Security Directory

S

SuperSaaS

supersaas.com.br

53

SuperSaaS is a well-established SaaS company specializing in online appointment and reservation scheduling solutions, serving over 205,000 customers globally. The website is professionally designed, localized in Portuguese for the Brazilian market, and offers comprehensive information about its flexible scheduling software, integrations, and pricing models. The business targets small to medium enterprises and individual professionals across various sectors, providing a scalable and customizable platform with free and paid tiers. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations for Google Analytics and Tag Manager for performance and user behavior tracking. Hosting is managed via Amazon AWS infrastructure, ensuring reliable uptime and fast content delivery. The site is mobile-optimized and accessible, with good SEO practices implemented. From a security perspective, the site enforces HTTPS and follows best practices such as asynchronous script loading and no visible exposure of sensitive data. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected and could be improved. Privacy compliance is strong with clear privacy and cookie policies, including consent mechanisms, and GDPR compliance is indicated. No direct contact emails or phone numbers are publicly listed, which may affect user trust slightly. Overall, the website presents a low-risk profile with high legitimacy, consistent WHOIS data, and strong trust signals from customer reviews and social media presence. Strategic recommendations include enhancing security header implementation, publishing a security policy or incident response page, and providing clearer contact channels for security and data protection inquiries.

S

SuperSaaS

supersaas.de

66

SuperSaaS is a well-established German-based SaaS company specializing in online appointment booking and scheduling solutions. With a mature domain since 2007 and a strong customer base exceeding 205,000 users worldwide, it offers a flexible, multilingual platform that integrates with popular calendars, payment gateways, and communication tools. The website is professionally designed, mobile-optimized, and rich in content, targeting businesses and organizations across various sectors seeking efficient scheduling solutions. The company emphasizes ease of integration, customization, and reliable service delivery.

S

SuperSaaS

supersaas.net

67

SuperSaaS is a well-established SaaS company specializing in flexible and affordable online appointment scheduling software. The platform targets a broad range of businesses and organizations requiring scheduling solutions, offering features such as self-service booking, reminders, payment integration, and calendar synchronization. With over 205,000 customers worldwide and a presence since 2007, SuperSaaS holds a strong market position emphasizing customization and flexibility over simplicity alone. The website reflects a professional and consistent brand image with excellent content quality and user experience.

N

Nordhealth Ltd

nordhealth.com

74

Nordhealth Ltd is a well-established healthcare technology company specializing in software and APIs for healthcare and veterinary professionals. With over 18 years of experience and a large user base of clinics and healthcare professionals worldwide, Nordhealth offers products such as Provet Cloud and Diarium that streamline practice management and improve patient care. The company has demonstrated growth through acquisitions and maintains a strong Nordic identity focused on innovation and modern design. Technically, the website is built using modern static site generation technology (Eleventy), hosted on AWS infrastructure, and employs privacy-conscious analytics (Fathom). The site is fast, mobile-optimized, and accessible, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though there is room for improvement in publishing explicit security policies and enabling DNSSEC. Overall, the domain registration and WHOIS data align well with the company's history and legitimacy. The website is professional, trustworthy, and compliant with GDPR, though direct contact emails and incident response contacts are not publicly listed. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

G

Greenlee

greenlee.com

67

Greenlee is a well-established manufacturer and distributor of professional tools, primarily serving electricians, utility workers, and contractors. With over 150 years of history and as a subsidiary of Emerson Electric Co., Greenlee holds a strong market position in the manufacturing sector, offering a broad portfolio of products and services including tool manufacturing, product support, and training. The website reflects a mature digital presence with professional branding, comprehensive product information, and integration with parent and partner brands. Technically, the site uses modern web technologies such as jQuery, Materialize CSS, and AngularJS, and is built on Orchard CMS. It is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. The absence of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the strong corporate affiliation and professional presentation.

S

SuperSaaS

supersaas.cz

63

SuperSaaS.cz is a Czech localized version of the SuperSaaS online booking and reservation system, offering a flexible SaaS platform for various service providers and businesses. The website demonstrates a mature market presence with over 205,000 customers worldwide and integrates multiple payment and calendar services to enhance user experience. The platform targets small to medium businesses and individual professionals seeking efficient scheduling solutions. Technically, the site employs modern web technologies, including asynchronous JavaScript, SVG graphics, and Google Analytics, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. However, WHOIS data is unavailable, limiting domain registration transparency. Overall, the site is professional, trustworthy, and well-optimized, with minor recommendations for enhanced security headers and incident response documentation.

H

Harmonie Mutuelle

harmonie-fp.fr

70

Harmonie Mutuelle is a major French mutual insurance company specializing in health insurance and social protection services. It operates under the Groupe VYV umbrella, offering tailored solutions for individuals, entrepreneurs, and public sector employees. The website provides a comprehensive user experience with clear navigation and multiple service options, including personalized assistance and contact forms. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, suitable for a large healthcare mutual organization.

I

Italian German Exhibition Company Mexico

industrialtransformation.mx

46

Industrial Transformation Mexico (ITM) is a prominent industry event organizer focusing on Industry 4.0, manufacturing, energy, and transportation sectors. The website serves as a comprehensive platform for event information, exhibitor profiles, conference programs, and sponsorship opportunities. It targets industry professionals, buyers, exhibitors, and students, positioning itself as a leading industrial event in Mexico with international reach. The technical infrastructure is modern, leveraging Astro and React frameworks, with integrated analytics and marketing pixels from major platforms such as Google, Facebook, TikTok, and LinkedIn. The site is well-designed, mobile-optimized, and provides a rich user experience with clear navigation and professional content. Security posture is strong with HTTPS and security headers, but lacks explicit privacy and cookie policies, which impacts privacy compliance. WHOIS data confirms the legitimacy of the domain and its alignment with the business identity. Overall, the site is credible and professional but should enhance privacy compliance and incident response transparency.

A

Antithesis Operations LLC

antithesis.com

74

Antithesis Operations LLC operates a sophisticated autonomous software testing platform designed to identify and reproduce bugs in complex distributed systems, with a focus on fintech, blockchain, databases, and cloud infrastructure sectors. The company positions itself as an innovative leader in autonomous testing, providing deterministic simulation testing that enhances software reliability and reduces time-to-resolution for critical bugs. Their website reflects a mature, professional business with strong trust signals including customer testimonials and SOC 2 Type 2 certification. Technically, the website employs modern JavaScript frameworks, analytics tools such as PostHog and HubSpot, and is hosted with Amazon Registrar, indicating a robust digital infrastructure. The site is well-optimized for mobile devices, has good SEO practices, and offers a seamless user experience. However, there is room for improvement in DNS security and cookie consent mechanisms. From a security perspective, the company demonstrates good practices with HTTPS enforcement, domain status protections, and a dedicated security manifesto page. The absence of DNSSEC and explicit security headers, as well as lack of a vulnerability disclosure policy, represent minor gaps. The contact form is well-validated and includes anti-bot measures, enhancing security posture. Overall, Antithesis presents a low-risk profile with a strong business and technical foundation. Strategic improvements in DNS security, privacy compliance, and vulnerability disclosure would further enhance their security maturity and trustworthiness.

I

INSPIRE CZ s.r.o.

clubspire.cz

62

CLUBSPIRE.cz is a Czech-based software solution specializing in comprehensive management systems for fitness and sports centers. The platform offers a wide range of modules including reservation systems, membership management, email marketing, access control, and point of sale functionalities. With a client base of over 200 sports centers, CLUBSPIRE positions itself as a reliable and efficient tool for business managers in the fitness industry. The website reflects a professional and consistent brand image, supported by active content updates and social media engagement. Technically, the website employs a modern technology stack including Java-based backend architecture, Google reCAPTCHA for form security, and Google Analytics for user tracking. The site is optimized for multiple platforms including Windows, Linux, and Apple, and demonstrates good mobile responsiveness and SEO practices. Security measures such as HTTPS and consent-based cookie management are implemented, though some security headers could be enhanced. From a security perspective, the site shows a solid posture with encrypted communications and protection against automated abuse via CAPTCHA. However, the absence of published security policies and incident response contacts suggests room for improvement in transparency and preparedness. The lack of WHOIS data limits the ability to fully verify domain legitimacy, though the professional presentation and active business operations mitigate some concerns. Overall, CLUBSPIRE.cz is a credible and well-maintained business website with good technical and security foundations. Strategic enhancements in security policy publication, WHOIS transparency, and accessibility would further strengthen its trustworthiness and compliance posture.

N

Netpromotion group s.r.o.

netfirmy.cz

62

Netfirmy.cz operates as the largest regional business directory and lead generation platform focused on Eastern Bohemia, Czech Republic. It provides verified company listings, user ratings from Google and Facebook, and facilitates business inquiries with over 120,000 monthly requests. The website is owned by Netpromotion group s.r.o., a company with over 19 years of market presence, positioning itself as a trusted regional business resource. The platform targets general users seeking reliable local businesses and services.

A

AUMOVIO SE

continental-automotive.com

61

AUMOVIO SE is a large German company specializing in future mobility solutions, including software-defined vehicles, electric mobility, vehicle electrical/electronic architectures, safety, driver assistance, and user experience technologies. The company recently became publicly listed on the Frankfurt Stock Exchange, indicating a strong market presence and investor confidence. Their website is professionally designed, mobile-optimized, and rich in relevant content targeting automotive industry professionals, investors, and potential employees. Technically, the site uses modern technologies such as Adobe Experience Manager, Google Tag Manager, and ConsentManager for privacy compliance. Security posture is good with HTTPS and consent mechanisms, but lacks explicit security policies and vulnerability disclosures. Overall, the website reflects a mature digital presence with good privacy compliance and business credibility, though the absence of WHOIS data for the domain is a concern that should be investigated further.

P

Political Watch

qhld.es

40

Qué hacen los diputados is a Spanish non-profit transparency platform operated by Political Watch that provides citizens, journalists, and researchers with accessible data and tools to monitor the activities of the Spanish Congress of Deputies. The website offers legislative initiative tracking, political orientation insights, and government control information, supporting democratic participation and accountability. Technically, the site uses modern JavaScript frameworks (Vue.js) and build tools (Vite), delivering a responsive and well-structured user experience with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and formal policies could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the site is trustworthy, professionally maintained, and aligned with its civic mission.

N

Noona

noona.app

69

Noona is a Finnish-based online booking platform that enables users to book appointments across a wide range of service categories including hairdressing, barbershops, wellness, healthcare, and restaurant table reservations. The platform also offers gift vouchers and business management tools through Noona HQ. The company targets both consumers seeking convenient booking solutions and service providers aiming to streamline scheduling. The website is well-designed, mobile-optimized, and integrates modern web technologies such as React and Next.js, with a strong app presence on iOS and Android. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism implemented. Security posture is strong with HTTPS and security headers, though dedicated security policies and incident response information are not publicly available. Overall, Noona presents a professional and trustworthy digital presence with good SEO and accessibility standards.

O

OBORA OBELISK s.r.o.

oboraobelisk.cz

52

Obora Obelisk is a small Czech company focused on a unique landscape restoration and wildlife conservation project. The website presents a well-structured and content-rich platform describing the mission, history, and current activities including hunting and educational programs. The company is led by Ing. František Fabičovic and provides clear contact information and legal registration details, enhancing business credibility. Technically, the site uses Joomla CMS with modern front-end libraries and is optimized for mobile devices. Security posture is good with HTTPS and cookie consent mechanisms implemented, though security headers and incident response information are lacking. Privacy compliance is well addressed with a cookie policy and GDPR-aligned consent. Overall, the site is professional, trustworthy, and safe for general audiences.

C

CoreShop GmbH

coreshop.org

61

CoreShop GmbH operates a professional and comprehensive website offering an open source e-commerce platform tightly integrated with Pimcore. The company targets businesses requiring customizable B2B and B2C e-commerce solutions, supported by enterprise bundles, development, consulting, and training services. Their market position is strong within the Pimcore ecosystem, supported by a developer-friendly approach and active partner program. Technically, the website is modern, mobile-optimized, and uses trusted technologies such as Google Analytics and Tag Manager, with good SEO and accessibility practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The domain WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional site and active community presence. Overall, the site is trustworthy, well-maintained, and business credible.

C

CoreShop GmbH

coreshop.com

69

CoreShop GmbH operates a professional and well-designed website offering an open source e-commerce platform enhanced by Pimcore. The company targets businesses requiring customizable B2B and B2C e-commerce solutions, supported by enterprise bundles, consulting, development, and training services. The website demonstrates a mature digital presence with strong developer and partner engagement, including active GitHub repositories and Slack community links. Technically, the site uses modern web technologies, integrates Google analytics and marketing tools, and provides a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain is a concern and reduces trustworthiness, but the professional content and clear contact information mitigate this risk. Overall, the website is trustworthy, technically sound, and business credible, suitable for its target audience.

B

BiznisWeb s.r.o.

flox.sk

62

BiznisWeb s.r.o. operates a mature and well-established e-commerce platform primarily targeting small and medium-sized businesses in Slovakia and the Czech Republic. The company offers a SaaS model enabling users to quickly create and manage their own online stores with customizable templates, multi-language support, and integrated payment and shipping options. The website reflects a professional and user-friendly design with strong customer testimonials and comprehensive service offerings. Technically, the site employs modern JavaScript frameworks, tracking tools with consent management, and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trust.

M

Mondo Spa

mondoworldwide.com

62

Mondo Spa operates a professional website focused on sport flooring systems and artificial turf, targeting sports facilities and athletes globally. The company positions itself as a leading provider of high-quality sport surfaces, supporting athletes in achieving outstanding results. The website demonstrates a moderate to advanced digital maturity with modern JavaScript technologies, CDN hosting, and integration of marketing and analytics tools such as Google Tag Manager and Cookiebot. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security policies and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be addressed to improve trust. Overall, the website is well-designed and functional but would benefit from enhanced privacy, security, and compliance disclosures.

V

Veolia Ireland

veolia.ie

71

Veolia Ireland is a key player in ecological transformation within Ireland, focusing on helping businesses and communities reduce their environmental impact through decarbonisation, water footprint reduction, and recycling initiatives. The website reflects a strong alignment with the global Veolia Group brand and presents comprehensive information about their services and sustainability efforts. Technically, the site is built on Drupal CMS, employs modern web technologies, and integrates consent management tools to comply with GDPR requirements. Security posture is robust with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates a mature digital presence suitable for a large enterprise in the environmental services sector.

S

Scaleway SAS

scaleway.com

83

Scaleway SAS is a prominent European cloud service provider specializing in delivering a resilient and sustainable cloud ecosystem tailored for AI and intelligent applications. The company offers a broad portfolio of cloud infrastructure services including dedicated servers, virtual instances, GPU-powered computing, serverless functions, containers, storage solutions, managed databases, and emerging quantum computing services. Positioned as a European alternative to major hyperscalers, Scaleway emphasizes data sovereignty, compliance with GDPR, and environmental sustainability. Their market presence is supported by a large customer base and a comprehensive partner ecosystem. Technically, Scaleway's website is built on modern web technologies such as Next.js and React, with a CMS likely powered by Strapi. The platform demonstrates excellent performance, mobile optimization, and accessibility. The use of structured data and comprehensive metadata supports strong SEO and user experience. Hosting appears to leverage both their own infrastructure and AWS S3 for media assets. From a security perspective, the website enforces HTTPS, provides detailed security and resilience information, and implements GDPR-compliant cookie consent mechanisms. While no explicit security headers were detected in the provided data, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Incident response channels are available, including abuse reporting. Overall, Scaleway presents a trustworthy, professional, and technically mature cloud provider with a strong focus on European market needs, AI innovation, and sustainability. The lack of public WHOIS data is consistent with privacy protection practices common in the industry and does not detract from the company's legitimacy. Strategic recommendations include enhancing public security header disclosures and adding a vulnerability disclosure policy to further strengthen trust.

C

C4C group

c4c.com

53

The C4C group website presents a professional business offering strategic consulting, creative communication solutions, and custom web development services primarily targeting large companies, public institutions, and medium-sized enterprises in Germany. The site is built on TYPO3 CMS and integrates Cookiebot for GDPR-compliant cookie consent management. The technical infrastructure is modern and mobile-optimized, with good SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and publicly available security policies or incident response contacts. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the professional website presence. Overall, the site is trustworthy and well-designed but would benefit from enhanced transparency and security disclosures.

S

Sciencesconf

sciencesconf.org

60

Sciencesconf is a French academic platform dedicated to the management of scientific conferences, workshops, and colloquia. It offers a free, comprehensive toolset for organizers to create event websites, manage communications, organize peer reviews, and track registrations. The platform is well integrated with the HAL open archive, enhancing its utility for the research community. The website is professionally designed, multilingual, and targets academic organizers and researchers primarily in France. Technically, Sciencesconf is built on WordPress with modern SEO and analytics tools like Matomo, ensuring good digital maturity and privacy respect. Security posture is solid with HTTPS and secure forms, though some security headers and incident response details could be improved. Overall, the platform demonstrates high trustworthiness and professionalism, supported by its affiliation with the reputable CCSD and HAL organizations.

C

CBL Asset Management

cblam.lv

10

CBL Asset Management is a Latvian-based financial services company specializing in asset management, including pension plans, investment funds, and portfolio management. It operates under the Citadele Group umbrella, targeting private banking clients and investors seeking sustainable financial growth. The website presents a professional and consistent brand image with clear service offerings and multilingual support, primarily in Latvian. The company maintains a solid market position within Latvia's finance sector, focusing on high-quality investment products and client consultations. Technically, the website employs modern web technologies such as JavaScript, SVG graphics, and Google Tag Manager for analytics. It uses Turbolinks for navigation optimization and implements HTTPS with CSRF protection on forms, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policy documentation and incident response contact information, which are recommended for enhanced transparency and trust. No vulnerabilities or suspicious content were detected, and the WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, reflecting a trustworthy and professional online presence. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture and client confidence.

I

International Council of Nurses

icn.ch

66

The International Council of Nurses (ICN) is a globally recognized federation representing over 130 national nursing associations. The organization serves as the authoritative voice for nursing worldwide, focusing on policy advocacy, education, leadership development, and global health initiatives. Their website reflects a professional and comprehensive digital presence, targeting nursing professionals, healthcare policymakers, and global health stakeholders. The content is rich, multilingual, and well-organized, supporting their mission to advance nursing and health policy globally. Technically, the website is built on Drupal 10, leveraging modern web technologies including SVG graphics and asynchronous loading of analytics scripts such as Google Tag Manager and Plausible Analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formalized privacy and cookie policies, which are important for compliance and user trust. No vulnerability disclosure or incident response information is present, indicating room for improvement in transparency and security maturity. Overall, the ICN website is a trustworthy and authoritative platform with strong business credibility and technical foundations. Strategic enhancements in privacy compliance and security best practices would further strengthen its posture and user confidence.

GENESIS Pharma is a well-established biopharmaceutical company specializing in the commercialization of innovative pharmaceutical products targeting serious and rare diseases across Central and Eastern Europe. The company positions itself as a trusted regional partner for leading global biopharmaceutical firms, with a portfolio focused on chronic and rare disease treatments. Their business model centers on strategic partnerships, pharmacovigilance, and logistics services to ensure innovative therapies reach patients effectively. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization, supporting their market position as a regional leader. Technically, the website employs modern JavaScript libraries such as Swiper.js for interactive content and includes a cookie consent mechanism indicating awareness of privacy compliance. The site is responsive and well-structured, though explicit privacy and terms of service pages are not found, which is a compliance gap. Security posture is good with HTTPS enforced and secure form inputs, but lacks some advanced security headers and incident response contact details. Overall, the security posture is solid but could be improved by publishing comprehensive privacy policies, terms of service, and vulnerability disclosure information. The absence of WHOIS data for the domain is a concern that slightly reduces trustworthiness, though the website content and partner affiliations strongly indicate legitimacy. Strategic recommendations include enhancing transparency on privacy and security policies and improving domain registration visibility to bolster trust.

P

ProProfs Survey Maker

proprofssurvey.com

62

ProProfs Survey Maker is a well-established SaaS platform offering online survey creation tools enhanced with AI capabilities. It targets individuals and businesses seeking to gather customer feedback through customizable surveys, forms, polls, and quizzes. The platform is part of the larger ProProfs brand, which includes multiple related products and subsidiaries, indicating a mature market presence. The website demonstrates professional design, clear navigation, and mobile optimization, supporting a positive user experience. Technically, it employs modern web technologies and integrates Google Tag Manager for analytics, reflecting a moderate to advanced digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are lacking. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS domain registration data is a notable concern, reducing trustworthiness despite the professional appearance and business legitimacy. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security transparency and domain registration clarity.

N

Nannen & Carls Steuerberatungsgesellschaft mbH

nannen-carls.de

62

Nannen & Carls Steuerberatungsgesellschaft mbH is a well-established tax consultancy firm based in Aurich, Germany, with a history dating back to 1982. The company offers a broad range of tax and economic advisory services, emphasizing digitalization, corporate succession, inheritance tax law, audits, restructuring, and business consulting. Their website reflects a professional and modern approach, leveraging Webflow CMS and Cookiebot for GDPR-compliant cookie management. The firm targets businesses and individuals in the Aurich region and Ostfriesland, focusing on personalized client service and employee development. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies, although some security headers are missing. The security posture is solid with HTTPS and cookie consent mechanisms in place, but could be improved with additional security headers and explicit incident response policies. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the entity. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party scripts.

C

CaptchaFox

captchafox.com

52

CaptchaFox is a Germany-based technology company specializing in GDPR-compliant captcha and bot protection services for websites and mobile applications. Founded in 2020, it positions itself as a privacy-first alternative in the bot mitigation market, emphasizing compliance with European data protection standards and adaptive bot detection technologies. The website reflects a professional SaaS business model targeting companies seeking to protect their digital assets from malicious bot traffic while maintaining user privacy. Technically, the website is built using modern frameworks such as Next.js and React, hosted on bunny.net, and optimized for performance and accessibility. The site demonstrates good SEO practices and mobile responsiveness, with rich SVG graphics and structured data enhancing its digital maturity. However, explicit privacy and cookie policies are not directly found in the provided content, which could be improved to enhance transparency. From a security perspective, the site uses HTTPS and has domain transfer protections in place. There is no evidence of security.txt or vulnerability disclosure mechanisms, and security headers are not detected in the provided data. The absence of explicit contact information and security policies suggests areas for improvement in incident response readiness and user trust. Overall, CaptchaFox presents a credible and professional online presence with a strong focus on privacy and compliance. Strategic enhancements in policy disclosures, security headers, and contact transparency would further strengthen its security posture and compliance standing.

S

Supabase

supabase.com

70

Supabase is a technology company providing a Postgres development platform that enables developers and businesses to build scalable applications with integrated backend services such as authentication, realtime data, edge functions, storage, and vector embeddings. The company is positioned as a modern, open-source alternative to Firebase, targeting developers seeking a robust and extensible backend platform. The website demonstrates a high level of digital maturity with a modern tech stack including React and Next.js, hosted with Cloudflare and registered via Amazon Registrar. The site is well-designed, mobile-optimized, and provides clear navigation and rich content, reflecting professionalism and strong market positioning. Security posture is good with HTTPS and domain protection statuses, but could be enhanced by enabling DNSSEC and publishing explicit security and privacy policies. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

S

Supabase

supabase.co

70

Supabase is a technology company providing a Postgres-based development platform that enables developers to build production-grade applications with integrated backend services such as authentication, realtime data, storage, and vector embeddings. Positioned as an open-source alternative to Firebase, Supabase targets developers and businesses seeking scalable backend infrastructure with a strong focus on Postgres. The company has established a strong market presence with notable customers and a popular GitHub repository. Technically, the website is built using modern frameworks like Next.js and React, hosted with Cloudflare DNS and CDN services, and demonstrates excellent performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain protections, though improvements can be made by enabling DNSSEC and publishing formal security policies. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in the technology sector.

N

Nadace VINCI

nadacevinci.cz

49

Nadace VINCI is a Czech Republic-based non-profit foundation affiliated with the VINCI group, focusing on social inclusion, employment access, mobility, housing, and youth support projects. The website is built on WordPress and uses common web technologies such as jQuery and Slick Carousel. It is well-branded and provides detailed information about supported projects and foundation goals. The site is accessible, mobile-optimized, and uses HTTPS, but lacks explicit privacy and terms of service pages. No direct contact emails or phone numbers are visible, which may impact user trust and communication. WHOIS data is unavailable, which reduces domain registration transparency and trust. Cookie consent is implemented, indicating some privacy compliance efforts.

L

Loterie Maxa s.r.o.

korunka.eu

66

Loterie Maxa s.r.o. operates a Czech lottery and gambling platform offering a variety of games including lotteries, online scratch cards, bingo, and Vegas-style casino games. The company targets adult users interested in gaming and gambling, providing daily opportunities to win significant prizes. The website demonstrates strong branding and partnerships with established Czech betting companies such as Tipsport and Chance, enhancing its market position. The business model revolves around online and physical lottery services with promotional bonuses and a partner program to expand reach. Technically, the website is built using modern web technologies including React and JavaScript, with integrations for analytics and performance monitoring via Google Tag Manager and Dynatrace. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some accessibility features could be improved. The website enforces HTTPS and implements cookie consent mechanisms, reflecting a good level of privacy compliance. From a security perspective, the site uses HTTPS and consent management but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data for the domain is a concern for trust and legitimacy verification, although the website content and partnerships suggest a legitimate operation. Overall, the website presents a professional and trustworthy platform for lottery gaming in the Czech Republic, but improvements in transparency regarding domain registration, security policies, and contact information would enhance trust and compliance.

N

Nomads.com

nomadlist.com

63

Nomads.com is a well-established online platform dedicated to digital nomads and remote workers, providing comprehensive data on the best places to live and work remotely worldwide. The platform offers city rankings based on cost of living, internet speed, weather, safety, and other relevant metrics, alongside community features such as meetups, chat, and nomad insurance. It has a strong market position as a leading nomad community since 2014, supported by extensive user reviews and media recognition. Technically, the website is custom-built with modern web technologies including jQuery and Cloudflare services for hosting and streaming. It demonstrates good performance, mobile optimization, and SEO practices. However, there is room for improvement in privacy compliance, particularly regarding cookie consent mechanisms and explicit security policies. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protection. No major vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain registration consistent with the business's legitimacy. Nonetheless, enabling DNSSEC and publishing security policies would enhance the security posture. Overall, Nomads.com presents a professional, trustworthy, and content-rich platform with moderate privacy compliance and solid security foundations. Strategic improvements in privacy and security transparency would further strengthen its risk profile and user trust.

N

Nederlandse Vereniging van Banken

nvb.nl

70

The Nederlandse Vereniging van Banken (NVB) is a Dutch banking industry association representing both Dutch and foreign banks active in the Netherlands. The organization focuses on fostering a prosperous, sustainable, and inclusive society, maintaining strong connections with Europe and the global financial community. Their key services include industry representation, public awareness campaigns such as fraud prevention, policy advocacy, and providing information resources to stakeholders and the public. The NVB holds a leading market position as the primary banking sector association in the Netherlands. Technically, the NVB website employs modern web technologies including Vue.js, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized with good SEO practices and moderate performance. The infrastructure is secure with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. From a security perspective, the NVB website demonstrates a mature security posture with good privacy compliance, including GDPR adherence and cookie consent. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which could enhance trust and preparedness. The domain registration data aligns well with the organization's claims, indicating a legitimate and consistent online presence. Overall, the NVB website is professional, trustworthy, and well-aligned with its business objectives. Strategic recommendations include enhancing security headers, publishing a security policy and vulnerability disclosure, improving accessibility, and providing direct security contact information to strengthen the security culture and stakeholder trust.

U

Untappd, Inc

untappd.com

64

Untappd, Inc operates a well-established social platform focused on beer enthusiasts, offering mobile apps and web services for beer discovery, check-ins, and ratings. The company also provides business services to bars and breweries, including menu publishing and analytics. The website demonstrates a mature digital presence with professional design, responsive layout, and clear navigation. The technical infrastructure leverages modern CSS frameworks and Cloudflare DNS, supporting fast performance and mobile optimization. Security posture is solid with HTTPS and domain registration protections, though improvements are possible by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with accessible privacy and cookie policies, indicating GDPR awareness. Overall, Untappd presents a credible and trustworthy online presence with a strong market position in the social beer discovery niche.

C

CREATION.CZ

creation.cz

45

CREATION.CZ is a small digital agency based in Pelhřimov, Czech Republic, specializing in custom web development, graphic design, internet marketing, product photography, and advertising services. The company emphasizes originality and technical precision over mass-produced templates, targeting local businesses and individuals seeking professional digital solutions. Their website reflects a consistent brand identity with clear navigation and professional content, supported by client testimonials and social media presence. Technically, the website employs modern web technologies including JavaScript, jQuery, Google reCAPTCHA, and Google Tag Manager for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, with HTTPS enforced and a cookie consent mechanism in place. However, no CMS or hosting provider information is discernible, and some security headers appear to be missing. From a security perspective, the site demonstrates good practices such as HTTPS usage and form protection via reCAPTCHA. The presence of a GDPR-compliant privacy policy and cookie banner indicates attention to privacy compliance. However, the absence of WHOIS data and security policies, as well as missing security headers, suggests areas for improvement in transparency and security posture. Overall, CREATION.CZ presents a trustworthy and professional digital agency with a solid online presence but would benefit from enhanced security disclosures and domain registration transparency to strengthen trust and compliance.

B

BOHUŠOVICKÁ MLÉKÁRNA, A.S.

bobik.cz

49

Bobík is a Czech brand operated by Bohušovická mlékárna, a medium-sized dairy manufacturer focused on producing and marketing curd-based dairy snacks and related products. The website serves as a consumer engagement platform offering product information, downloadable entertainment content for children, recipes, and event details such as roadshows. The company targets families with children and positions itself as a trusted regional dairy brand with active community interaction. Technically, the website is built on WordPress and uses modern web technologies including SVG graphics, Google reCAPTCHA Enterprise for form security, and Typekit fonts for typography. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate, and HTTPS is properly enforced. From a security perspective, the site benefits from HTTPS and reCAPTCHA integration but lacks several important security headers that could enhance protection against common web threats. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy document, but no cookie consent mechanism is present. WHOIS data is unavailable, which slightly reduces domain trustworthiness but does not contradict the legitimacy indicated by the website content and contact details. Overall, the website presents a professional and trustworthy front for the Bobík brand with good content quality and business credibility. Strategic improvements in security headers, cookie consent, and transparency of domain registration would further strengthen its security posture and compliance standing.

D

Digital First Marketing Group

folkapp.cz

47

FOLK is a mobile application designed to facilitate internal communication within companies, enhancing the connection between employees and employers. Operated by Digital First Marketing Group, a marketing agency based in the Czech Republic, the service targets businesses seeking efficient HR communication tools. The website presents a professional and consistent brand image, offering tiered pricing plans and emphasizing ease of use and real-time feedback features. Technically, the site uses Firebase services and custom JavaScript bundles, with mobile optimization and cookie consent mechanisms in place. However, it lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is moderate with HTTPS usage but missing security headers and detailed policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

D

DFMG

pria.cz

47

DFMG is a Czech marketing group combining expertise from digital communication agencies and technology firms. They offer a broad range of services including graphic design, application development, performance marketing, content marketing, multimedia production, event management, client service, and strategic creative consulting. The website demonstrates a professional digital presence with modern technologies such as Google Analytics and Tag Manager, and a cookie consent mechanism. However, the absence of WHOIS data and privacy policy pages limits full trust assessment. Security posture is moderate with HTTPS enabled but lacking explicit security headers and incident response information. Overall, the site is well-structured and targets businesses seeking comprehensive digital marketing solutions.

V

Vitana

vitana.cz

50

Vitana.cz is a well-established Czech website offering a wide range of food products, primarily spices, seasonings, sauces, and soups, along with recipe content to inspire consumers. The brand has a strong market presence in the Czech Republic, supported by a domain registered since 1997 and active social media channels. The website is professionally designed with good content quality and consistent branding, targeting general consumers interested in cooking and food preparation. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics with IP anonymization, Hotjar for user behavior analytics, and Facebook Pixel for marketing. Cookie consent is managed via CookieYes, indicating a basic level of privacy compliance. The site is mobile-optimized and uses responsive design, though no explicit CMS or hosting provider details are evident. From a security perspective, the website uses HTTPS and implements some privacy features such as anonymized analytics and cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no visible security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is good but could be improved with additional headers and published policies. The website content is safe for general audiences, focusing on food and recipes without any adult or explicit material. No WAF or blocking mechanisms were detected, allowing full content access. The WHOIS data confirms the domain's legitimacy and consistency with the brand's history. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and providing clear contact information for incident response and data protection.

V

VML

labstore.cz

67

VML is a globally recognized creative agency operating in the Czech Republic, formed from the merger of Wunderman Thompson and VMLY&R. It offers a comprehensive suite of services including creative campaigns, customer experience management, scalable content production, technology and AI integration, and data privacy governance. The company is positioned as the largest agency in the Czech market with a strong global network supported by its parent company WPP. Technically, the website employs modern web technologies such as Google Analytics, OneTrust for cookie consent, and Cloudinary for media delivery, ensuring a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though improvements in security headers and explicit incident response policies are recommended. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data transparency slightly impacts domain trustworthiness.

A

advertia digital s.r.o.

advertia.cz

49

advertia digital s.r.o. is a well-established full-service digital agency based in the Czech Republic, specializing in branding, marketing, web design, and strategic communication. With over a decade of experience and recognition as the top digital agency in the Czech Republic by Clutch in 2025, the company targets brands, startups, and businesses seeking impactful digital growth solutions. Their service portfolio includes brand workshops, consulting, campaigns, and rapid digital sprints tailored for urgent business needs. Technically, the website is built on WordPress with modern SEO and multilingual capabilities, leveraging tools like Yoast SEO, WPML, Google Analytics, and Cookiebot for privacy compliance. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is attributed to privacy protection, which is justified for this business type. Overall, the website presents a strong security posture with room for improvement in formal security disclosures. The overall risk is low, supported by professional content, clear business information, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing security policies, and establishing vulnerability disclosure channels to further strengthen trust and security posture.

S

Seznam.cz

seznamzpravy.cz

64

Seznam Zprávy is a prominent Czech news media platform operated under the Seznam.cz brand, offering a wide range of news articles, videos, podcasts, and newsletters targeting a general audience in the Czech Republic. The website demonstrates a strong market position as a leading news source with comprehensive coverage across multiple sectors including domestic news, business, culture, and technology. Technically, the site employs modern web technologies such as ES2018+ JavaScript, Webpack bundling, and responsive design, ensuring good performance and accessibility across devices. Security-wise, the site enforces HTTPS and uses standard best practices, though explicit security headers and privacy policies are not clearly visible in the provided content. Overall, the site is professional and trustworthy, though improvements in privacy compliance and explicit security disclosures are recommended.

W

Wavebreak Media Ltd.

wavebreakmedia.com

70

Wavebreak Media Ltd. is a well-established media production company founded in 2006, specializing in premium photography, authentic imagery, customizable templates, graphic design, and high-quality video content including 4k and slow motion. The company targets large enterprises and key industry players, positioning itself as a trusted partner with a proprietary technology platform and a vast library of over 3 million copyrighted creative assets. The website reflects a professional and consistent brand image with excellent content quality and clear navigation. Technically, the site uses modern JavaScript, SVG graphics, and is hosted via Amazon Registrar infrastructure, with Google Tag Manager for analytics. Security posture is good with HTTPS and Content-Security-Policy headers, though DNSSEC is not enabled and additional security headers could be added. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. No contact emails or phone numbers are explicitly listed, relying on contact forms and social media channels. Overall, the site is trustworthy, secure, and professionally maintained, with room for improvement in security headers and privacy compliance.

S

Sport.cz - s námi jste ve hře

sport.cz

61

Sport.cz is a prominent Czech sports news website offering comprehensive coverage of various sports including football, hockey, tennis, motorsport, and winter sports. The platform targets sports enthusiasts primarily within the Czech Republic and operates under an advertising-supported business model. It is likely affiliated with Seznam.cz, a major Czech internet company, which enhances its market position and credibility. The website provides live scores, news articles, video highlights, and a fantasy sports league, catering to a broad audience of sports fans. From a technical perspective, Sport.cz employs modern web technologies including ES modules, SVG graphics, and CSS3, ensuring good mobile optimization and a professional user experience. The site integrates with Seznam.cz's internal APIs and uses various tracking and advertising services such as Gemius and Google Tag Manager. Performance is moderate with room for improvement in accessibility and explicit privacy compliance features. Security-wise, the website enforces HTTPS and appears to follow good security practices, although explicit security headers and vulnerability disclosure mechanisms are not evident. The absence of public WHOIS data due to privacy protection is common for media websites but limits trust signals from domain registration information. No signs of malicious activity or adult content were detected, indicating a safe environment for general audiences. Overall, Sport.cz is a well-established media platform with a solid technical foundation and good business credibility. However, it would benefit from enhanced privacy compliance transparency, explicit security policies, and improved accessibility features to strengthen user trust and regulatory adherence.

A

Adaero Software

affilimate.io

63

Affilimate, operated by Adaero Software, is a specialized SaaS platform focused on affiliate content optimization and link tracking for publishers and professional creators. The company offers tools that enable users to track affiliate links, analyze revenue attribution, segment content, and monitor content revisions to maximize affiliate revenue. Positioned as a niche player in the affiliate marketing technology space, Affilimate targets media companies and creators seeking to grow their commerce revenue systematically. The website reflects a mature business with a domain registered since 2003, indicating stability and longevity. Technically, the website is built on modern web technologies including React and Gatsby, leveraging Material-UI for design consistency and Google Fonts for typography. The site is fast, mobile-optimized, and accessible, with good SEO practices evident in meta tags and structured content. Hosting appears to be on a reliable cloud platform, and the site uses HTTPS with a secure domain registration status. However, some security best practices such as DNSSEC and security headers are not implemented, and no explicit security or incident response policies are published. From a security perspective, the site is well-configured with HTTPS and domain transfer protection, but lacks advanced security headers and formal vulnerability disclosure mechanisms. No signs of WAF or blocking mechanisms were detected, and no sensitive data exposure or vulnerabilities were found in the content. Privacy compliance is supported by a comprehensive privacy policy, though no cookie consent mechanism is visible. Contact information is limited to a contact form and social media channels, with no direct emails or phone numbers publicly listed. Overall, Affilimate presents a professional, trustworthy, and technically sound web presence suitable for its business model. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance. The business is well-positioned in its niche with a clear value proposition and a strong technical foundation.

T

TANATEX Chemicals

tanatexchemicals.com

60

TANATEX Chemicals is a well-established global specialist in textile chemicals, focusing on innovation and sustainability within the textile manufacturing industry. The company offers a range of products and services including textile chemical development, lab services, hangtags, and toll manufacturing. Their market position is strengthened by a 60-year history and certifications such as BlueSign and Roadmap to Zero, indicating commitment to sustainable practices. The website reflects a professional B2B business model targeting textile industry professionals such as brands, dyehouses, and mills. Technically, the website is built on a modern stack including Laravel backend, Alpine.js frontend, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, with good performance. However, some security headers are missing, and no explicit security or incident response policies are published. Security posture is solid with HTTPS enforced, CSRF protection on forms, and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with clear privacy and cookie policies and GDPR indicators. Business credibility is high with clear contact details, professional content, and trust signals. Overall, the website presents a low risk profile with strong business credibility and good technical implementation. Strategic improvements include adding security headers, publishing a security policy, and establishing a vulnerability disclosure process to further enhance trust and security posture.

E

Energigas Sverige

energigas.se

57

Energigas Sverige is a well-established Swedish industry association representing actors in the energy gas sector, including biogas, vehicle gas, LPG, natural gas, syngas, and hydrogen. Founded in 2003, it serves as a central hub for advocacy, information dissemination, event organization, and publication of industry standards and guidelines. The website reflects a professional and consistent brand presence targeting stakeholders and members within the Swedish energy gas market. Technically, the site uses modern web technologies such as Google Tag Manager, Google Maps API, and a cookie consent mechanism, likely built on the Umbraco CMS platform and hosted by Loopia AB. The site is mobile-optimized with good SEO and accessibility basics. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC, security headers, and published security policies. Privacy compliance is partial, with cookie consent implemented but no explicit privacy or terms of service pages found. Overall, the site is trustworthy and professionally maintained, with a high legitimacy score based on domain age and WHOIS data.