness and user experience. However, some technical improvements are recommended, such as adding security headers and enhancing accessibility features. The site uses Google Analytics for user tracking but lacks visible privacy and cookie policies, which is a compliance gap. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries visibly. The absence of WHOIS data limits domain legitimacy verification, but the presence of official contact information and government affiliations supports trustworthiness. No signs of malicious content or adult material were found, making the site safe for general audiences. Overall, the website is a credible, professional resource for road safety auditing in the Czech Republic, with moderate technical maturity and some privacy compliance shortcomings. Strategic improvements in security headers, privacy disclosures, and WHOIS transparency would enhance trust and compliance.