Security Directory

C

CFPE Europe

cfp-e.com

54

CFPE Europe is a federation representing commercial film producers associations across 21 European countries, encompassing over 900 independent production companies. The organization serves as a collective voice and support network for the advertising production industry in Europe, providing resources, advocacy, and organizing industry events such as summits. The website reflects a professional and consistent brand image, targeting industry stakeholders and members of national associations. Technically, the site is built on WordPress and employs modern web technologies including jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some recommended security headers and visible privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is missing or unavailable, which is inconsistent with the active and professional nature of the website and reduces domain trustworthiness. Overall, the site is functional, professional, and serves its business purpose well, but could enhance privacy compliance and security posture.

F

Fiapf | International Federation of Film Producers Associations

fiapf.org

73

FIAPF is an established international federation representing film producers globally, advocating for diverse audiovisual production and supporting film festivals. The organization operates a professional website built on WordPress, leveraging modern plugins and technologies such as Yoast SEO, Matomo analytics, and GDPR-compliant cookie management. The site is hosted on Infomaniak servers and uses HTTPS with a clientTransferProhibited domain status, indicating a secure and stable online presence. Security posture is solid with room for improvement in DNSSEC and security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website reflects a credible, professional organization with a clear focus on media industry advocacy.

R

R. D. Mr. Mgr. Tomas van Zavrel

vanzavrel.cz

40

The website www.vanzavrel.cz is a personal site for Tomas van Zavrel, focusing on Christian community projects, spiritual teachings, and cultural heritage in the Czech Republic. It offers blog posts, videos, and information about local religious projects, targeting Czech-speaking audiences interested in spirituality and local history. The site is built on WordPress with common plugins such as Slider Revolution and YouTube Embed Plus, indicating a moderate level of technical maturity. The design is professional and mobile-optimized, providing a good user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data limits domain legitimacy assessment, but the presence of clear contact information and consistent branding supports moderate business credibility. Overall, the site is safe, non-commercial, and serves a niche community purpose.

T

Turnitin

turnitin.pt

66

Turnitin is a leading enterprise in the education sector specializing in academic integrity solutions, including plagiarism detection and grading tools. The company operates globally with localized websites, including the Portuguese site analyzed here. Their market position is strong, supported by a long operational history since 1998 and a reputable parent company, Turnitin, LLC. The website targets educational institutions, educators, and students, offering SaaS-based services to promote originality and integrity in academic work. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and secure user experience. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.

T

Turnitin

turnitin.me

64

Turnitin.me is the Arabic localized website of Turnitin, a globally recognized provider of academic integrity solutions. The company offers services that enhance academic honesty, simplify grading and feedback, detect plagiarism, and improve learning outcomes. The website targets educational institutions and students, providing localized content to support their academic needs. The business model is primarily B2B SaaS, positioning Turnitin as a leader in the education technology sector. The website demonstrates a professional design with consistent branding and relevant content tailored for its audience. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and reCAPTCHA, ensuring a responsive and interactive user experience. The presence of a cookie consent banner indicates attention to privacy compliance, although explicit privacy and terms of service pages were not detected in the provided content. Performance and mobile optimization are good, with basic accessibility features implemented. From a security perspective, the site uses HTTPS with an excellent SSL configuration and employs reCAPTCHA to mitigate automated abuse. However, security headers are not explicitly detected, and there is no visible security policy or incident response information. WHOIS data is privacy protected, which is justified for a large enterprise brand. No vulnerabilities or suspicious indicators were found, and the site is accessible without WAF blocking. Overall, Turnitin.me presents a trustworthy and professional online presence consistent with a major education technology provider. Strategic recommendations include enhancing transparency by publishing privacy and security policies, implementing security headers, and providing clear contact information for security incidents to further strengthen trust and compliance.

T

Turnitin

turnitin.it

61

Turnitin is a leading enterprise in the education technology sector, specializing in academic integrity and plagiarism detection solutions. The company offers a suite of services aimed at helping educational institutions and students maintain originality and improve academic outcomes. The website is well localized for the Italian market and integrates modern web technologies such as Bootstrap, jQuery, and Brightcove video player, indicating a mature digital infrastructure. Security measures including HTTPS, security headers, and reCAPTCHA are implemented, reflecting a strong security posture. However, the absence of a dedicated security policy and incident response page suggests room for improvement in transparency and readiness. Overall, the website demonstrates high professionalism, compliance with GDPR, and trustworthy business practices.

T

Turnitin

turnitin.com.br

60

Turnitin is a well-established enterprise specializing in academic integrity and plagiarism detection solutions, serving educational institutions globally including Brazil. The website is professionally designed with good localization and clear messaging focused on supporting students and educators to produce original work. The technical infrastructure leverages modern web technologies such as Bootstrap, jQuery, and VideoJS, hosted on Amazon AWS, ensuring reliable performance and scalability. Security best practices are observed with HTTPS enforcement, security headers, and use of Google reCAPTCHA to protect forms. Privacy compliance is strong with accessible privacy and cookie policies and a consent mechanism. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust and transparency. Overall, the website demonstrates a mature digital presence aligned with the company's market position as a leader in education technology.

T

Turnitin

turnitin.co.nz

64

Turnitin is a globally recognized company specializing in academic integrity solutions, including plagiarism detection and grading tools. The New Zealand regional website serves educational institutions and students, promoting original work and academic honesty. The site is professionally designed, mobile-optimized, and uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager. Privacy and cookie consent mechanisms are robust, reflecting compliance with GDPR and other privacy regulations. Security posture is strong with HTTPS enforced and security headers present, although no explicit security policy or incident response contacts are published. Overall, the website reflects a mature digital presence consistent with a large enterprise brand.

T

Turnitin

turnitin.ph

64

Turnitin Philippines operates as a regional portal for Turnitin, a leading provider of academic integrity and plagiarism detection solutions. The website promotes services that empower students and educators to maintain originality and improve educational outcomes. The site is well-branded and consistent with Turnitin's global presence, targeting academic institutions and students in the Philippines. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring a responsive and moderately performant user experience. Security posture is strong with HTTPS enforcement, security headers, and reCAPTCHA integration, although explicit security and privacy policies are not prominently displayed. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

T

Turnitin

turnitin.co.uk

62

Turnitin is a leading provider of academic integrity solutions, specializing in plagiarism detection, grading, and feedback tools aimed at educational institutions globally. The UK localized website serves as a regional portal for these services, targeting educators and students to promote original work and streamline academic processes. The company operates under the parent organization Advance Publications, reflecting a mature and enterprise-level business model with a strong market position in the education technology sector. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates advanced video players, and uses industry-standard tools like Google Tag Manager and OneTrust for privacy compliance. Security posture is robust with HTTPS enforcement, security headers, and CAPTCHA protections, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism, good privacy compliance, and trustworthy branding, though WHOIS data for the exact UK domain is unavailable due to domain registration constraints, indicating it is likely a subdomain or alias of the main turnitin.com domain.

T

Turnitin

turnitin.com.au

63

Turnitin Australia (turnitin.com.au) is a regional website of Turnitin, a leading global provider of academic integrity and plagiarism detection solutions. The site targets educational institutions and students in the Asia Pacific region, offering tools to empower original work and uphold academic standards. The business model is primarily B2B SaaS, serving schools, universities, and educators with plagiarism checking, grading, and feedback services. The website reflects a mature enterprise with consistent branding and professional content tailored to its audience. Technically, the website employs a modern technology stack including Bootstrap 4, jQuery, Google Tag Manager, and OneTrust for cookie consent, indicating a well-maintained digital infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility enhancements could be made. Performance is moderate, suitable for enterprise-grade educational platforms. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It uses Google reCAPTCHA to protect forms and implements a comprehensive cookie consent mechanism aligned with GDPR. However, explicit security policies and vulnerability disclosure mechanisms are not found, which could be improved to enhance transparency and incident response readiness. Overall, the domain and website appear legitimate and trustworthy, with no signs of blocking or WAF interference. The lack of WHOIS registrant details is typical for enterprise domains using privacy protection. The site scores highly on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable resource in the education technology sector.

T

Turnitin

turnitin.ca

62

Turnitin is a leading enterprise in the education technology sector, specializing in academic integrity solutions such as plagiarism detection, grading, and feedback tools. The company targets educational institutions, educators, and students, providing SaaS-based tools to promote original work and streamline academic processes. The website reflects a mature digital presence with consistent branding and comprehensive content tailored to its audience. Technically, the site employs modern frameworks like Bootstrap and integrates essential services such as Google Tag Manager and reCAPTCHA, ensuring both usability and security. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms including GDPR-aligned policies and cookie consent banners. However, the absence of publicly available WHOIS data is noted but typical for Canadian domains, and no suspicious indicators were found. Overall, the site demonstrates a high level of professionalism and trustworthiness.

S

SpryMedia

sprymedia.co.uk

60

SpryMedia is a specialized web user-interface development studio based in Scotland, established since 2006. The company focuses on creating UI development tools and software projects such as DataTables, Visual Event, and SprySpell, targeting web developers and UI professionals. The website reflects a professional and focused business with a niche market position in technology and software development. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and jQuery, hosted via a UK-based registrar. The site loads a privacy-conscious analytics script (Plausible Analytics) and is accessible without WAF or blocking mechanisms. However, it lacks explicit privacy, cookie, and terms of service policies, and no direct contact emails or phone numbers are provided, only a contact form link. Security headers are not detected, indicating room for improvement in security posture. Overall, the website is well-designed and trustworthy, but could enhance compliance and security transparency.

R

Regierung des Fürstentums Liechtenstein

regierung.li

54

The website 'regierung.li' is the official online presence of the Government of the Principality of Liechtenstein. It serves as a comprehensive portal providing information about government members, ministries, media releases, services, and contact details. The site targets citizens, media, and international partners seeking authoritative information on Liechtenstein's government activities. The business model is informational and communicative, positioning itself as the primary government information source in the country. Technically, the site employs modern web technologies including Blazor for frontend interactivity, jQuery, and Swiper.js for UI components, alongside Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and disables cookies in analytics to enhance privacy. However, it lacks several security headers and does not provide explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy, though a cookie consent mechanism is absent. Overall, the site is trustworthy, professional, and well-aligned with its government function. Recommendations include implementing security headers, adding cookie consent, publishing security policies, and considering a vulnerability disclosure program to further strengthen security posture and user trust.

D

digicube AG

fuerstenhaus.li

48

The website fuerstenhaus.li serves as an informational and cultural platform dedicated to the Fürstenhaus von Liechtenstein, detailing the history, monarchy, and philanthropic engagements of the princely family. It is positioned as an authoritative niche site with a focus on government and historical content, targeting a general audience interested in Liechtenstein's monarchy and heritage. The site is developed using WordPress CMS with multilingual capabilities and integrates modern web technologies such as jQuery and Slick Slider for enhanced user experience. Analytics are handled via Plausible Analytics, emphasizing privacy-conscious tracking. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy or cookie policies. Contact information and incident response details are not present, which could be improved to enhance trust and compliance. Overall, the site is professional, well-branded, and provides relevant content with good navigation and mobile optimization.

E

etg24 GmbH

etg24.de

42

etg24 GmbH is a German-based company specializing in digital real estate management solutions. Positioned as the original and first provider of online customer portals tailored specifically for property management, etg24 targets property managers, owners, tenants, and service providers. Their business model centers on providing SaaS platforms that streamline and modernize property management processes. The website reflects a professional and consistent brand image with good content quality and clear target audience focus. Technically, the website is built on WordPress using Elementor and WooCommerce, supported by modern tools such as Yoast SEO and Google Tag Manager. Hosting is managed via INWX, a reputable German hosting provider. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism via Borlabs Cookie, indicating awareness of privacy regulations. However, explicit security headers are not fully implemented, and no formal privacy policy or terms of service are found, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected, and no WAF or blocking mechanisms interfere with access. Overall, etg24 presents a trustworthy and professional digital presence with a solid foundation. Strategic improvements in privacy documentation and security header implementation would enhance compliance and security posture, supporting their market credibility and customer trust.

F

Fobi AI Germany GmbH

passcreator.com

72

Passcreator, operated by Fobi AI Germany GmbH, is a mature SaaS platform specializing in the creation and management of digital Wallet passes compatible with Apple Wallet and Google Wallet. Established since 2012, it serves a broad business audience with solutions including loyalty cards, coupons, event tickets, and membership cards. The platform emphasizes seamless integration, real-time updates, and personalized customer engagement without requiring dedicated apps. Its market position is reinforced by partnerships with notable global brands and certifications such as ISO 27001, underscoring its commitment to security and quality. Technically, the website is built on the Neos CMS and Flow PHP framework, leveraging modern web technologies including JavaScript and integrations with payment gateways like Stripe and PayPal. The site demonstrates good mobile optimization, accessibility, and SEO practices. Analytics and marketing tools such as Google Analytics, Hubspot, and Zapier are employed with privacy considerations like IP anonymization and explicit cookie consent mechanisms. From a security perspective, Passcreator shows a strong posture with HTTPS enforcement and ISO 27001 certification. However, the absence of WHOIS data and lack of explicit security headers or public incident response policies represent areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Passcreator presents a professional, trustworthy, and technically sound digital service platform with minor gaps in transparency around domain registration and incident response. Strategic enhancements in these areas would further strengthen its security and compliance profile.

S

Storyous

storyous.com

43

Storyous is a well-established company founded in 2012, specializing in modern POS systems tailored for the hospitality industry including restaurants, cafés, and food trucks. The company offers integrated hardware and software solutions such as POS systems with payment terminals, stock management, and real-time business reporting. Positioned as a leading provider in its market, Storyous emphasizes ease of use, rapid staff training, and 24/7 customer support. The parent company is Teya, indicating a broader corporate structure. Technically, the website is built on WordPress and hosted on Amazon AWS infrastructure, utilizing modern JavaScript libraries and analytics tools such as Google Analytics, Microsoft Clarity, and Intercom for customer engagement. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms. However, it lacks DNSSEC and explicit security headers, and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, Storyous presents a professional, trustworthy, and secure online presence with strong business credibility. Recommendations include enhancing DNS security, adding security headers, and publishing security policies to further strengthen trust and compliance.

S

Spolek Most České Budějovice

mountkasperk.cz

54

Mount Kašperk is a small-scale Christian music festival based in Kašperské Hory, Czech Republic, organized by Spolek Most České Budějovice. The festival has a history dating back to 2002 and features gospel, folk, and Christian music performances. The website is built on WordPress using the Bricks theme and JetEngine plugin, integrating Google Fonts and Google Maps for location display. The 2023 event has been postponed indefinitely, reflecting current operational status. Technically, the site is well-structured with good mobile optimization and SEO practices but lacks privacy and cookie policies, which are critical for compliance. Security posture is decent with HTTPS enabled but missing security headers and vulnerability disclosures. Overall, the site is trustworthy and serves its community audience effectively.

N

Nové Heřminovy

prehradanoveherminovy.cz

53

The website prehradanoveherminovy.cz serves as an informational platform for the Nové Heřminovy dam project, a regional infrastructure initiative aimed at flood protection and water management in the Moravian-Silesian region of the Czech Republic. The site provides historical context, project updates, and contact information, targeting local residents, government stakeholders, and interested parties. The business model is primarily informational and advocacy-focused, with governmental support evident in the content. Technically, the site is built on WordPress using common plugins such as WPBakery Page Builder and Slider Revolution, with Google reCAPTCHA implemented for form security. While the site is mobile-optimized and presents good content quality and navigation, it lacks privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy compliance and security hardening.

Rybářské sdružení České republiky is a well-established professional association representing the fishery sector in the Czech Republic. The organization provides industry information, member services, publications, and culinary resources related to fish production and consumption. The website reflects a consistent brand identity and targets fishery professionals and the general public interested in fishery topics. Technically, the site uses modern JavaScript libraries and Google services for analytics and fonts, hosted likely by WEDOS, a Czech provider. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enabled but lacks explicit security headers and privacy/cookie policies, indicating room for compliance improvement. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

Č

Česká vědeckotechnická vodohospodářská společnost, z.s.

cvtvhs.cz

46

Česká vědeckotechnická vodohospodářská společnost, z.s. is a Czech scientific and technical society focused on water management, hydrology, and flood protection. The organization hosts conferences and professional events, collaborating with recognized Czech institutes. The website serves as an information portal for members and professionals in the water management sector, providing news, event announcements, and membership information. The business operates as a non-profit entity with a clear focus on knowledge sharing and professional development within its niche. Technically, the website is built on Joomla CMS with common web technologies such as jQuery, Bootstrap, and Google Fonts. The site is mobile-optimized and provides a moderate performance experience. However, it lacks advanced SEO and accessibility features. The technical infrastructure is standard for a small professional society website, with no indications of modern cloud hosting or advanced platform integrations. From a security perspective, the site uses HTTPS but lacks important security headers and published security or privacy policies. There is no visible contact information for security incidents or data protection officers, and no vulnerability disclosure mechanisms are present. While no critical vulnerabilities are evident from the HTML content, the absence of privacy and cookie policies and security headers reduces the overall security posture. Overall, the website is professional and trustworthy within its domain but would benefit from improved privacy compliance, enhanced security practices, and clearer contact information to strengthen user trust and regulatory adherence.

Psychovar is a small Czech craft brewery specializing in producing small batches of specialty beers, particularly tea-infused varieties. The website presents a professional and consistent brand image targeting mature audiences interested in unique beer experiences. The business operates in a niche market with a focus on quality and artisanal production. The site provides basic information about products, availability, company background, and contact details, but lacks comprehensive legal and privacy documentation. Technically, the website uses modern frontend technologies such as Bootstrap, FontAwesome, and jQuery, ensuring good mobile responsiveness and user experience. However, it lacks advanced SEO optimization and accessibility features. The site is accessible without any WAF or blocking mechanisms, but no analytics or tracking tools are detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but does not implement security headers or provide security policies. The absence of WHOIS data is a significant concern, reducing trust and raising questions about domain legitimacy. Privacy and cookie policies are missing, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a single email address, with no phone or physical address provided. Overall, the website is functional and professionally presented but requires improvements in security posture, privacy compliance, and transparency to enhance trustworthiness and regulatory adherence.

H

Hakuv parni pivovar s.r.o.

hpp.beer

54

Hákův parní pivovar is a small Czech craft brewery established in 2018, specializing in authentic Czech craft beer with a strong local presence. The company operates multiple pubs and hostinec locations, offers gift packages, and actively participates in charitable projects, enhancing its community engagement and trustworthiness. The website reflects a professional and consistent brand image targeting craft beer enthusiasts and local customers. Technically, the site is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. However, there are gaps in privacy compliance and security best practices, such as missing privacy and cookie policies and lack of security headers. The domain registration data is consistent and supports the legitimacy of the business. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

B

Bad Flash Beers

badflash.cz

42

Bad Flash Beers is a Czech craft brewery operating multiple bars and a brewery taproom in Prague. The company focuses on brewing a variety of craft beers including seasonal and limited editions, targeting adult beer enthusiasts. The website is professionally designed using WordPress and incorporates modern web technologies and tracking tools such as Google Analytics. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and vulnerability disclosure mechanisms. Overall, the site is functional and informative but would benefit from enhanced compliance and security practices.

A

Arc network

hrtechnologyconference.com

53

The HR Technology Conference website represents a large-scale, well-established event organizer specializing in HR technology conferences and expos. The company, Arc network, positions itself as a leader in the HR tech event space, hosting the world's largest expo of its kind with extensive educational sessions, networking opportunities, and industry awards. The website content is professionally curated, targeting HR leaders, industry professionals, exhibitors, and sponsors, with a strong emphasis on innovation and transformation in HR practices. Technically, the site leverages a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and other marketing and analytics tools. It is built on the SHOWOFF CMS platform by ASP.events, optimized for mobile and accessibility, and employs HTTPS with good SSL configuration. The site integrates multiple third-party scripts for tracking and advertising, reflecting a mature digital marketing approach. Security posture is solid with HTTPS and secure form handling, though some standard security headers are not explicitly detected. Privacy compliance is partially addressed with a comprehensive privacy policy linked externally, but lacks an explicit cookie consent mechanism. No visible security policy or incident response contacts are found, and WHOIS data is missing, which slightly reduces trust but is not uncommon for event domains. Overall, the website is professional, content-rich, and trustworthy from a business perspective, with room for improvement in privacy compliance and security transparency.

I

igroup Internetagentur GmbH & Co. KG

i-group.de

50

igroup Internetagentur GmbH & Co. KG is a specialized TYPO3 partner agency based in Germany, offering comprehensive web development, responsive web design, SEO, digital signage, and online reporting services. With over 555 TYPO3 projects completed and a team of 12 experts, the company holds a strong market position as a reliable full-service TYPO3 agency serving national and international clients. Their website reflects a professional and consistent brand image, supported by positive trust indicators such as Google reviews and official TYPO3 partnership certification. The technical infrastructure is modern, leveraging TYPO3 CMS, jQuery, Google Analytics, and consent management tools, ensuring a good digital maturity level. Security posture is solid with HTTPS enforcement and consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness.

Hotel Zlatá Hvězda v Litomyšli is a hospitality business offering accommodation, restaurant services, event hosting including weddings and conferences, and catering services. The business is positioned locally in the historic center of Litomyšl, Czech Republic, with a domain age dating back to 2004, indicating an established presence. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. It employs modern web technologies and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enforced and domain transfer protection, though additional security headers and policies could enhance protection. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages detected. Contact information is limited to a phone number prominently displayed. Overall, the website is trustworthy and suitable for general audiences, with no adult or questionable content detected.

D

Digital Media Publishing s.r.o.

ifarnost.cz

44

The website ifarnost.cz is operated by Digital Media Publishing s.r.o., a small Czech company specializing in creating customized websites for parishes. Their service offers easy-to-use content editing, hosting, domain management, and mobile-optimized designs tailored to church communities. The site is professionally designed with good navigation and content relevance, targeting parish administrators and church organizations. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, hosted on Microsoft Azure Blob Storage. Security posture is solid with HTTPS and SSL certificates, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which impacts domain trustworthiness. Overall, the site is functional, professional, and trustworthy for its niche audience.

A

AJdG Solutions

ajdg.net

60

AJdG Solutions is a small technology company specializing in the development and sale of WordPress and ClassicPress plugins, with a strong focus on advertising management and WooCommerce enhancements. Their flagship product, AdRotate Banner Manager, is trusted by over 50,000 users, positioning the company as a niche leader in the WordPress plugin market. The business model centers on software license sales and support services, targeting website owners and developers seeking to optimize advertising revenue and e-commerce functionality. Technically, the website is built on WordPress using the Storefront theme and WooCommerce platform, hosted by InMotion Hosting. The site employs modern web technologies including jQuery and JavaScript, and demonstrates good mobile optimization and SEO practices. Analytics are handled via Matomo, reflecting a privacy-conscious approach. Performance is moderate, with opportunities for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and security headers such as CSP or HSTS. No explicit security policy or incident response information is provided, and there is no cookie consent mechanism despite cookie usage. The domain registration is privacy protected but consistent with the business location and history, supporting legitimacy. Overall, the security posture is solid but could be enhanced with additional best practices. The overall risk assessment is low, with no critical vulnerabilities detected. Strategic recommendations include enabling DNSSEC, implementing security headers, adding a cookie consent banner, and publishing a security policy with incident response contacts. These improvements would strengthen compliance, user trust, and resilience against potential threats.

Madcat.beer a.s. operates www.drinkcraftbeer.cz, an e-commerce platform specializing in the sale of craft beers, including bottles, cans, and KEG kegs, alongside merchandise and delivery services. The website targets adult craft beer consumers primarily in the Czech Republic, offering fresh and limited edition products. The business model is retail-focused with a niche market position emphasizing quality and exclusivity. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

P

Povodí Vltavy, státní podnik

pvl.cz

53

Povodí Vltavy, státní podnik, is a Czech state enterprise responsible for managing watercourses, reservoirs, and hydrological data within the Vltava river basin. The organization serves a broad audience including government bodies, media, and the general public, providing critical water management services and flood prevention information. The website reflects its official status with comprehensive contact information, hydrological monitoring data, and public notices. Technically, the site is built on AMIGO CMS 2.0, uses jQuery, and integrates Google Analytics for visitor tracking. While the site is accessible and uses HTTPS, it lacks some modern security headers and cookie consent mechanisms, which are recommended for full compliance with privacy regulations. The absence of WHOIS data limits domain trust analysis, but the content and presentation strongly indicate a legitimate government entity. Overall, the site is functional and professional but could benefit from technical and security enhancements.

Č

Český svaz kanoistů, z.s.

kanoe.cz

51

Kanoe.cz is the official Czech canoeing sports portal operated by Český svaz kanoistů, z.s., providing comprehensive news, event information, and resources for canoeing disciplines such as slalom, rafting, and paddleboarding. The website serves a targeted audience of athletes, coaches, and enthusiasts within the Czech Republic, positioning itself as a leading source of information in the national canoeing sports community. Technically, the site is built on Joomla CMS with a modern tech stack including jQuery, Mootools, Bootstrap, and UIkit, supported by Google Tag Manager and Facebook SDK for analytics and marketing. The site is hosted by Czechia.com and employs HTTPS with reCAPTCHA for form security. Privacy compliance is strong with a detailed GDPR policy and cookie consent mechanism. However, WHOIS data is unavailable due to CZ domain registry policies, which is common and does not detract from the site's legitimacy. Security posture is good but could be improved by adding security headers and publishing incident response policies. Overall, Kanoe.cz is a professional, trustworthy, and well-maintained portal serving the Czech canoeing community effectively.

S

Spolek Most-České Budějovice

krestanskepovltavi.cz

38

Křesťanské Povltaví is a cultural tourism initiative by Spolek Most-České Budějovice aimed at promoting Christian heritage sites and spiritual-educational activities in the South Bohemian region along the Vltava river. The website serves as an informational and navigational platform offering maps, detailed monument information, and cycling routes. The project is positioned as a niche non-profit cultural tourism product targeting visitors interested in religious and cultural heritage. Technically, the website is built on WordPress using Elementor and Jet plugins, providing a modern and responsive user experience with moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is safe, professional, and trustworthy but would benefit from improved privacy compliance and security hardening.

S

Spolek Most – České Budějovice

spolekmost.cz

43

Spolek Most – České Budějovice is a Czech non-profit organization dedicated to the spiritual, moral, and cultural development of individuals across various demographics. Established originally in 1993, it operates educational programs, spiritual seminars, social services, and community activities supported by local government entities. The organization maintains a clear structure with named officials and publishes annual reports for transparency. Their digital presence is built on WordPress using the Salient theme and WPBakery Page Builder, with a focus on accessibility and mobile responsiveness. However, the website lacks formal privacy and cookie policies, which are important for compliance with data protection regulations. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and a vulnerability disclosure policy.

M

Marek Chaloupka

marekchaloupka.com

43

Marek Chaloupka is a freelance creative professional specializing in UI/UX design, branding, photography, and art direction. The website serves as a portfolio showcasing a variety of projects in branding, web design, and visual arts, targeting businesses and individuals seeking high-quality creative services. The business operates primarily as a small freelance entity based in the Czech Republic, with a domain registered since 2009, reflecting a mature and stable presence. Technically, the website is built on WordPress 6.7.2 using the Semplice theme and Yoast SEO plugin, indicating a modern and SEO-optimized infrastructure. It employs Google Analytics and Google Tag Manager for user tracking, with a moderate level of performance and good mobile optimization. Hosting is provided by Webglobe, as inferred from the nameservers. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, it lacks DNSSEC and important security headers, which are recommended to enhance security posture. Privacy and cookie policies are absent, representing a compliance gap with GDPR requirements. No incident response or vulnerability disclosure information is provided. Overall, the website is professional, trustworthy, and well-maintained, but improvements in privacy compliance and security hardening are advised to reduce risk and enhance user trust.

D

dmpagency.cz s.r.o.

dmpagency.cz

57

dmpagency.cz s.r.o. is a Czech digital agency specializing in the development of large B2B and B2C e-commerce platforms, websites, and mobile applications. The company offers comprehensive services including initial analysis, development, and internet marketing, positioning itself as a strategic partner for online business solutions. The website reflects a mature digital presence with recognized certifications such as Google Partner and Microsoft Partner, indicating strong market credibility. Technically, the site uses modern web technologies including Bootstrap, JavaScript libraries, and integrates analytics and tracking tools with user consent mechanisms. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of security headers and a public privacy policy page suggests room for improvement. The lack of WHOIS data limits domain trust assessment but does not detract from the professional presentation and business legitimacy. Overall, the site is well-structured, user-friendly, and targets Czech-speaking business clients seeking digital transformation services.

Z

Zenchef

formitable.com

63

Zenchef, formerly known as Formitable, is a SaaS platform specializing in restaurant reservation management and guest engagement solutions. The company has merged with Resengo and Zenchef to form a unified platform, ZenchefOS, aiming to innovate the dining experience. The website reflects a medium-sized business with a focus on hospitality technology, targeting restaurants and similar businesses. The platform offers services including reservations, revenue management, guest profiles, and a dedicated app. Technically, the website employs modern analytics and tracking tools such as Google Analytics, Facebook Pixel, Hotjar, and LinkedIn Insight Tag, hosted on Azure DNS infrastructure with content managed via ButterCMS. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, but lacks DNSSEC and explicit security headers. Privacy compliance is partially addressed with a privacy and cookie policy present, but no cookie consent mechanism or detailed incident response policy is published. Overall, the site is professional and trustworthy with room for improvement in security and compliance transparency.

K

Knezinek Hotel und Breuerei

knezinek.at

42

Knezinek Hotel und Breuerei is a small hospitality business located near České Budějovice, Austria, combining a microbrewery, hotel, restaurant, wellness, sports facilities, and a new camping site. The website presents a professional and consistent brand image with clear descriptions of services and target audiences including families, groups, and corporate clients. Technically, the site is built on WordPress with modern themes and plugins, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and privacy compliance documentation. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security policies to improve compliance and user trust.

O

okto—digital

oktodigital.com

65

okto—digital is a Slovakia-based digital agency founded in 2014, specializing in mobile and cloud applications, design, WordPress and WooCommerce development, marketing, consulting, and emerging technologies such as AI, Big Data, and AR/VR. The company positions itself as a forward-thinking partner helping businesses grow through a digital mindset. Their website reflects a professional and modern digital presence with ISO 27001 certification, indicating a strong commitment to data security. The agency serves a business audience seeking innovative digital solutions and maintains a portfolio of notable clients and partners. Technically, the site is built on WordPress with modern integrations like Google Tag Manager, Facebook Pixel, and reCAPTCHA, hosted on Websupport.sk. Security posture is solid with HTTPS and ISO certification, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy. Overall, the website is well-designed, trustworthy, and demonstrates a mature digital infrastructure.

N

Nadácia Ekopolis

ekopolis.sk

60

Nadácia Ekopolis is a well-established Slovak non-profit foundation with over 25 years of experience in managing grant programs focused on democratizing civil society and promoting environmental sustainability. The foundation supports numerous NGOs and community projects with a flexible, low-bureaucracy approach. Their website reflects a professional and consistent brand presence, targeting environmental and civic stakeholders primarily in Slovakia. Technically, the site is built on WordPress with modern plugins and frameworks, including GDPR-compliant cookie consent and multilingual support. Security posture is strong with HTTPS, DNSSEC, and reCAPTCHA integration, though additional security headers and incident response policies could enhance their security maturity. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable resource for their audience.

J

Jumbula - Online Registration and Management Software

jumbula.com

69

Jumbula is a well-established technology company specializing in online registration and management software tailored for camps, classes, childcare, and afterschool programs. Founded in 2012 and headquartered in San Mateo, California, the company offers a SaaS platform that streamlines enrollment, payment processing, scheduling, marketing, and reporting. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting educators, activity providers, and administrators. The platform is positioned as a trusted solution in the education technology sector, emphasizing efficiency and user experience.

B

Boardable

boardable.com

72

Boardable is a specialized SaaS provider offering a comprehensive board management platform tailored for nonprofit organizations. The company has established a strong market position since its founding in 2009, focusing on streamlining nonprofit board operations through integrated video conferencing, agenda building, document management, and AI-powered tools. The website reflects a mature digital presence with excellent content quality, professional design, and clear navigation aimed at nonprofit executives, administrators, and board members. Technically, the site is built on WordPress and leverages a robust technology stack including HubSpot for marketing automation, multiple analytics platforms (Heap, Hotjar, Google Analytics), and various advertising and tracking pixels. The hosting infrastructure appears reliable with AWS DNS services. Performance and mobile optimization are excellent, supporting a seamless user experience. From a security perspective, the website enforces HTTPS, employs domain locking mechanisms, and integrates security best practices, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not publicly available. Overall, Boardable presents a low-risk profile with a strong business credibility, good security posture, and compliance maturity. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure channel to further enhance trust and security transparency.

S

SimpleCirc LLC

simplecirc.com

53

SimpleCirc LLC provides specialized subscription management software tailored for magazine, newspaper, and newsletter publishers. Established in 2015 and based in Rochester, NY, the company offers a SaaS platform that streamlines subscription ordering, renewals, back issue sales, and reporting. The business has positioned itself as a niche player with strong customer satisfaction, evidenced by 5-star reviews and positive testimonials. The website reflects a professional and consistent brand image with clear contact information and multiple calls to action for demos and free trials. Technically, the site employs modern web technologies including jQuery, Bootstrap, and integrates with popular analytics and marketing tools such as Google Analytics, LinkedIn Insight, and Calendly for scheduling. Hosting is via AWS infrastructure, ensuring reliable performance and scalability. Security posture is good with HTTPS enforced and bot protection via Cloudflare Turnstile captcha; however, improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is basic, lacking explicit privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the website is trustworthy, safe, and well-optimized for its target audience.

F

First information systems, s.r.o.

buildary.online

48

Buildary.online is a cloud-based construction project diary and management software provided by First information systems, s.r.o., targeting construction professionals in the Czech and Slovak Republics. The platform offers modules for project diary, task management, and construction works reporting, emphasizing compliance with legislation and ease of use. The website is professionally designed using Joomla CMS and hosted on Microsoft Azure, ensuring reliable infrastructure and security. Multiple marketing and analytics tools are integrated, including Google Analytics, Facebook Pixel, and Hotjar, with a cookie consent mechanism in place. However, the site lacks explicit privacy policy and terms of service pages, which are recommended for full compliance and transparency. Security posture is good with HTTPS and reputable hosting but could be improved by adding explicit security headers and a vulnerability disclosure policy.

F

First information systems, s.r.o.

firstis.eu

47

First information systems, s.r.o. is a medium-sized software company specializing in the development and implementation of building software and ERP systems, primarily targeting the construction, manufacturing, logistics, and transportation sectors. Their business model focuses on delivering proprietary software solutions alongside partner products, complemented by consulting, development, integration, and implementation services. The company maintains a professional online presence with clear contact information and customer testimonials, positioning itself as a trusted regional player in its niche. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap, jQuery, and Nextend Smart Slider. The site is mobile-optimized and uses Google Analytics and Leady for tracking. While performance is moderate, the site is well-structured and user-friendly. However, some SEO and accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks important security headers and a published privacy policy or terms of service. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. No WAF or blocking mechanisms were detected, and no sensitive data exposure was found. Overall, the website is professional and trustworthy with a solid business foundation but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

H

Haymarket Media Ltd.

campaignasia.com

68

Campaign Asia is a professional media platform owned by Haymarket Media Ltd., serving as a leading voice in advertising, marketing, media, digital, and PR news across the Asia Pacific region. The website offers comprehensive industry news, analysis, event coverage, and partner content, targeting marketing and media professionals. The platform leverages a modern technical infrastructure including Google Analytics, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Crazy Egg for analytics and user behavior tracking. It employs Google Publisher Tags for ad management and integrates multiple advertising and marketing tools to optimize user engagement and monetization. Security posture is good with HTTPS enforced and no exposed sensitive data, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. The WHOIS data is unavailable, which reduces transparency but the website content and branding strongly indicate legitimacy. Overall, the site is professional, well-maintained, and trustworthy with a high-quality user experience.

M

Marsello Limited

marsello.ai

55

Marsello AI is a technology company offering an AI-powered marketing assistant designed to unlock the value of customer data for retail and e-commerce businesses. Their platform automates marketing campaigns and provides deep analytics to enhance customer engagement. The company positions itself as a modern SaaS provider leveraging AI to deliver instant marketing insights and campaign execution. Technically, the website is built on HubSpot CMS with a modern tech stack including jQuery, Glide.js, and various analytics and marketing integrations such as Google Analytics 4, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile optimized and demonstrates good SEO and user experience practices. Security posture is solid with HTTPS enforced and domain registration protections, though there is room for improvement in security headers and published policies. Privacy compliance is basic with privacy and terms pages hosted on the main corporate domain. Overall, the website is professional and trustworthy with moderate risk due to limited direct contact information and absence of explicit security policies.

J

Javna ustanova NATURA VIVA

naturaviva.hr

44

Javna ustanova NATURA VIVA is a Croatian public institution dedicated to managing protected natural areas within Karlovačka županija. The organization focuses on environmental conservation, educational workshops, monitoring of wildlife, and public engagement. Their website reflects a regional governmental entity with a clear mission to preserve natural heritage and promote ecological awareness. The content is well-structured, informative, and targeted primarily at local citizens, schools, volunteers, and environmental stakeholders. The business model is non-commercial, operating under public funding and regional governance.