Security Directory

D

DIGITREE CZ s.r.o.

digitree.cz

49

DIGITREE CZ s.r.o. is a Czech Republic-based IT service provider specializing in web development, IT infrastructure management, hosting, and cloud solutions primarily targeting small and medium-sized businesses. The company positions itself as a reliable IT partner helping clients grow through quality and connected IT services. Their website reflects a professional and modern digital presence with clear service offerings and strong customer testimonials, indicating a solid market position in their niche. Technically, the website leverages modern web technologies including the Astro framework, JavaScript analytics tools like Matomo and Facebook Pixel, and integrates a GDPR-compliant consent management platform (Usercentrics). The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. Security best practices are observed with HTTPS, security headers, and secure forms, although explicit security policies and incident response information are not publicly available. From a security and compliance perspective, the site demonstrates a mature posture with GDPR compliance and secure data collection mechanisms. However, the absence of WHOIS data limits domain trust assessment and raises questions about domain registration transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the risk profile is low, but improvements in transparency and security documentation are recommended. Strategically, DIGITREE should focus on enhancing their security and compliance disclosures, including publishing a security policy, incident response contacts, and vulnerability disclosure guidelines. This will strengthen trust and align with best practices. Continued investment in technical modernization and customer engagement will support sustained growth and market credibility.

P

PCpickup.cz

pcpickup.cz

41

PCpickup.cz is a small technology service provider based in the Czech Republic specializing in remote device repair services. Their business model centers on convenience, offering pick up, repair, and delivery of devices such as phones, laptops, Apple products, game consoles, and TVs. The company targets consumers and small businesses primarily in Brno and surrounding areas. The website is professionally designed and provides clear contact information and service descriptions, supporting a trustworthy customer experience. Technically, the website is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for content delivery and Google Analytics for visitor tracking. The site is mobile-optimized and uses modern web technologies including HTML5, CSS3, and JavaScript. However, some technical improvements are recommended, such as implementing security headers and enhancing SEO and accessibility features. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, indicating some privacy compliance. However, the absence of a privacy policy and security headers reduces the overall security posture. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses but limits domain trust verification. Overall, PCpickup.cz presents a legitimate and professional online presence for a local device repair business. Strategic recommendations include publishing privacy and terms of service documents, implementing security headers, and adding a security.txt file to improve vulnerability disclosure and trust. These steps will enhance compliance, security posture, and customer confidence.

G

Gransy, s.r.o.

pavlovec.net

9

Pavlovec.net is a small Czech-based web development service specializing in WordPress websites, boasting 15 years of coding experience. The website targets Czech-speaking clients seeking professional WordPress and WooCommerce development services. The business operates under the legal entity Gransy, s.r.o., with domain registration consistent with the claimed business history and location. Technically, the website employs a modern but straightforward tech stack including HTML5, CSS3, JavaScript, jQuery, Vue.js, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized with good design and navigation, though accessibility and SEO optimizations are basic. Hosting appears to be managed via the registrar's DNS and hosting services. From a security perspective, the website lacks visible security headers and does not implement DNSSEC, which could be improved. No privacy or cookie policies are present, indicating compliance gaps with GDPR. The site does not provide incident response or security contact information, limiting transparency. However, no critical vulnerabilities or suspicious content were detected. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance measures to improve trust and regulatory adherence.

S

Sage

sagepub.com

54

Sage is a global academic publisher specializing in books, journals, and digital educational resources aimed at supporting teaching, learning, and research worldwide. The website reflects a mature digital presence with comprehensive content offerings targeting academics, researchers, students, and educators. The business model centers on publishing and distributing scholarly content with a strong emphasis on accessibility and user engagement. Technically, the website employs modern web technologies including Sitefinity CMS, Bootstrap framework, and integrates Microsoft Application Insights for analytics and OneTrust for privacy and cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Secure login forms and cookie consent mechanisms are implemented, although explicit security policies and incident response information are not publicly available. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The absence of WHOIS data is a minor anomaly but does not detract significantly from the trustworthiness given the professional site content and security posture. Strategic recommendations include publishing explicit security and incident response policies and providing vulnerability disclosure channels to enhance transparency and trust.

I

IQVIA Digital

lassomarketing.io

73

IQVIA Digital is a leading healthcare marketing solutions provider specializing in delivering personalized, data-driven engagement platforms and services to pharma companies, agencies, partners, and publishers. As a subsidiary of IQVIA, it leverages advanced clinical and behavioral data to empower healthcare marketers with integrated omnichannel solutions that drive better outcomes. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its B2B audience. Technically, the site is built on the HubSpot CMS platform, utilizing modern web technologies including Google Tag Manager and Brightcove for video delivery. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search visibility. Analytics and tracking are implemented responsibly with privacy compliance in mind. From a security perspective, the site uses HTTPS and secure HubSpot forms but lacks explicit security headers, which could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are present and comprehensive, supporting GDPR compliance. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy verification, warranting further investigation. Overall, IQVIA Digital presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic improvements in security headers and domain registration transparency would further enhance its security posture and trustworthiness.

P

PROTETIKA, a.s.

protetika.sk

46

PROTETIKA, a.s. is a well-established Slovak company specializing in the production and sale of healthcare products, particularly orthopedic footwear and medical aids. With a history dating back to 1923, it holds a strong market position as a leading healthcare product manufacturer in Slovakia. The company targets customers requiring specialized orthopedic and health-related products, offering both individual and serial solutions through physical branches and an e-commerce platform. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. The site is mobile-optimized and demonstrates good SEO practices. However, it lacks explicit CMS identification and some advanced accessibility features. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy and incident response contacts suggests room for improvement in transparency and security maturity. The domain registration data is consistent with the business claims, reinforcing trustworthiness. Overall, PROTETIKA's digital presence is solid with good compliance and security posture, though enhancements in security policy disclosure and incident response readiness would strengthen its profile further.

M

mailXpert GmbH

swissnewsletter.ch

57

Swiss Newsletter, operated by mailXpert GmbH, is a Swiss-based SaaS provider specializing in email marketing solutions tailored for the Swiss market. The company emphasizes data security by hosting customer data within Switzerland and holds CSA certification to ensure high deliverability rates. Their platform offers a comprehensive suite of features including contact management, layout editing, timed dispatch, multilingual support, and detailed analytics, targeting primarily Swiss SMEs and businesses seeking reliable and localized email marketing tools. The website is professionally designed, mobile-optimized, and provides clear navigation and trust signals such as customer testimonials and certifications. Technically, the website is built on the Contao Open Source CMS and integrates modern tracking and analytics tools like Google Tag Manager and Hotjar. The site uses HTTPS with good SSL configuration, though it lacks some security headers and a cookie consent mechanism, which are areas for improvement. The performance is moderate with good mobile optimization and accessibility features. The WHOIS data confirms the legitimacy of the business with consistent registrant information matching the website's claims. From a security perspective, the site demonstrates good practices such as encrypted connections and certified email delivery but could enhance its posture by implementing security headers, publishing incident response policies, and adding GDPR-compliant cookie consent. No vulnerabilities or suspicious patterns were detected in the content or technical setup. Overall, Swiss Newsletter presents a trustworthy and professional online presence with a strong focus on Swiss data protection and email marketing efficacy. Strategic improvements in privacy compliance and security transparency would further strengthen their market position and customer trust.

H

Hanácký Večerník

hanackyvecernik.cz

54

Hanácký Večerník is a regional news media outlet focused on delivering news, interviews, cultural, sports, and societal information primarily for the Olomouc region in the Czech Republic. The website presents a well-structured and categorized content layout, targeting local residents and readers interested in regional affairs. The business model is based on online news publication supported by advertising, with evident partnerships for event promotion and ticketing. Technically, the site uses modern web technologies including Google Tag Manager for analytics, CookieYes for cookie consent management, and Google Fonts for typography. Hosting is provided by WEDOS, a Czech hosting provider, consistent with the domain registration data. The website is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with GDPR-aligned cookie consent and a basic privacy policy. Business credibility is supported by consistent branding, structured content, and social media presence. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy regional news source.

M

M+MP spol. s r.o.

infodnes.cz

47

InfoDnes.cz is a Czech regional media portal network operated by M+MP spol. s r.o., providing regional news, business directories, job listings, classifieds, and event calendars. The website serves a broad Czech audience interested in local information and services, positioning itself as a key regional media aggregator. The business model relies on advertising, affiliate marketing, and providing a platform for regional content and classifieds. Technically, the site uses modern web standards, Google Fonts, Google Analytics, and Google Adsense for monetization and analytics. The site is mobile optimized and includes privacy and cookie consent mechanisms in compliance with GDPR. Security posture is good with HTTPS and basic security headers, though some improvements are recommended. The absence of WHOIS data is a concern for domain legitimacy verification but does not detract from the site's apparent operational legitimacy. Overall, InfoDnes.cz is a well-established regional media portal with a solid digital presence and compliance posture.

M

Město Vizovice

mestovizovice.cz

51

Město Vizovice operates as the official municipal government website for the town of Vizovice in the Czech Republic. It provides residents and visitors with comprehensive information about the town, including news, events, contact details, and virtual tours. The site emphasizes community engagement and local services, positioning itself as a trusted source of municipal information. The website targets local citizens, tourists, and stakeholders interested in the town's activities and services. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and Google services such as reCAPTCHA and Tag Manager. The site is mobile-optimized, accessible, and performs moderately well. It integrates an AI chat widget to assist users, enhancing user experience. However, the CMS appears custom or based on the Nette framework, with no explicit commercial CMS detected. From a security perspective, the website uses HTTPS and Google reCAPTCHA to protect forms, but lacks published privacy and cookie policies, security headers, and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and long-standing registration, consistent with the municipal nature of the site. Overall, the website is professional, trustworthy, and well-maintained but would benefit from enhanced privacy compliance and security policy transparency to improve user trust and regulatory adherence.

The website mo-je.cz represents a small Czech business specializing in technical SEO and online profile management services for platforms such as Firmy.cz, Mapy.cz, and Google Search. The business targets other companies seeking to improve their online visibility through sustainable SEO practices rather than paid advertising. The site is professionally designed with clear navigation and relevant content, though it lacks comprehensive privacy and cookie policies. Technically, the site uses modern web technologies including Google Tag Manager, Google Fonts, and Font Awesome icons, and appears mobile-optimized with moderate performance. Security posture is adequate but could be improved by adding security headers and formal policies. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and raising questions about domain registration legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

The website gdziepolek.pl is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha to verify human visitors. This prevents access to any substantive content, business information, or user-facing features. The domain is registered since 2014 with home.pl S.A., a reputable Polish registrar, indicating a legitimate and established presence. However, no privacy policies, cookie notices, terms of service, or contact information are visible in the provided HTML content. The technical infrastructure includes Cloudflare's security services, but no further technology stack or CMS details are discernible due to the blocking mechanism. Security posture is limited to the presence of Cloudflare's WAF, but no additional security headers or configurations are observable. Overall, the site cannot be fully analyzed until the security challenge is passed.

Enel Senior is a Polish senior care home operated by Centrum Medyczne ENEL-MED Spółka Akcyjna, established in 2018. The website presents a professional and consistent brand focused on providing comfort, safety, and medical care to seniors in Warsaw. The business targets senior citizens and their families, offering a range of care and activity services. The domain age and WHOIS data align well with the business history, supporting legitimacy. Technically, the website uses modern tools such as Google Analytics, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. The site is HTTPS secured with DNSSEC enabled, enhancing trust and security. Security posture is strong with cookie consent and privacy policies in place, though additional security headers and incident response information could improve the security maturity. Overall, the website is well-structured, mobile-optimized, and compliant with GDPR requirements, making it a trustworthy platform for its audience.

M

MIELE d.o.o. Belgrade

miele.rs

63

Miele Serbia operates a professional and well-structured website targeting private consumers in Serbia, offering premium household appliances including washing machines, dryers, vacuum cleaners, and kitchen appliances. The site supports e-commerce through an online shop and provides information about physical stores and outlets. The company is a subsidiary or local branch of the global Miele brand, with a domain registered since 2008, indicating an established market presence. Technically, the website uses modern web technologies including JavaScript, Google Tag Manager, and CSS3, though it appears to be built on a custom or proprietary CMS without popular open-source CMS signatures. The site is moderately optimized for mobile and accessibility, with basic SEO practices in place. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR, but lacks advanced security headers and explicit security policies or incident response information. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, suitable for its retail business model.

M

Miele

miele.lv

57

Miele Latvia operates as a premium retailer and service provider of high-end household and commercial appliances. The website reflects a strong brand presence with localized content tailored for Latvian consumers and businesses. It offers a comprehensive product range, customer service options, and event information, positioning itself as a trusted market leader in the appliance sector. Technically, the site leverages modern web technologies including SAP Hybris, OpenText CMS, and integrates customer identity management via Gigya, ensuring a robust digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance measures such as cookie consent and GDPR-aligned privacy policies. No critical vulnerabilities or suspicious activities were detected, indicating a mature security culture. Overall, the site is professional, user-friendly, and trustworthy, supporting Miele's premium market positioning.

M

Miele (PTY) Ltd.

miele.co.za

51

Miele (PTY) Ltd. operates a premium home appliance retail website targeting the South African market. The site offers a comprehensive online shop, event information, and store locations, positioning itself as a trusted brand with a focus on quality and longevity of products. The website is professionally designed with good navigation and content relevance, supporting a positive user experience. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and responsive design elements, though mobile optimization is basic. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks some advanced security headers. Privacy compliance is well addressed with a clear privacy policy and cookie consent banner. Overall, the domain appears legitimate despite the absence of WHOIS registration details, likely due to privacy protection.

B

BizBox

bizboxadmin.com

21

BizBox operates a technology platform providing a secure login portal for business administration purposes. The website is primarily a login page with basic form validation and minimal content beyond the login functionality. The platform appears targeted at business users requiring access to administrative services, likely under a SaaS or subscription model. The domain is mature, registered since 2012, and hosted on AWS infrastructure, indicating a stable technical foundation. Technically, the site uses standard web technologies including JavaScript, CSS, and Google Fonts, with DNS hosted on Amazon AWS servers. The site shows basic mobile optimization and accessibility but lacks advanced SEO and security headers. No CMS or frameworks are explicitly detected. Performance is moderate with no evident blocking or WAF interference. From a security perspective, the site uses a login form with client-side validation but lacks visible security headers and DNSSEC is not enabled. No privacy policy, terms of service, or incident response information is published, which limits transparency and compliance posture. Cookie usage is disclosed but without a consent mechanism. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website is functional but basic, with moderate trustworthiness based on domain age and hosting. Key improvements include publishing privacy and security policies, enabling DNSSEC, adding security headers, and providing clear contact information to enhance compliance and user trust.

F

FUJIFILM Corporation

fujifilm.com

74

FUJIFILM Corporation is a globally recognized enterprise specializing in imaging, healthcare, and industrial products. The company operates a comprehensive global network of subsidiaries and offices, providing a wide range of products including films, digital cameras, medical systems, graphic arts, and life science products. The website reflects a mature, professional digital presence with strong branding consistency and extensive regional localization. Technically, the site employs modern web technologies, including Google Tag Manager and OneTrust for cookie consent, ensuring compliance with privacy regulations such as GDPR. Security posture is robust with HTTPS enforcement and standard security headers, though the absence of a public security policy or vulnerability disclosure page suggests room for improvement. Overall, the website is trustworthy, well-maintained, and aligned with the company's global stature.

Z

ZONER software, a.s.

zoner.sk

59

ZONER software, a.s. operates the website zoner.sk, offering a comprehensive photo and video editing software suite targeted primarily at consumers, businesses, and educational institutions in Slovakia and the Czech Republic. The company holds a strong market position as a leading Czech photo software provider, evidenced by the prestigious EISA PHOTO SOFTWARE 2025-2026 award. Their business model revolves around software sales and subscriptions, supported by a rich content ecosystem including tutorials, user testimonials, and additional photo-related services such as cloud storage and merchandise.

J

JURA Elektroapparate AG

juragastroworld.de

58

JURA Deutschland Gastro is a professional division of JURA Elektroapparate AG, specializing in the sale and support of professional coffee machines and accessories for the hospitality sector in Germany. The website provides detailed product information, support resources, and partner network access tailored to professional customers. The company is positioned as a premium brand with a strong market presence in Germany's hospitality industry. Technically, the site is built on ASP.NET WebForms with jQuery and integrates Google Tag Manager for analytics. The site is mobile optimized with good navigation and professional design. Security posture is solid with HTTPS enforced and secure forms, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. No direct contact emails or phone numbers are exposed on the site, with contact facilitated via support pages. Overall, the site is trustworthy, professional, and safe for general audiences.

A

Académie royale de Belgique

lacademie.tv

9

lacademie.tv is a French-language academic video platform affiliated with the Académie royale de Belgique, providing access to lectures, conferences, and scholarly content primarily targeting academics, students, and the interested public. The platform is supported by multiple reputable academic and cultural partners, positioning it as a niche educational media provider in Belgium. Technically, the website uses modern web standards with responsive design and JavaScript libraries such as Swiper.js for UI components. The hosting is via OVH sas, a known registrar and hosting provider. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. The domain is currently expired, posing a risk to service continuity. Privacy compliance is weak, with no cookie consent mechanism and limited GDPR indicators. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the site is professional and trustworthy but requires domain renewal and enhanced privacy and security measures.

L

Les Trésors de l'Académie Royale de Belgique - Bibliothèque & Archives

tresorsdelacademie.be

10

Les Trésors de l'Académie Royale de Belgique is a cultural and educational institution representing the library and archives of the Royal Academy of Belgium. The website provides access to extensive collections of books, archives, artistic heritage, and historical documents, targeting researchers, academics, and the general public interested in Belgian heritage. It maintains a professional online presence with clear navigation and institutional partnerships, reflecting its role as a specialized academic resource. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and Swiper.js for interactive content. Hosted by OVH, it employs HTTPS with valid SSL certificates ensuring secure communication. However, it lacks visible security headers and advanced accessibility features, and no CMS or analytics tools are explicitly detected, indicating a relatively simple but functional technical infrastructure. From a security perspective, the site enforces HTTPS but lacks privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for GDPR compliance and user trust. No forms or sensitive data collection points are present on the homepage, reducing immediate risk exposure. The absence of incident response contacts and data protection officer information suggests room for improvement in security governance. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security hardening, and transparency measures to align with best practices and regulatory requirements.

A

Alice Savoie

frenchtype.com

54

Alice Savoie operates a professional portfolio website showcasing her work as an independent French type designer. The site presents a curated collection of type design projects and research, targeting design professionals and typography enthusiasts. The business model centers on personal branding and promotion of design services. The website is hosted on OVH sas and built using the Cargo Collective platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and policies. Privacy and cookie policies are absent, which impacts compliance. Overall, the site is trustworthy and legitimate, with consistent domain registration data and no suspicious indicators.

P

Philippe Tytgat

philippetytgat.fr

42

Philippe Tytgat's website serves as a personal portfolio showcasing graphic design services including identity, event, illustration, edition, signage, and typography. The site targets a general audience interested in creative design work, positioning itself as a niche individual designer portfolio. The business appears to be a small-scale operation founded in 2020, with a consistent and professional branding approach. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Slick Carousel, hosted by OVH. The site is moderately optimized for mobile devices and has a good user experience with clear navigation and relevant content. Security posture is basic, with no advanced security headers or policies detected, and no privacy or cookie policies present, indicating room for improvement in compliance and security best practices. No contact information or social media links are explicitly provided, which may limit user engagement and trust. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance, and clearer contact channels.

R

Rafael Ribas

rafaelribas.com

52

Rafael Ribas is a Paris-based professional specializing in art direction and graphic design, with a focus on type design, branding, and editorial projects. The website serves as a portfolio showcasing collaborations with notable clients such as Louis Vuitton and Musée d’Orsay, positioning the business as a niche creative service provider in the design industry. The target audience includes design professionals and clients seeking high-quality art direction and custom typography services. The business model is primarily service and portfolio-based, emphasizing creative output and client engagement. Technically, the website employs modern frontend technologies including Bootstrap 4 and jQuery, hosted by OVH sas. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No CMS or advanced platforms are detected, indicating a custom or static site approach. External links to collaborators and partners in the design field enrich the ecosystem. From a security perspective, the site uses HTTPS and has domain locking enabled, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No forms or user input fields reduce attack vectors, and no analytics or tracking scripts indicate minimal user tracking. However, the absence of privacy and cookie policies represents a compliance gap, especially under GDPR. Overall, the website is professional and trustworthy with good business credibility and content quality. Strategic improvements in privacy compliance and security headers would enhance the security posture and regulatory adherence, supporting long-term trust and risk mitigation.

S

Sandrine Nugue Studio

sandrinenugue.com

48

Sandrine Nugue Studio is a small independent design studio specializing in type design, lettering, and graphic design services. The website serves primarily as a portfolio showcasing various projects including publications, signage, pictograms, and performance scores. The target audience includes design professionals, artists, and clients interested in typography and graphic design. The business model is focused on creative services and portfolio presentation, with a market position as a niche player in the typography and graphic design space. Technically, the website is built with standard HTML5, CSS3, and JavaScript, hosted by OVH sas. It features responsive images and a clean, well-structured design optimized for mobile devices. However, it lacks advanced frameworks or CMS platforms and does not use analytics or marketing tools. Performance is moderate with good mobile optimization and basic accessibility. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. There are no privacy or cookie policies, and no incident response or vulnerability disclosure information is provided. The WHOIS data shows a consistent and legitimate domain registration with no privacy protection, appropriate for the business type. Overall, the website is professional and trustworthy but has gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the site's credibility and reduce risk.

F

Fanette Mellier

fanettemellier.com

61

Fanette Mellier's website serves as a professional portfolio showcasing graphic design and printed matter projects, including exhibitions, books, and objects. The business appears to be a small creative entity based in France, with a domain registered since 2006, indicating a well-established presence. The site content is rich in artistic projects and external references to partner sites and social media, targeting a general audience interested in graphic arts. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, hosted on alwaysdata.com with HTTPS enabled, ensuring secure access. However, the absence of security headers and DNSSEC indicates room for improvement in security hardening. Privacy and compliance features are lacking, with no visible privacy or cookie policies, GDPR compliance statements, or contact information, which could pose compliance risks. Overall, the site is professionally designed with good user experience but requires enhancements in privacy, security policies, and contact transparency to improve trust and compliance.

F

François Chastanet

francoischastanet.com

56

François Chastanet's website serves as a professional and academic portfolio highlighting his expertise in architecture, graphic and type design, with a focus on urban lettering, graffiti, and calligraphy. The site showcases extensive content including lectures, publications, workshops, and documentary projects, targeting designers, academics, and cultural researchers. Technically, the site uses basic HTML, CSS, and jQuery, hosted by Gandi SAS, with moderate performance and basic mobile optimization. Security posture is limited, lacking DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. The domain is well-established since 2008, consistent with the professional content and history presented. Overall, the site is trustworthy and content-rich but would benefit from improved security and privacy compliance.

P

PeopleGoal

peoplegoal.com

73

PeopleGoal is a well-established HR software platform founded in 2014, offering customizable solutions for employee performance management, engagement, and talent development. Positioned as a SaaS provider, it serves businesses seeking to improve productivity and culture through flexible goal setting, feedback, and survey tools. The company is a subsidiary of ProProfs, a recognized software provider with multiple related product offerings. The website demonstrates strong branding, professional design, and comprehensive content targeting HR professionals and business decision-makers. Technically, the website uses modern web technologies including Google Tag Manager for analytics, Cloudflare for DNS and likely CDN services, and optimized web fonts. The site is mobile responsive, accessible, and performs well with fast loading times. SEO best practices are evident through structured data and meta tags. However, no explicit CMS was detected. Security posture is solid with HTTPS enforced, domain locking via registrar status codes, and no visible sensitive data exposure. The absence of DNSSEC is a minor gap. The site lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and business credible. Privacy and cookie policies are not explicitly found, which impacts privacy compliance scoring. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include publishing clear privacy and cookie policies with consent mechanisms, enabling DNSSEC, and adding security and incident response disclosures to improve compliance and user trust.

E

Empire Hall

empire-hall.cz

9

Empire Hall is a historic event venue located in the Slovanský dům building in Prague, offering elegant Art Deco style spaces for corporate conferences, concerts, weddings, and private parties. The venue caters to a diverse audience including corporate clients and event organizers, with a capacity of up to 900 guests. The website is professionally designed using the Tilda CMS platform, featuring responsive design, client-side form validation, and integration with social media and 3D virtual tours. However, the absence of publicly available WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the site presents a trustworthy and professional image suitable for its hospitality industry niche.

T

TSÚ

tsu.sk

58

TSÚ is a Slovakian company focused on creating a world of safe products, likely operating in the manufacturing and product safety certification sector. The website presents a professional image with a clear business focus on product safety and certification services. The technical infrastructure uses modern frontend technologies such as Vue.js and Google Fonts, with good performance and mobile optimization. Security posture is solid with HTTPS and security headers properly configured, although privacy compliance is lacking due to missing privacy and cookie policies. Contact information is limited to contact forms without direct emails or phone numbers, which may affect user trust and accessibility. Overall, the website is safe, professional, and moderately mature digitally, but could improve privacy transparency and direct contact options.

K

KOMA FAMILY

koma-family.cz

46

KOMA FAMILY is a well-established group specializing in modular construction with over 30 years of experience. Their business model includes modular building design, manufacturing, rental services, and an e-commerce platform for related products. The company targets businesses and organizations worldwide seeking modular construction solutions. The website is professionally designed, multilingual, and provides clear information about their services and subsidiaries. Technically, the site is built on Craft CMS with modern web standards, responsive design, and a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and CSRF protections, though additional security headers and explicit security policies could enhance trust. The absence of WHOIS data due to privacy protection slightly reduces transparency but does not significantly impact overall legitimacy given the professional presentation and consistent branding. Overall, the site demonstrates a mature digital presence suitable for its industry and audience.

A

AstraZeneca

astrazeneca.fr

64

AstraZeneca France operates as a regional branch of the global biopharmaceutical company AstraZeneca, focusing on research, development, production, and commercialization of prescription medicines across key therapeutic areas including oncology, cardiovascular, respiratory, vaccines, and rare diseases. The website targets French residents, patients, healthcare professionals, and stakeholders, providing comprehensive information about the company's products, innovation strategies, and corporate social responsibility initiatives. The site is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, the website leverages modern web technologies including Adobe Experience Manager CMS, JavaScript libraries like jQuery, and analytics platforms such as Matomo and Adobe Analytics. Tag management is handled via Tealium, and security is enhanced through Cloudflare services including rate limiting and bot management. The site employs HTTPS with strong SSL configuration and cookie consent mechanisms, demonstrating compliance with GDPR and French data protection regulations. Security posture is robust with no evident vulnerabilities or exposed sensitive data. However, explicit security headers like X-Frame-Options and X-Content-Type-Options should be verified. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent. Overall, the site maintains high trustworthiness and professionalism. Strategically, AstraZeneca France should continue to monitor third-party scripts for vulnerabilities, enhance transparency around incident response and security policies, and ensure all forms are secured against common web threats. These measures will strengthen compliance and user trust in an increasingly regulated healthcare digital environment.

D

Drukzo

drukzo.be

10

Drukzo is an established online printing service platform targeting the Belgian market, offering a wide range of affordable and quality print products such as flyers, brochures, posters, and banners. It operates under the parent company Helloprint, a recognized global print platform, which strengthens its market position and credibility. The website is professionally designed, mobile-optimized, and provides a user-friendly e-commerce experience with clear navigation and search capabilities. The presence of multiple language and country versions indicates a mature digital presence tailored to regional audiences. Technically, the site leverages modern web technologies including Vue.js, Contentful CMS, and integrates analytics and marketing tools such as Google Analytics, Segment, and Trustpilot for customer feedback and performance monitoring. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. WHOIS data is restricted, typical for privacy protection, but the domain and website content align with a legitimate business. Overall, Drukzo presents a trustworthy and professional online printing service with room for enhanced security transparency.

M

MODX

modxcloud.com

69

MODX is an established open source content management framework that empowers developers and publishers to build highly customizable digital experiences without the bloat of traditional CMS platforms. With over 20 years of history and a strong global community, MODX offers a flexible platform supported by commercial services including cloud hosting and selective content staging. The website reflects a mature business with a clear focus on technology and developer-centric solutions. Technically, the site employs modern web standards, including responsive design, accessibility features, and integration with analytics and error monitoring tools such as Segment and Sentry. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosure mechanisms are not publicly documented. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, MODX presents a professional, secure, and user-friendly web presence aligned with its market position as a leading open source CMS framework.

M

MODX

modx.com

70

MODX is a well-established technology company specializing in a custom content management system platform that emphasizes speed, security, and creative freedom. With over 20 years of history, MODX positions itself as a flexible and secure alternative to legacy CMS platforms, targeting web developers, digital agencies, and businesses seeking tailored digital experiences. The company offers open source CMS software, managed cloud hosting, selective content staging, and commercial support services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, Font Awesome 6, and integrates analytics and error monitoring tools such as Segment and Sentry. The platform is hosted on MODX Cloud, a managed hosting service, and the site demonstrates fast performance, mobile optimization, and good accessibility. SEO practices are evident through proper meta tags and structured content. From a security perspective, the site enforces HTTPS, uses domain status protections, and implements a cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response information are not publicly available, and DNSSEC is not enabled. No vulnerabilities or exposed sensitive data were detected in the content analysis. Overall, MODX.com presents a trustworthy and professional digital presence with strong business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, publishing detailed security and incident response policies, and enhancing security headers to further strengthen the security posture.

T

Thomas Bouville

thomasbouville.fr

45

Thomas Bouville is an independent graphic designer based in Lille, France, specializing in typography, visual identity, website design, and edition. The website serves as a professional portfolio showcasing various projects primarily in graphic design and typeface creation. The target audience includes design professionals and clients seeking specialized graphic design services. The business operates as a small independent entity with a niche focus on typography and visual identity. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Adobe Typekit fonts, and the Slick Carousel library. The site is mobile optimized and well-structured, providing a good user experience and professional design quality. However, there is a lack of detected security headers and no visible privacy or cookie policies, which are compliance gaps. The WHOIS data for the domain is not available, which raises concerns about domain registration legitimacy and trustworthiness. Overall, the website is professional and trustworthy in content but would benefit from improved security and privacy compliance measures.

A

Atelier Jérôme Knebusch

jeromeknebusch.net

48

Atelier Jérôme Knebusch is a Franco-German graphic, editorial, and type design practice based in Frankfurt am Main, Germany. The website showcases a professional portfolio of custom typefaces, visual identities, and editorial projects primarily serving educational and cultural institutions. The business operates as a small specialized design studio with a focus on bespoke creative services and type design. The domain age and WHOIS data align well with the business history, indicating a stable and legitimate presence since 2006. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Slick Carousel for galleries. It is hosted by Scaleway SAS and uses HTTPS, ensuring secure communication. However, the site lacks DNSSEC and important security headers, which are recommended to enhance security posture. The website is mobile-optimized with good navigation and professional design quality, though SEO and accessibility features are basic. From a security perspective, the site has a good baseline with HTTPS and domain transfer protection but lacks explicit security policies, incident response contacts, and privacy/cookie policies, which are critical for GDPR compliance and user trust. No analytics or tracking scripts were detected, indicating minimal user tracking. The absence of privacy and cookie policies is a compliance gap that should be addressed. Overall, the website is a trustworthy and professional representation of a niche design practice with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response information to enhance trust and compliance.

L

LivaNova PLC

livanova.com

65

LivaNova PLC is a global medical device company specializing in neuromodulation and cardiopulmonary products aimed at improving patient lives worldwide. The company focuses on therapeutic areas related to the head and heart, offering innovative medical devices and therapies for conditions such as epilepsy, depression, and advanced circulatory support. The website reflects a mature enterprise with a strong market position in healthcare, supported by comprehensive corporate governance and sustainability commitments. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and OneTrust for cookie consent management. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Analytics and tracking are implemented with privacy compliance in mind. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, privacy policies, and terms of use. However, explicit security headers are not evident in the HTML content, and no vulnerability disclosure or incident response contacts are published. The absence of WHOIS data for the domain is a notable concern, suggesting possible privacy protection or registration issues that warrant further verification. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but improvements in transparency around domain registration and security practices are recommended to enhance trust and security posture.

G

Getinge AB

getinge.com

72

Getinge AB is a leading global provider of medical technology and healthcare solutions, serving hospitals and life science institutions worldwide. The company offers a broad portfolio including intensive care, cardiovascular procedures, operating room equipment, sterile reprocessing, digital health, pharmaceutical production, and research laboratory solutions. With a history spanning over a century, Getinge positions itself as a trusted partner to healthcare professionals and researchers. The website reflects a mature enterprise with consistent branding, multilingual support, and comprehensive product and service information tailored to healthcare providers. Technically, the website employs modern web technologies such as Google Tag Manager for analytics, OneTrust for cookie consent management, and video embedding via Video Indexer. The site appears to be built on a CMS platform likely Episerver, with good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and there is no publicly visible security policy or incident response contact information. The absence of WHOIS data for the domain www.getinge.com is a notable anomaly, reducing trust in domain registration transparency, though the website content and external references strongly support legitimacy. Overall, the website is professional, content-rich, and compliant with privacy regulations, but could enhance its security posture and transparency regarding domain registration and incident response. Strategic recommendations include adding security headers, publishing a security policy, and clarifying domain registration details to improve trust and compliance.

B

Barum

barum.com.br

66

Barum is a well-established tire brand with over 70 years of history, operating as a second line brand under the Continental group. The website targets the Brazilian market, offering a portfolio of affordable and durable tires for passenger cars and commercial vehicles. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS and Google Tag Manager for analytics and marketing. The site is professionally designed, mobile-optimized, and includes comprehensive legal and privacy documentation, reflecting good compliance with GDPR and cookie consent requirements. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response contacts are absent. Overall, the website presents a trustworthy and professional image consistent with a large enterprise in the transportation sector.

N

Nadační fond Veolia

nfveolia.cz

50

Nadační fond Veolia is a corporate foundation affiliated with the Veolia group in the Czech Republic, established in 2003. It supports social and environmental projects nationwide and regionally, promoting volunteerism and community engagement. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses a custom CMS platform with Matomo analytics and includes a cookie consent mechanism, reflecting good privacy compliance. However, the absence of WHOIS data and lack of visible security headers indicate areas for improvement in security posture. Overall, the site is trustworthy and well-maintained but would benefit from enhanced security practices and domain registration transparency.

F

Fastmail Pty Ltd

messagingengine.com

68

Fastmail Pty Ltd operates a professional, privacy-focused email and calendar hosting service targeting both individuals and businesses. The company positions itself as a secure, ad-free alternative to major providers like Gmail and iCloud, emphasizing privacy, productivity, and ease of use. Their service includes native apps across platforms and a strong commitment to open standards and open source contributions. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive content supporting their business model. Technically, the website employs modern web technologies including JavaScript, SVG icons, and web fonts, delivering a fast and mobile-optimized experience. The presence of security headers and HTTPS indicates a strong security posture. The company also maintains a bug bounty program and provides clear channels for reporting security issues, demonstrating a proactive approach to security management. Despite the strong website and business presence, the absence of WHOIS registration data is a notable gap, reducing transparency and slightly impacting trustworthiness. However, the overall security and privacy focus, combined with positive customer testimonials and no detected vulnerabilities, suggest a low risk profile. Strategically, Fastmail should consider publishing a security.txt file to facilitate vulnerability disclosures and enhance incident response visibility. Continued emphasis on privacy compliance and transparent business information will further strengthen their market position.

J

JURA Suomi

jura.com

60

JURA Suomi is the Finnish localized website for JURA, a Swiss manufacturer of high-quality automatic coffee machines and related accessories. The site targets both home consumers and professional users in Finland, offering product catalogs, support, and dealer information. The brand is well-established globally with a consistent and professional online presence. Technically, the website is built on ASP.NET WebForms with jQuery and uses Google Tag Manager for analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is adequate with HTTPS and form validation, though some improvements like updated libraries and security headers are recommended. Privacy and cookie policies are present and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site reflects a mature digital infrastructure supporting a medium-sized retail and professional business in the hospitality sector.

E

ELEKTROWIN a.s.

zaostrenonaelektro.cz

54

Zaostřeno na elektro is an educational and environmental project supported by ELEKTROWIN a.s., focused on promoting proper sorting and recycling of electrical waste in the Czech Republic. The website provides comprehensive information about recycling processes, types of electrical devices, and the importance of recycling for environmental protection. It targets the general public, especially consumers of electrical appliances, aiming to raise awareness and encourage responsible behavior. Technically, the website is built on the Webnode CMS platform, hosted on AWS Cloudfront CDN, and uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes multimedia content such as embedded YouTube videos to enhance user engagement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and formal privacy or security policies. No WHOIS data is available for the domain, which limits transparency and trust assessment. The site shows no signs of malicious content or vulnerabilities in the visible source. Overall, the website is a well-structured, informative platform with good business credibility and moderate technical maturity. However, improvements in security headers, privacy policy publication, and domain registration transparency are recommended to enhance trust and compliance.

Z

ZONER software, a.s.

zoner.cz

61

ZONER software, a.s. operates the website www.zoner.cz, offering a comprehensive photo and video editing software suite primarily targeting Czech consumers, businesses, and educational institutions. The company holds a strong market position as a leading Czech photo software provider, evidenced by the prestigious EISA PHOTO SOFTWARE 2025-2026 award. Their business model centers on software sales and subscription services, supported by extensive educational content and user testimonials. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site is well-optimized for SEO and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie management aligned with GDPR requirements. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity, with no signs of malicious activity or content blocking.

Natalieba.net is a professional personal website representing Dr. Natalie Banet, a pathologist affiliated with the Cleveland Clinic. The site focuses on her expertise in gynecologic and cytopathology, offering educational resources such as an online journal club and a mailing list for updates. The website targets medical professionals and students interested in pathology. Technically, the site is built with modern web standards, uses Google Fonts, and integrates lightweight analytics via Fathom, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections, though it lacks DNSSEC and security headers. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security practices.

A

AMCA, spol. s r. o.

sympoziumrenemacha.cz

59

The website www.sympoziumrenemacha.cz serves as the official platform for the XXVII annual Symposium of Clinical Pharmacy René Macha, a professional event organized primarily by academic and pharmaceutical institutions in the Czech Republic. It targets healthcare professionals, clinical pharmacists, and researchers interested in pharmacotherapy advancements. The site provides detailed event information, organizational contacts, and social media links, establishing a credible presence in the healthcare education sector. Technically, the website employs modern web technologies including Google Tag Manager for analytics, Google Fonts for typography, and a cookie consent mechanism to comply with privacy regulations. The site is mobile-optimized and presents a professional design with clear navigation. However, it lacks some advanced security headers and does not publish privacy or terms of service policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and has no visible vulnerabilities or exposed sensitive data. The absence of WHOIS registration data reduces transparency and trust from a domain registration standpoint, though the website content and organizational information suggest legitimacy. No security policy or incident response information is provided, indicating room for improvement in security posture. Overall, the website is functional, professional, and serves its business purpose well but would benefit from enhanced transparency, security policies, and WHOIS data availability to improve trust and compliance.

E

Elektrowin

elektrowin.cz

50

Elektrowin operates as a collective system focused on the responsible collection, recycling, and disposal of electronic waste in the Czech Republic. The company targets both individual consumers and businesses, providing comprehensive services to ensure sustainable management of end-of-life electrical equipment. Their market position is reinforced by partnerships with major manufacturers and membership in international organizations such as the WEEE Forum. The website reflects a professional and consistent brand image, emphasizing environmental responsibility and community engagement through educational projects. From a technical perspective, the website employs modern web technologies including jQuery, Google Tag Manager, and a robust cookie consent mechanism via CookieYes. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but the absence of a published security policy or incident response contacts suggests room for improvement. The WHOIS data is notably absent, which impacts the domain trustworthiness assessment. Despite this, the website's content quality, clear contact information, and visible certifications such as ISO 27001 contribute positively to the overall credibility. No signs of adult or questionable content were detected, confirming the site is safe for general audiences. Overall, Elektrowin presents as a credible and professionally managed organization with a clear environmental mission. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing accessibility, and establishing formal vulnerability disclosure channels to further strengthen trust and compliance.

H

Hokejový klub Tigers Zlín a.s.

tigerszlin.cz

45

Hokejový klub Tigers Zlín a.s. operates a professional and regionally focused hockey club website serving fans, players, and the local community in the Czech Republic. The site provides comprehensive information about the club's activities, youth teams, match reports, and merchandise offerings, positioning itself as a central hub for Tigers Zlín supporters and participants. The business model centers on sports club operations, youth training, and fan engagement through merchandise sales and event promotion. Technically, the website employs a modern but straightforward technology stack including jQuery, Slick Carousel, and LightGallery for interactive content presentation. Hosting is provided by a Czech hosting provider, and the site is mobile-optimized with good SEO practices. However, accessibility features are basic, and no major CMS or frameworks are detected. From a security perspective, the site uses HTTPS and implements a detailed cookie consent mechanism compliant with GDPR principles. However, it lacks explicit security headers and does not provide a dedicated privacy policy or incident response contact information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professionally designed and functional with moderate security and privacy compliance. Strategic enhancements in security headers, privacy documentation, and incident response readiness would strengthen its posture and trustworthiness.