Security Directory

I

International Water Association

worldwatercongress.org

45

The International Water Association operates the IWA World Water Congress & Exhibition, a leading biennial global event for water sector professionals. The website serves as the official platform for the 2026 Congress in Glasgow, providing comprehensive information about the event, its programme, and related activities. The site targets a professional audience including utility leaders, researchers, government officials, and allied sectors. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled, though improvements are recommended in security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with the organization's mission and market position.

The Source Magazine is a professional online publication affiliated with the International Water Association, targeting water professionals globally. It provides practical intelligence through news, features, opinion pieces, and event coverage focused on water and related environmental sectors. The website demonstrates a mature digital presence with a modern WordPress-based infrastructure, leveraging popular plugins for SEO, page building, advertising, and newsletter management. Social media integration and structured data enhance its reach and discoverability. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and formal security policies are recommended. Privacy compliance is partial, with cookie consent implemented but no explicit privacy or terms policies found in the analyzed content. Overall, the site is credible, professionally maintained, and serves a niche industry audience effectively.

P

Pro-idea s.r.o.

pro-idea.cz

43

Proidea.digital is a Czech Republic based digital agency operating since 2007, specializing in web development, online marketing, production, and design services for ambitious projects. The company targets businesses seeking to grow their digital presence with a professional and experienced partner. The website reflects a well-structured and professionally designed digital presence, supporting multiple languages and showcasing client references and testimonials. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper.js, and Masonry.js, with a custom Bootstrap CSS framework, indicating a moderate level of digital maturity. However, some SEO and accessibility features could be improved. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and policies. The absence of privacy and cookie policies and incomplete WHOIS data reduce compliance and trust scores. Overall, the site is safe, professional, and business-focused but would benefit from enhanced security and privacy transparency.

European Film Promotion (EFP) is a well-established organization founded in 2001 that promotes European films and talent internationally. The website serves as a platform to showcase European cinema excellence and diversity, targeting film industry professionals and enthusiasts worldwide. It offers various programs, film sales support, and networking opportunities, positioning itself as a key player in the European film promotion sector. The site is professionally designed with consistent branding and clear navigation, supporting its mission effectively. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Slick Carousel, and Typekit fonts, with a newsletter subscription powered by Brevo (Sendinblue). Hosting is provided by Cronon GmbH, a reputable registrar. The site is mobile-optimized and performs moderately well, though accessibility and SEO could be improved. Security measures such as cookie consent are implemented, but advanced security headers and DNSSEC are missing. From a security perspective, the site shows a moderate security posture with no critical vulnerabilities detected in the provided data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. Overall, the website is trustworthy, professional, and serves its business purpose well. Strategic improvements in security headers, accessibility, and explicit policy disclosures would enhance its security posture and compliance standing.

P

Pivovar Louka

pivovarlouka.cz

46

Pivovar Louka is a small Czech craft brewery specializing in producing live, unfiltered, and unpasteurized beers from the South Moravia region. The company operates a WordPress-based website with WooCommerce e-commerce capabilities, offering a range of regular and seasonal beers in various packaging formats. The website targets adult consumers, enforcing an age verification gate to comply with legal requirements for alcohol sales. The brewery emphasizes quality ingredients sourced locally and internationally, with a clear brand identity and consistent messaging. Technically, the site uses modern WordPress plugins and frameworks but shows minor issues with social media integrations. Security measures include HTTPS, reCAPTCHA, and cookie consent, though security headers are lacking. Overall, the site is professional, GDPR compliant, and trustworthy, with room for technical and security improvements.

T

Tady je Přeškovo s.r.o.

pivovarprestice.cz

49

Tady je Přeškovo s.r.o. operates a restaurant and brewery located in Přeštice, Czech Republic, with a focus on serving modern Czech cuisine and their own brewed beers. The business reopened in early 2025 in a historically significant location, targeting local residents, families, and visitors including cyclists. The website reflects a small hospitality business with clear contact details, social media presence, and a menu showcasing their offerings. Technically, the site is built on Drupal 7 with common web technologies and includes Google Analytics for visitor tracking. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. The domain registration is recent but aligns with the business launch timeline, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy and security disclosures.

V

VODNÍ DÍLA - TBD a.s.

vdtbd.eu

55

VODNÍ DÍLA - TBD a.s. is a specialized Czech engineering company focused on dam safety, design, and flood protection with over 20 years of expertise. The company provides a range of engineering services including dam safety supervision, flood protection, expert opinions, and geodetic measurements. It holds a reputable position in the industry, being a founding member of the CREA Hydro&Energy cluster and represented in the International Committee On Large Dams (ICOLD). The website reflects a professional and consistent brand image targeting engineering professionals and water management stakeholders. Technically, the website uses Bootstrap and jQuery, offers good mobile optimization, and moderate performance. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy policy documentation. WHOIS data is privacy protected by EURid, which is common for EU domains but limits transparency. Contact information is clearly presented with company emails and phone numbers, and social media presence on LinkedIn and YouTube is established.

O

Online Casina

minimuzeum.com

59

Online Casina operates a Czech-language informational website focused on online gambling, providing casino reviews, bonus offers, and guides tailored for Czech players. The site positions itself as a trusted resource for legal and licensed online casinos in the Czech Republic, emphasizing compliance with local regulations and offering detailed content about payment methods, game types, and legal frameworks. Technically, the site is built on WordPress with modern SEO plugins and standard web technologies, delivering a good user experience with mobile optimization and structured data for enhanced search visibility. Security posture is solid with HTTPS and security headers, though the absence of a dedicated security policy and incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable transparency gap, slightly impacting trust. Overall, the site serves its niche well but should enhance privacy and security disclosures to strengthen credibility.

M

My Blog

ceskecasino.best

66

CeskeCasino.best is an affiliate and review platform focused on online casinos targeting Czech players. The website provides detailed casino reviews, bonus offers, and game listings tailored for the Czech market. It operates primarily as an informational and affiliate marketing site, helping users find licensed and legal online casinos in the Czech Republic. The site is built on WordPress and uses common web technologies such as jQuery and D3.js, with hosting provided by Hosting Concepts B.V. The domain is relatively new, registered in 2022, and the registrant is located in Ukraine, which is a common pattern for affiliate sites but may raise minor trust concerns. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance features. No privacy or cookie policies were found, and no direct contact information is provided, which impacts trust and compliance. Overall, the site is professionally designed, mobile-optimized, and provides relevant content for its target audience but should improve privacy and security practices.

M

mostbet-aze45.com

mostbet-aze-45.com

56

Mostbet-aze45.com is an online gambling and sports betting platform licensed in Curacao and operated by Bizbon N.V. The website targets Azerbaijani users and international customers, offering a wide range of betting services including sports, eSports, live casino, slots, poker, and fantasy sports. The platform supports multiple languages and currencies, providing a comprehensive gambling experience with bonuses and loyalty programs. Technically, the site is built on WordPress using the OceanWP theme and common plugins, hosted behind Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Business credibility is supported by licensing and detailed service descriptions, though direct contact details are limited. Overall, the site is functional and professional but would benefit from improved security and compliance measures.

P

Plinko Spribe

plinkospribe.com

53

Plinko Spribe is an online platform dedicated to promoting and providing access to the Plinko game developed by Spribe, a provably fair crypto gambling game with a 97% RTP. The website serves primarily as an affiliate and informational resource, offering demo gameplay and directing users to crypto casinos for real money play. The site is built on WordPress with SEO optimizations and multi-language support, targeting crypto casino players seeking transparent and entertaining gambling experiences. Technically, the site uses modern web technologies and Cloudflare DNS, but lacks some advanced security headers and formal privacy or cookie policies. Security posture is moderate with HTTPS enabled and no obvious vulnerabilities, but privacy compliance is weak due to missing policies and contact information. Overall, the site is functional and professional but would benefit from enhanced compliance and security transparency.

M

Marathon Studio

marathonstudio.eu

55

Marathon Studio is a Czech creative agency specializing in visual communication, branding, and web design services. The company emphasizes strategic, information-based design solutions aimed at long-term brand development rather than short-term effects. Their service portfolio includes brand strategy, web design, creative campaign ideation, graphic design, consulting, and project management. The website presents a professional and consistent brand image, targeting businesses seeking comprehensive visual identity solutions. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries such as jQuery and tracking tools including Google Tag Manager, Facebook Pixel, Hotjar, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, loads quickly, and includes a cookie consent mechanism compliant with GDPR requirements. However, no explicit security headers were detected, and WHOIS data for the domain is unavailable, limiting domain trust verification. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks visible security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces confidence in domain legitimacy, though the professional website content and social media presence support the business's credibility. Overall, Marathon Studio's website demonstrates strong content quality, technical implementation, and privacy compliance, with moderate business credibility due to missing WHOIS information. Strategic recommendations include enhancing security headers, publishing security policies, and improving domain registration transparency to strengthen trust and compliance.

P

Perform Czech

performczech.cz

54

Perform Czech is a cultural organization dedicated to bridging Czech performing arts with international audiences and professionals. The website serves as a platform to showcase Czech theatre projects, provide educational content, and promote events and podcasts related to performing arts. The organization targets artists, cultural professionals, and enthusiasts globally, positioning itself as a niche intermediary in the cultural media sector. The business model revolves around cultural promotion and facilitation rather than commercial sales. Technically, the website is built on WordPress CMS with a modern tech stack including Bootstrap, jQuery, Google Analytics, Algolia Search, and GDPR compliance plugins. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The infrastructure supports multimedia content and interactive features such as search and newsletter subscription. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and there is no visible incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not raise immediate concerns given the site's nature and content. Overall, the website presents a professional, trustworthy, and compliant digital presence for a cultural organization. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date third-party components to further strengthen security posture and trust.

A

Arc Network

arc-network.com

59

Arc Network is a professional business networking and media company that connects business communities globally through live events, digital platforms, and content delivery. The company operates internationally with multiple brands and offices in the United States, United Kingdom, Netherlands, and Singapore. Their market position is strong within the media and events sector, targeting business professionals and organizations seeking networking opportunities. The website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations. Security posture is solid with HTTPS and reCAPTCHA implemented, though explicit security headers and incident response information are absent. WHOIS data is unavailable, which slightly impacts trust but the overall professional presentation and business information support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving accessibility features.

C

Culture Renovation

culturerenovation.com

52

Culture Renovation is a niche business focused on organizational culture transformation through a research-backed book and associated services such as assessments, workshops, and advisory. The website serves as the official platform for the book by Kevin Oakes and offers resources and solutions to business leaders and HR professionals. The technical infrastructure is based on WordPress with Elementor and Bootstrap, hosted on A2 Hosting, and includes standard analytics tools like Google Analytics and Tag Manager. The site is well designed, mobile optimized, and provides a professional user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is legitimate, trustworthy, and serves its business purpose effectively.

A

ADP Research Institute

adpresearch.com

63

ADP Research Institute operates as a data-driven research entity providing exclusive insights into the labor market and workforce trends. Affiliated with ADP, a leading payroll and HR services provider, the institute leverages extensive payroll data and surveys to deliver comprehensive reports such as the National Employment Report and Today at Work. The website targets business leaders, economists, policymakers, and HR professionals, positioning itself as a trusted source for workforce analytics. Technically, the website is built on WordPress with modern SEO and analytics integrations including Google Analytics, Google Tag Manager, and Eloqua marketing automation. The site is mobile-optimized, accessible, and employs cookie consent mechanisms aligned with GDPR compliance. The use of structured data enhances search engine visibility and content discoverability. From a security perspective, the site enforces HTTPS, implements security headers, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain is notable but does not detract significantly from the site's legitimacy given the strong brand association and professional content. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in transparency around security policies and direct contact information would further strengthen its security posture and user trust.

T

Tarkenton Companies

upnetic.com

70

Upnetic, a brand under Tarkenton Companies, offers a comprehensive platform tailored for startups, sole proprietors, and small businesses. Their services encompass consulting, legal assistance, digital marketing analysis, CRM, website building, and business planning tools, positioning them as a one-stop solution for small business growth and management. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, reflecting a mature digital presence. Technically, the site leverages WordPress CMS with Bootstrap framework, enhanced by modern JavaScript libraries and multiple analytics and marketing tools such as New Relic, Google Analytics, Facebook Pixel, Microsoft Clarity, and Crazy Egg. Hosting appears to be via GoDaddy, consistent with the WHOIS data. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security standpoint, the site enforces HTTPS and implements cookie consent mechanisms, indicating attention to privacy compliance. However, no explicit security policy or incident response contacts are published, and DNSSEC is not enabled, suggesting areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Upnetic demonstrates a solid business and technical foundation with good privacy compliance and user experience. Strategic enhancements in security transparency and DNS security could further strengthen their posture.

S

Specion

specion.cz

47

Specion is a Czech-based company specializing in providing professional solutions for biochemical and pharmaceutical research, industrial applications, and material development. The company offers tailored laboratory equipment solutions, including warranty and post-warranty services, installation, training, and spare parts supply. With over 19 international manufacturer partnerships and 30 years of market presence, Specion holds a solid position in the regional scientific equipment market. The website is built on WordPress and uses modern web technologies such as jQuery and Google Tag Manager, with a focus on user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, though additional security headers and policies could enhance protection. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

The Deutsche Vereinigung für Wasserwirtschaft, Abwasser und Abfall e. V. (DWA) is a large, politically and economically independent association focused on sustainable water management, wastewater, and waste. It serves as a leading expert network in Europe, providing education, publications, policy advice, and events to professionals and organizations in the water and environmental sectors. The website is well-structured, professionally designed, and offers comprehensive content in German with English language support. The technical infrastructure is based on the Contao CMS platform, utilizing modern JavaScript libraries and ensuring good mobile optimization and accessibility. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, although some security headers could be improved. The domain registration is consistent with the organization's profile, and no blocking or WAF challenges were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

S

Slovenská asociácia vodárenských expertov

savesk.sk

56

Slovenská asociácia vodárenských expertov (SAVE) operates as a professional non-profit association focused on water supply, water management, and protection in Slovakia. The website serves as an information hub for water experts, providing news, expert articles, event announcements, and membership information. The association targets professionals, scientific institutions, and governmental bodies involved in water supply and management. Technically, the website is built on WordPress using Elementor and the OceanWP theme, hosted on WebSupport with DNSSEC and HTTPS enabled, indicating a modern and secure infrastructure. However, the site lacks privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and security maturity. Overall, the site is professional, trustworthy, and well-positioned within its niche but would benefit from enhanced privacy and security practices.

S

Slovenský národný komitét IWA

iwa.sk

39

Slovenský národný komitét IWA is a professional national committee representing Slovak water management interests internationally within the International Water Association framework. The organization focuses on promoting Slovak water sector expertise, organizing conferences, and collaborating with partner organizations. The website is well designed using WordPress with Elementor and includes essential contact information and event news. Technically, the site uses modern web technologies and enforces HTTPS with DNSSEC, enhancing security. However, it lacks published privacy and cookie policies, which are important for GDPR compliance. Security posture is good with reCAPTCHA integration, but could be improved with additional security headers and incident response disclosures. Overall, the site is trustworthy and professional, serving a niche audience of water sector professionals in Slovakia.

P

Pražské vodovody a kanalizace (PVK)

kohoutkova.cz

57

The website www.kohoutkova.cz serves as an information and community engagement platform focused on promoting tap water quality, sustainability, and environmental awareness in the Czech Republic. It is closely associated with Pražské vodovody a kanalizace (PVK) and the parent company Veolia, indicating a strong market position in the water utility sector. The site offers educational content, blog posts, recipes, and news related to water and sustainability, targeting a general audience interested in environmental topics. Technically, the site is built on WordPress using the Fox theme and Elementor page builder, leveraging modern web technologies such as jQuery and Google reCAPTCHA for form security. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Security posture is strong with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. No WHOIS data was available, which slightly reduces trustworthiness, but the website's content and association with Veolia and PVK support its legitimacy. Privacy and cookie policies are present and GDPR compliant, with user consent mechanisms implemented. No suspicious or malicious content was detected, and the site is safe for general audiences. Overall, the website demonstrates a mature digital presence with a focus on sustainability and community engagement, backed by a reputable utility company. Strategic improvements in transparency around security policies and incident response could further enhance trust and compliance.

R

Renishaw plc

renishaw.com

77

Renishaw plc is a globally recognized engineering and scientific technology company specializing in precision measurement, motion control, healthcare, spectroscopy, and additive manufacturing. The company offers a broad portfolio of products and services including CMM probes, machine tool probes, laser encoders, Raman spectroscopy systems, dental scanners, and neurosurgical robots. Their market position is strong, serving manufacturing industries, healthcare providers, and scientific research organizations worldwide. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for cookie consent management, indicating a commitment to privacy compliance and user experience. The site is built on Renishaw's proprietary Snowball CMS platform and demonstrates good mobile optimization and accessibility features. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit HTTP security headers and a published security.txt file. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the strong corporate presence and trust indicators. Overall, Renishaw's website is professional, secure, and compliant with privacy regulations, supporting its enterprise-level business operations. Strategic improvements in security header implementation and incident response transparency would further enhance its security posture.

The Landespolizei des Fürstentums Liechtenstein is the official national police authority of Liechtenstein, providing comprehensive law enforcement and public safety services. Their website serves as a central hub for citizens and visitors to access police news, digital reporting services, prevention campaigns, and contact information. The site targets the general public and government stakeholders, positioning itself as a trusted government entity with a clear mission to ensure safety and security within the principality. Technically, the website employs a modern technology stack including Vue.js, Axios, and the concrete5 CMS platform, ensuring a responsive and user-friendly experience. The site is mobile optimized and includes accessibility features, although some improvements could be made. Performance is moderate, with good SEO and structured navigation. From a security perspective, the site enforces HTTPS and uses obfuscated email addresses to protect contact information. However, it lacks some security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy of the domain as a government entity with consistent registration details. Overall, the website demonstrates a strong security posture and professional presentation suitable for a government institution. Strategic improvements in privacy compliance and security headers would further enhance trust and regulatory adherence.

D

Datenschutzstelle Fürstentum Liechtenstein

datenschutzstelle.li

60

The Datenschutzstelle Fürstentum Liechtenstein is the official data protection authority for the Principality of Liechtenstein. The website serves as a comprehensive resource for citizens, businesses, and associations, providing information, guidance, complaint forms, and event details related to data privacy and protection. It positions itself as a trusted government entity with a clear focus on GDPR compliance and data protection education. Technically, the website is built on Concrete CMS and leverages modern web technologies including jQuery, FontAwesome, and the Foundation framework. It uses Matomo analytics, which aligns with privacy-conscious data collection practices. The site is mobile-optimized and demonstrates good SEO and accessibility basics, though there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security or incident response policy. No vulnerabilities or suspicious patterns were detected. The WHOIS data confirms the domain's legitimacy as a government entity, enhancing trust. Overall, the website is professional, trustworthy, and well-suited for its governmental role. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance standing.

1

13 Comme Une

13commeune.fr

55

13 Comme Une is the official web magazine of the Communauté d'agglomération de Cergy-Pontoise, providing local news, cultural events, and community information to residents of the Cergy-Pontoise area in France. The website serves as a digital platform to engage citizens with relevant news, event agendas, and newsletters, supporting community involvement and local culture. It is positioned as a trusted government information source with a clear focus on public service and local engagement. Technically, the website is built on WordPress CMS, leveraging common web technologies such as jQuery and Slick Slider for UI components, and integrates third-party services like Sendinblue for newsletter subscriptions and Google Tag Manager for analytics. The site demonstrates moderate performance and good mobile optimization, with a consistent and professional design that supports user experience and accessibility at a basic level. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with GDPR requirements. However, explicit security headers and incident response policies are not evident, suggesting room for improvement in security hardening and transparency. No vulnerabilities or suspicious content were detected, and the domain registration details align well with the website's governmental purpose, indicating high legitimacy. Overall, 13 Comme Une presents a secure, professional, and user-friendly platform for local government communication, with recommendations to enhance security policies and headers to further strengthen its security posture and trustworthiness.

C

Cap Enfants

capenfants.com

61

Cap Enfants operates a network of corporate and micro-crèches in France, specializing in a unique pedagogical approach that integrates music and multisensorial activities to foster early childhood development. The company targets parents, enterprises, and childcare managers, positioning itself as a socially innovative childcare provider with over 18 years of experience. The website reflects a professional and consistent brand image with comprehensive content and strong trust signals such as testimonials and media coverage. Technically, the site is built on WordPress with modern libraries like Bootstrap and jQuery, and integrates Google Analytics, Facebook Pixel, and reCAPTCHA for security and marketing purposes. Security posture is solid with HTTPS and form protections, though it lacks explicit security headers and public incident response policies. The absence of WHOIS domain registration data is a notable concern, potentially impacting trustworthiness despite the professional online presence. Overall, the site is well-optimized for SEO, mobile-friendly, and compliant with GDPR through clear privacy and cookie policies.

R

Roissy Pays de France

roissypaysdefrance.fr

57

Roissy Pays de France is the official website of the local government community agglomeration serving 42 communes in the Roissy area of France. The site provides comprehensive information and services related to local governance, culture, sports, employment, sustainable development, and community life. It targets residents and stakeholders within the region, offering news, event agendas, interactive maps, and support for entrepreneurship and local economy initiatives. The website is built on TYPO3 CMS and uses modern web technologies including jQuery, Foundation CSS, and privacy-respecting analytics via Matomo. It demonstrates good digital maturity with mobile optimization, accessibility features, and a clear navigation structure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain reduces transparency and trust slightly, but the official nature and content quality support legitimacy. Overall, the website is a well-maintained government portal with good privacy compliance and user experience.

C

CY Cergy Paris Université

cyu.fr

56

CY Cergy Paris Université is a prominent French higher education institution formed by the merger of Université de Cergy-Pontoise and EISTI, serving over 25,000 students and engaging in extensive research and academic programs. The university emphasizes sustainable development, academic excellence, and student experience, partnering strategically with ESSEC Business School. The website reflects a mature digital presence with comprehensive academic and research information, clear navigation, and modern analytics tools. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts domain trustworthiness but does not detract from the institution's legitimacy given its public nature and .fr domain. Overall, the website is professional, accessible, and trustworthy for its target audience.

P

P Automobil Import s.r.o.

handycars.cz

45

Handycars.cz is a specialized automotive mobility program in the Czech Republic focused on providing vehicles and services tailored for persons with disabilities, caregivers, and war veterans. Supported by major automotive brands such as Opel, Peugeot, Citroën, and Fiat, the program offers a comprehensive suite of services including vehicle selection, financing, insurance, vehicle modifications, and assistance services. The website reflects a medium-sized business with a clear target audience and a strong partnership ecosystem. Technically, the website uses modern web technologies including Livewire and jQuery, with a responsive design optimized for mobile devices. Cookie consent is managed via Cookiebot, and Google Analytics and Google Tag Manager are used for analytics and marketing purposes. While the site is well-structured and professional, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy on the main page. Contact information is primarily via forms and a contact page, with no direct emails or phone numbers found. Overall, the website is trustworthy and professionally maintained, with a solid business model and technical foundation. Strategic improvements in privacy policy publication, security headers, and accessibility would enhance compliance and security posture.

P

PM ČKAIT, s.r.o.

pmckait.cz

39

PM ČKAIT, s.r.o. is a specialized insurance broker and subsidiary of the Czech Chamber of Authorized Engineers and Technicians active in construction (ČKAIT). The company provides professional liability insurance and other insurance products primarily for ČKAIT members but also serves other clients in the insurance market. Their offerings include professional liability insurance, legal protection insurance, property insurance, and claims handling services. The company has a solid market presence with over 32,000 insured persons and more than 10 years of experience in the sector. Technically, the website is built on WordPress using Elementor, with modern JavaScript libraries and responsive design, providing a good user experience and SEO optimization. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is basic with a privacy policy page but no cookie consent mechanism. Business credibility is high due to clear contact information, affiliation with ČKAIT, and professional content. However, the absence of WHOIS registration data reduces domain trustworthiness. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

I

Informační centrum ČKAIT, s. r. o.

ic-ckait.cz

47

Informační centrum ČKAIT, s. r. o. operates as an information and educational service provider primarily serving professionals in the construction and engineering sectors within the Czech Republic. The website offers event information, seminars, conferences, and publishes professional materials, positioning itself as a regional knowledge hub affiliated with ČKAIT. The business model revolves around educational services, information dissemination, and e-commerce for professional publications. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Facebook SDK for social media integration. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The presence of secure HTTPS indicates a baseline security posture, but the absence of security headers and privacy policies suggests room for improvement in security and compliance. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities were detected in the provided data. However, the lack of WHOIS information reduces domain registration transparency and trustworthiness. The site does not provide explicit privacy or cookie policies, which is a compliance gap under GDPR. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced security headers, privacy compliance documentation, and improved domain registration transparency to strengthen its security posture and user trust.

S

Sitewalk

sitewalk.com

62

Sitewalk is a Liechtenstein-based web development and online marketing company specializing in creating modern websites and web applications primarily for small and medium-sized enterprises, associations, organizations, and government entities. With nearly 30 years of experience, they position themselves as pioneers in the web space, offering services that include website development, online marketing consulting, SEO, and social media strategy. The website is professionally designed, content-rich, and targets German-speaking audiences in the DACH region. Technically, the site uses Concrete5 CMS, integrates privacy-friendly Matomo analytics alongside Google Tag Manager, and employs Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and anti-spam measures on contact forms, though explicit security headers are not detected and could be improved. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the website's professional content, client references, and clear contact information mitigate trust issues. Overall, Sitewalk demonstrates a strong business and technical foundation with room for security enhancements.

V

Virtual Fiction

virtual-fiction.cz

42

Virtual Fiction is a small, established Czech company specializing in 3D visualization, interior design, graphic design, printing, photography, and web hosting services. Founded in 1996, it has developed a stable presence domestically and in several European countries. The website reflects a professional business with clear service offerings and contact information. Technically, the site uses traditional web technologies such as Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS implied but lacking advanced security headers and privacy compliance measures. The absence of privacy and cookie policies represents a compliance risk. Overall, the business appears legitimate and stable, but improvements in security and privacy practices are recommended.

G

Griffith Foods

griffithfoods.com

63

Griffith Foods is a global leader in food product development and innovation, specializing in creating delicious, healthy, sustainable, and nutritious food solutions for top brands worldwide. Their website reflects a mature and professional business with a clear focus on culinary craftsmanship and sustainability. The company targets food industry professionals and partners seeking customized product development services. Technically, the website is built on WordPress with a modern tech stack including analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot, ensuring good digital maturity and user experience. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though there is room for improvement in security headers and explicit security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-branded, and professionally maintained.

O

One Model Inc.

onemodel.co

73

One Model Inc. is a US-based technology company specializing in People Analytics software that enables organizations to make data-driven workforce decisions. Their platform integrates multiple HR and business data sources, providing dashboards, predictive models, and AI-powered insights to improve talent management and planning. Positioned as a flexible and transparent SaaS solution, One Model targets HR professionals and business leaders seeking advanced analytics capabilities. The website is professionally designed, mobile-optimized, and rich in content including case studies, client logos, and multimedia. Technically, it leverages HubSpot CMS and modern JavaScript libraries, with integrated marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS and ISO 27001 certification, though some security headers are not visibly configured. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. WHOIS data is privacy protected, consistent with industry norms for SaaS companies. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

I

International Association for Human Resources Information Management

ihrim.org

58

The International Association for Human Resources Information Management (IHRIM) is a well-established professional association focused on developing HR technology leaders through vendor-neutral education and certification programs. The website reflects a mature organization with a global reach, targeting HR practitioners, educators, technology developers, analysts, and executives. The digital infrastructure is built on WordPress with modern optimization and analytics tools, providing a fast and responsive user experience. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are not explicitly presented, indicating room for compliance improvement. WHOIS data is unavailable, likely due to privacy protection, which is common but slightly impacts trust. Overall, the site is professional, content-rich, and trustworthy, serving its niche audience effectively.

I

ICAgile

icagile.com

67

ICAgile is a globally recognized accreditation body specializing in agile education and certification. The organization offers a comprehensive catalog of agile certifications and micro-credentials tailored for individuals and organizations seeking to advance their agile capabilities. With over 300,000 certifications awarded and backing from more than 50 industry thought leaders, ICAgile holds a strong market position in the agile education sector. The website reflects a professional and user-friendly design, targeting both individual learners and enterprise clients with clear calls to action and resources. Technically, the website leverages modern marketing and analytics technologies including HubSpot, Google Analytics, Hotjar, and Mailchimp, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with proper use of meta tags and structured data. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. No direct contact emails or phone numbers are published, relying instead on contact forms. The WHOIS data is unavailable or not publicly accessible, which limits transparency regarding domain registration details. Despite this, the website's professional appearance, extensive content, and strong trust indicators suggest legitimacy. Privacy policies and cookie consent are comprehensive and GDPR compliant. No security incident response or vulnerability disclosure information is found, representing an area for potential improvement. Overall, ICAgile's website demonstrates a high level of professionalism, technical maturity, and business credibility, with minor gaps in domain transparency and published security policies. The risk profile is low, and the site is suitable for its educational and certification purposes.

P

Personify Inc.

smallworldlabs.com

59

Personify Inc. operates The Loop, a community platform designed to connect and engage its clients, supporters, members, and volunteers. The platform facilitates sharing best practices, digital transformation, and constituent engagement, positioning Personify as a provider of enterprise community solutions. The website reflects a professional and consistent brand image aligned with Personify's corporate identity. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Analytics, New Relic, and marketing tools like Marketo and Drift chat, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is solid with HTTPS enforced and client-side password hashing, but lacks some security headers and explicit privacy consent mechanisms. No WHOIS data is available for the subdomain, which is expected as it is a subdomain of personifycorp.com, a legitimate corporate domain. Overall, the site is trustworthy and well-maintained, serving an enterprise audience effectively.

L

LRP Media Group

hrexecutive.com

69

HR Executive is an established online magazine focused on human resource news, analysis, and insights, targeting HR leaders and decision-makers. The website is operated by LRP Media Group, a recognized media company with a domain dating back to 1998, indicating a mature and stable presence in the HR media sector. The business model centers on providing strategic content and research to HR professionals, supported by advertising and subscription services.

B

BUSHMAN

bushman.bg

60

BUSHMAN is a regional e-commerce retailer specializing in outdoor clothing and accessories for men and women who enjoy outdoor activities and adventures. The company operates multiple localized websites targeting different European markets, indicating a mature regional presence. Their business model focuses on direct online sales via the Shopify platform, supported by seasonal collections and promotional campaigns. The website content is professionally presented, with consistent branding and clear navigation, targeting a general audience interested in outdoor apparel. Technically, the website leverages Shopify's robust e-commerce infrastructure, integrating modern technologies such as jQuery, Facebook Pixel, Google Tag Manager, and GDPR compliance tools like Pandectes. The site is hosted on Shopify's CDN, ensuring fast performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully visible, the use of reputable third-party services and absence of exposed sensitive data indicate a solid security posture. However, the site lacks published security policies or incident response contacts, which could be improved to enhance trust. Overall, the domain WHOIS data is privacy protected, which is common for European businesses under GDPR. The domain is active with Cloudflare nameservers, supporting legitimacy. No suspicious patterns or vulnerabilities were detected. The website scores well across content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional online retailer.

B

BUSHMAN

bushman.ro

62

BUSHMAN is a regional e-commerce retailer specializing in outdoor clothing and accessories for men and women. Established in 2011, the company operates a multi-lingual Shopify-based online store targeting customers in Romania and neighboring countries. The website demonstrates a mature digital infrastructure with integrations for marketing, analytics, and GDPR compliance, reflecting a solid digital maturity level. The business positions itself as a quality outdoor apparel brand with trust signals such as official supplier status for Prague Zoo and use of organic materials. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a medium-sized retail business model.

B

BUSHMAN

bushman.hu

64

BUSHMAN is a regional e-commerce retailer specializing in clothing and accessories for men and women who appreciate nature and quality apparel. The company operates multiple localized domains across Central and Eastern Europe, indicating a well-established market presence since its domain registration in 2018. The website is built on the Shopify platform, leveraging a mature technical infrastructure with integrations for marketing, analytics, and customer engagement. The site demonstrates good design quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policy and incident response contacts are not found. Overall, the website reflects a professional and trustworthy retail brand with compliance to GDPR and privacy standards.

B

BUSHMAN

bushman.si

58

BUSHMAN.si is an e-commerce retailer specializing in quality outdoor clothing for men, women, and children, targeting nature enthusiasts primarily in Slovenia and surrounding European markets. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Google Analytics, Facebook Pixel, and Judge.me for customer reviews. The business appears to be a medium-sized regional player founded in 2020, with a consistent brand presence and multiple regional partner sites. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with strong security headers, indicating a mature digital infrastructure. However, privacy compliance could be improved by implementing explicit cookie consent mechanisms and publishing dedicated security policies. Overall, the site demonstrates a good security posture with no critical vulnerabilities detected, but could enhance transparency and user trust by adding incident response contacts and vulnerability disclosure information.

V

VODNÍ DÍLA - TBD a.s.

vdtbd.cz

45

VODNÍ DÍLA - TBD a.s. is a specialized Czech engineering company focused on the safety of water structures, including dams, reservoirs, weirs, and sedimentation basins. With over 20 years of experience, the company provides technical safety oversight, flood protection, project design, and expert assessments. It holds a reputable position in the Czech water management sector and participates in national and international water infrastructure organizations. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern frameworks like Bootstrap and integrates Google Tag Manager for analytics, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high. Privacy compliance is basic with a cookie banner but no explicit privacy policy found. Recommendations include enhancing security headers, publishing privacy and security policies, and monitoring domain registration status.

S

Sweco

sweco.cz

48

Sweco Czech Republic is a leading European architectural and engineering consultancy providing a wide range of professional services including urban planning, water management, energy, and transportation infrastructure. The company operates as part of the Sweco Group, a publicly listed entity on Nasdaq Stockholm, indicating a strong market position and reputable business model. The website reflects a mature digital presence with comprehensive content targeting business clients and stakeholders in urban development and sustainability sectors. Technically, the site is built on WordPress with modern plugins and integrations such as Gravity Forms and Google Tag Manager, supporting good performance and user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, but the absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

V

VRV

vrv.cz

64

VRV is a Czech Republic based company focused on modern water management and environmental sustainability. The website presents a professional image with a clear business focus on water-related services and protection of the environment. The company targets stakeholders in the water management sector within the Czech Republic. The website is built using Webflow, leveraging modern web technologies and fonts, and includes a cookie consent mechanism indicating some privacy awareness. However, the absence of WHOIS data and lack of explicit privacy and security policies limit the overall trust and compliance posture. Security headers and advanced security practices are not evident, and no direct contact information or social media links were found in the analyzed content. Overall, the website is functional and professional but could improve in transparency and security compliance.

N

Národní institut pro kulturu

culturenet.cz

45

Culturenet is an information portal and network platform dedicated to cultural professionals across various disciplines in the Czech Republic. It operates as a project of the Institut umění − Divadelní ústav (IDU), a government cultural institute, providing news, grant information, professional networks, publications, and event listings. The website targets cultural professionals and organizations, offering a comprehensive resource for cultural sector updates and opportunities. The platform is well-established with a consistent brand and high-quality content, serving as a trusted source within the Czech cultural ecosystem. Technically, the website is built on WordPress 6.7.2 with modern JavaScript libraries such as jQuery, Swiper.js, and Select2, ensuring a responsive and user-friendly experience. It integrates Google Tag Manager for analytics and MailPoet for newsletter management. The site is mobile optimized and demonstrates good SEO practices, although some accessibility features are basic. Performance is moderate, with lazy loading of images and asynchronous script loading. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and does not provide visible security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain registration trustworthiness, but the affiliation with a government cultural institute and the professional presentation mitigate concerns. Overall, Culturenet presents a low-risk profile with strong content quality and privacy compliance. Strategic improvements include enhancing security headers, publishing explicit security policies, and providing clearer direct contact information to improve business credibility and security posture.

S

Sdružení české filmové kritiky, z.s.

filmovakritika.cz

44

The website filmovakritika.cz represents the Sdružení české filmové kritiky, a Czech non-profit organization dedicated to film criticism, awards, and cultural promotion within the Czech film industry. It serves a niche audience of film critics, cinephiles, and industry professionals by providing reviews, award information, premieres, and critic profiles. The site is well-structured, primarily in Czech, and demonstrates consistent branding and good content quality. The domain is well-established since 2010, supporting the organization's credibility. Technically, the site is built on WordPress using the Elementor page builder, with modern JavaScript libraries such as Swiper.js and jQuery. It integrates Google Analytics and Facebook SDK for user tracking and marketing purposes. The site is mobile-optimized and has good SEO practices but lacks some accessibility features. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No forms collect sensitive user data except a basic search form. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. External links include many gambling-related domains embedded in hidden elements, which may be unrelated or potentially spammy, warranting further review. Overall, the website is a legitimate cultural media platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and vulnerability disclosure would enhance trust and regulatory adherence.

D

DAE Dachverband Europäischer Dokumentarfilm / Documentary Association of Europe e.V.

dae-europe.org

66

DAE Dachverband Europäischer Dokumentarfilm / Documentary Association of Europe e.V. is a non-profit membership association serving documentary professionals primarily in Europe but also globally. Founded in 2019, it offers a collaborative network, expert advice, curated resources, discounts, and advocacy grounded in progressive social principles. The association positions itself as a fast-growing community with over 700 members, emphasizing inclusivity and sustainability. Technically, the website is built on WordPress with modern frameworks like Bootstrap 5, supporting good mobile responsiveness and user experience. The site employs standard plugins for cookie consent, analytics, and email marketing, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses domain locking statuses, and provides cookie consent mechanisms, though it lacks DNSSEC and explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, with moderate tracking via Google Analytics and Mailchimp. The absence of phone contact and physical address is noted but common for such associations. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and implementing a security.txt file to enhance transparency and trust.