Security Directory

F

Futaba Czech, s.r.o.

fcz.cz

56

Futaba Czech, s.r.o. is a medium-sized manufacturing company specializing in automotive parts, operating as a subsidiary of the Japanese Futaba Industrial Co., Ltd. Founded in 2004, the company emphasizes environmentally friendly production technologies such as pressing and welding. The website presents a professional and consistent brand image with clear business information and product offerings targeting automotive industry clients and job seekers. Technically, the site uses established JavaScript libraries and a custom CMS, delivering moderate performance and good mobile optimization. Security posture is adequate with GDPR compliance and cookie consent mechanisms, though lacking visible HTTP security headers and explicit incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the overall digital presence is credible and professional. Strategic improvements in security headers, incident response transparency, and domain registration clarity are recommended to enhance trust and compliance.

A

Avant Tecno

avanttecno.com

53

Avant Tecno is a manufacturer specializing in articulated loaders and a wide range of attachments, targeting industrial and construction sectors. The website presents a professional image with a focus on product versatility and multi-functionality. The company appears to be established in Finland with a medium-sized business profile. Technically, the website is built on the concrete5 CMS platform and utilizes modern web technologies including jQuery, Google Tag Manager, and Cookiebot for cookie consent management. The site integrates Google Maps API and various marketing and analytics tools such as HubSpot and Hotjar, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security or incident response policies. The absence of WHOIS data for the domain reduces trust slightly, though the website content and technology usage suggest a legitimate business. Overall, the site is functional, moderately optimized, and compliant with basic privacy requirements, but could improve transparency and security posture.

P

Purem GmbH

purem.com

69

Purem GmbH, a subsidiary of the Eberspächer Group, specializes in exhaust gas cleaning and acoustic systems aimed at enabling clean and quiet mobility for passenger cars and commercial vehicles. The company positions itself as a key player in the automotive supplier sector, focusing on innovative solutions to improve air quality and reduce noise emissions globally. The website reflects a professional and consistent brand image aligned with its parent company, targeting automotive industry stakeholders and environmentally conscious customers. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes consent management tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and incident response information are absent. The missing WHOIS data for the domain is a notable concern but is mitigated by the strong brand presence and external references to the reputable parent company. Overall, the site demonstrates good business credibility and technical implementation with room for improvement in transparency and security disclosures.

M

Muhr und Bender KG

mubea.com

66

Muhr und Bender KG (Mubea) is a globally recognized supplier and innovative lightweight specialist primarily serving the automotive industry, with additional focus on aviation and micromobility sectors. The company offers a broad range of products including springs, stabilizers, precision steel tubes, and composite components, positioning itself as a market leader in lightweight automotive components. The website reflects a mature digital presence built on Drupal 11, featuring modern frontend technologies and a comprehensive content structure targeting industry professionals, partners, and potential employees. Technically, the site employs a robust CMS with responsive design, accessibility considerations, and SEO best practices. Analytics are implemented via Etracker, and cookie compliance mechanisms are in place, demonstrating attention to privacy regulations such as GDPR. However, explicit security headers and incident response policies are not publicly documented, representing an area for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS domain registration details reduces trustworthiness slightly, but the professional presentation and extensive business information mitigate concerns. Overall, the site is secure, compliant, and professionally maintained, supporting Mubea's reputation as a reliable industry partner. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing a security.txt file to facilitate vulnerability disclosures. These steps would further strengthen trust and compliance posture.

A

Autoneum. Mastering Sound and Heat.

autoneum.com

71

Autoneum is a global market leader specializing in acoustic and thermal management solutions for the automotive industry. The company presents a professional and well-structured website built on WordPress, leveraging modern SEO and analytics tools to engage its target audience of automotive professionals and suppliers. The website content emphasizes Autoneum's leadership position and key services, including product brochures, supplier portals, and career opportunities. Technically, the site uses a mature tech stack with popular plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS data raises concerns about domain registration transparency, but the overall business credibility and website professionalism mitigate immediate trust issues. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and providing direct contact information for incident response.

S

Schleswiger Unternehmertag

schleswiger-unternehmertag.de

53

The Schleswiger Unternehmertag website serves as a digital platform promoting a regional entrepreneurial event held in Schleswig, Germany. The event focuses on leadership, crisis management, and networking among local businesses, targeting entrepreneurs and business leaders in the Schleswig and Schleswig-Flensburg regions. The website features multimedia content including videos and images from past events, providing attendees and interested parties with insights and event highlights. The business model centers on event organization and regional business community engagement, positioning itself as a recurring and established event in the local market. Technically, the website is built on WordPress using the Elementor page builder, enhanced with Borlabs Cookie for GDPR-compliant cookie management. It integrates YouTube videos with privacy-enhanced embedding and uses modern web technologies such as jQuery. Hosting is provided by RZone, indicated by the nameservers. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features, though there is room for improvement in accessibility compliance. From a security perspective, the website enforces HTTPS with a good SSL configuration and includes several security headers such as Content-Security-Policy and X-Frame-Options. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates a strong commitment to privacy compliance. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced security posture. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. It does not exhibit any signs of malicious activity or content blocking. Strategic recommendations include publishing a dedicated security policy, adding incident response contact details, and considering a vulnerability disclosure policy to further strengthen trust and security transparency.

B

bookingkit

bookingkit.net

69

bookingkit is a mature, medium-sized SaaS company specializing in booking, marketing, and administration software for the European tours, activities, and attractions industry. The company positions itself as a market leader in Europe, offering a comprehensive platform that integrates booking generation, channel management, and centralized administration to simplify operations and increase sales for its customers. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a high level of digital maturity. The technical infrastructure leverages WordPress CMS with modern marketing and analytics tools such as Facebook Pixel, Hotjar, and HubSpot, ensuring robust data collection and user engagement capabilities. Security posture is strong with HTTPS, domain locking, and no visible vulnerabilities, although DNSSEC is not enabled. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligned with GDPR requirements. Overall, bookingkit demonstrates a high level of business credibility and operational professionalism, making it a trustworthy platform in its niche.

G

Gilston Digital SA

miru.digital

49

Miru.digital is a Swiss-based SaaS platform operated by Gilston Digital SA, specializing in PDF document archiving, consultation, and distribution with advanced full-text search capabilities. The company positions itself as a Swiss-made, secure, and easy-to-use solution targeting businesses and organizations requiring efficient document management. The website reflects a professional and consistent brand image with clear pricing tiers and client references, indicating an established niche presence in the document management technology sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes essential security features such as HTTPS and cookie consent management. However, it lacks explicit privacy and terms of service documentation, which are critical for compliance and user trust. Security posture is generally good, with use of Google reCAPTCHA and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and professionally maintained, though it would benefit from enhanced privacy and security disclosures to align with best practices.

L

Leitmotiv Online Medien GmbH & Co. KG

backstagepro.de

48

Backstage PRO is a well-established German professional network platform dedicated to the music industry, connecting musicians, bands, event organizers, and related businesses. It offers a comprehensive suite of services including booking opportunities, a musician marketplace, industry news, and premium cooperation campaigns. The platform is supported by notable partners such as Musikhaus Thomann, enhancing its market credibility and reach. The website is professionally designed, content-rich, and targets music professionals seeking networking and business opportunities within the German music scene. Technically, the site employs modern web technologies including Google Analytics 4, Google Tag Manager, and cookie consent management, with a mobile-optimized experience and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. Overall, the platform demonstrates a mature digital presence with strong business credibility and user trust.

T

TixforGigs

tixforgigs.de

70

TixforGigs is an online ticketing platform specializing in event ticket sales, artist promotion, and venue information primarily targeting the German-speaking market. The website offers a comprehensive event search and ticket purchasing experience with user account management and security features such as captcha and two-factor authentication. The platform demonstrates a moderate to good level of digital maturity with a modern tech stack including jQuery and Knockout.js, and a responsive design optimized for mobile devices. Security posture is adequate with HTTPS enforced and captcha protections, though some security headers are missing, suggesting room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, though the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers and improving transparency around business contact information.

B

Bundesstiftung Baukultur

bundesstiftung-baukultur.de

49

Bundesstiftung Baukultur is a German independent foundation dedicated to promoting architectural culture and quality in the built environment. Established in 2007, it operates as a non-profit entity offering publications, events, competitions, and networking opportunities to professionals, students, and the public. The website is well-structured, professionally designed, and provides comprehensive information about its mission, activities, and contact details. Technically, the site runs on TYPO3 CMS, uses Matomo analytics with privacy-conscious settings, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain and website appear legitimate and trustworthy, serving a government-related non-profit sector in Germany.

L

Live DMA

live-dma.eu

56

Live DMA is a well-established European non-profit network founded in 2012 that represents live music venues, clubs, and festivals across multiple countries. The organization focuses on strengthening the live music sector through cooperation, advocacy, and knowledge sharing. Their website reflects a professional and consistent brand image, providing information about their membership, projects, and tools such as mentorship programs and audience development resources. The target audience includes live music associations and event organizers in Europe. Technically, the website is built on WordPress with modern plugins and analytics integrations, hosted by OVH SAS. While the site is performant and mobile-optimized, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit incident response or security policy disclosures. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Overall, the website is trustworthy and professional, with a strong market position in the live music advocacy sector.

I

Interessengemeinschaft Veranstaltungswirtschaft e. V.

igvw.org

49

The Interessengemeinschaft Veranstaltungswirtschaft e. V. (IGVW) is a non-profit association representing the event industry across Germany, Austria, and Switzerland. The organization focuses on setting industry standards, public representation, education, and research within the event sector. Their website is professionally designed, content-rich, and targets industry professionals and associations in the DACH region. The business model centers on collaboration among industry stakeholders to promote quality and compliance standards. Technically, the website is built on WordPress using a modern tech stack including plugins for event management, downloads, and SEO optimization. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and content suggest legitimacy. Overall, the site presents a low risk profile with strong business credibility and good technical implementation. Recommendations include enhancing security headers, maintaining plugin updates, and improving WHOIS transparency to boost trust further.

A

Ad Shop AB

glasmonter.se

53

Glasmonter.se is an established Swedish e-commerce business specializing in the sale of glass showcases and cabinets primarily targeting professional customers such as companies, schools, museums, and private individuals valuing high quality and functional products. The company operates under Ad Shop AB and has been active since 2003, offering delivery and assembly services alongside standard and custom products. The website demonstrates a solid market position with trust indicators including a high credit rating and a professional online presence. Technically, the site is built on ASP.NET Web Forms with common JavaScript libraries and includes modern tracking and marketing tools with GDPR-compliant consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA usage, though it lacks advanced security headers and published security policies. The absence of WHOIS data for the domain is a notable concern that impacts trustworthiness and should be investigated further. Overall, the site provides a good user experience with clear business information and no adult or questionable content.

S

Sveučilišni računski centar (Srce)

srce.hr

54

Sveučilišni računski centar (Srce) is a central academic infrastructure institution affiliated with the University of Zagreb, providing comprehensive computing, networking, identity management, data repository, and digital education services to the Croatian academic and research community. The website reflects a mature digital presence with a professional design, clear navigation, and extensive content tailored to its target audience of students, researchers, and academic institutions. Technically, the site is built on Drupal 9 with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, cookie consent, and anti-bot measures, though explicit security headers could be enhanced. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness, despite the WHOIS data being privacy protected, which is justified for this type of institution.

JSB realitní is a small Czech Republic-based real estate company specializing in brokerage services for residential and commercial properties, including sales, rentals, and problematic property solutions such as debt and foreclosure management. The company also operates a related construction business for property renovations. The website is professionally designed with clear navigation and relevant content targeting local clients in Prague and surrounding areas. However, the absence of WHOIS data and security policies reduces trustworthiness. Technically, the site uses common web technologies like jQuery and Bootstrap but lacks visible HTTPS and security headers, which are critical for secure operations. No privacy or cookie policies are present, indicating compliance gaps. Overall, the business appears legitimate but would benefit from improved security and compliance measures.

Č

Česká gymnastická federace

gymfed.cz

49

Česká gymnastická federace is the official national governing body for gymnastics sports in the Czech Republic, providing comprehensive information, event calendars, results, and resources for multiple gymnastics disciplines including artistic gymnastics, TeamGym, aerobics, acrobatic gymnastics, trampoline, parkour, and more. The website targets athletes, coaches, referees, clubs, and gymnastics enthusiasts, offering news updates, directories, and an e-shop for gymnastics equipment. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, Flickity, and Google Analytics, with good mobile optimization and accessibility features. However, the absence of explicit privacy and cookie policies and lack of security headers indicate areas for improvement in privacy compliance and security posture. The WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of official contact details and social media links supports the site's credibility. Overall, the site is professional, content-rich, and trustworthy within its domain.

O

OKsystem a.s.

okskoleni.cz

10

OKškolení, operated by OKsystem a.s., is a well-established certified training center specializing in authorized IT courses including Microsoft, Cisco, and Linux. The company targets IT professionals, corporate clients, and government institutions, offering both standard and tailored training solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports their market position as a trusted education provider in the Czech Republic. The site integrates multiple marketing and analytics tools with user consent mechanisms, demonstrating compliance with GDPR and modern privacy standards. Security posture is solid with HTTPS and reCAPTCHA protections, though there is room for improvement in HTTP security headers and explicit security policies. Overall, the domain and website present a credible and professional business with strong trust indicators.

C

CancanIT

cancanit.com

63

CancanIT is a specialized online certification provider focused on professional web developers. Established in 2010, it offers a broad range of certification exams covering front-end and back-end web technologies, including HTML5, CSS3, JavaScript, PHP, MySQL, and more. The company targets freelance workers, job seekers, and career starters aiming to validate their skills and improve marketability. The website is well-structured with clear navigation and professional branding, supporting a positive user experience and trustworthiness. Technically, the site employs modern web technologies such as Bootstrap, Font Awesome, and jQuery, hosted likely via GoDaddy infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain locks in place, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with visible privacy and cookie policies and a consent banner, but no detailed GDPR compliance indicators or data protection officer information. Overall, the security posture is adequate for the business type, with no critical vulnerabilities detected. The domain WHOIS data is consistent and supports legitimacy with a long registration history and no privacy protection. The site does not employ tracking or advertising technologies, indicating a privacy-conscious approach. The content is safe for general audiences, focused on education and certification without any adult or questionable material. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing incident response contacts, and improving privacy compliance transparency to strengthen trust and security culture.

P

Predsjednik Republike Hrvatske - Zoran Milanović

predsjednik.hr

53

The website represents the official online presence of the President of the Republic of Croatia, Zoran Milanović. It serves as a government portal providing official information, news, announcements, and contact mechanisms for citizens and stakeholders. The site is positioned as a trusted source of governmental communication and public service. Technically, the site is built on WordPress CMS with common plugins such as Yoast SEO and integrates Google Analytics and Facebook SDK for analytics and social media engagement. The hosting is managed by CARNET, a reputable Croatian academic network, which aligns with the governmental nature of the site. Security posture is adequate with HTTPS enforced and use of reCAPTCHA on forms; however, some security headers are missing and no explicit security or vulnerability disclosure policies are present. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve in privacy transparency and security hardening.

S

SMART Design | Gregic Advisory

digital-adviser.eu

49

SMART Design | Gregic Advisory operates as a specialized provider of advanced SMART web solutions based in Zagreb, Croatia. The company offers a range of services including customized web shops, web pages, and web applications designed with a focus on performance, security, and user experience. Their market position is that of a leader in SMART web solutions, targeting businesses and professionals seeking innovative digital presence. The website reflects a professional and modern approach with strong branding and client references including government entities. Technically, the site is built on WordPress using Elementor and OceanWP theme, integrating modern analytics and marketing tools such as Google Analytics, Hotjar, and HubSpot. The site is GDPR compliant with a detailed cookie consent mechanism and privacy policy. Security posture is good with HTTPS enforced and secure forms, though explicit security headers and incident response policies are not evident. The domain WHOIS data is missing, which raises some concerns about domain registration legitimacy, but the website content and business information support a credible operation. Overall, the site demonstrates a mature digital infrastructure with room for security enhancements and domain registration verification.

I.M. Matters from ACP is a professional medical news and information website targeting internal medicine physicians. It is affiliated with the American College of Physicians (ACP), providing news, clinical newsletters, and updates on medical policies and practices. The website serves as a trusted source for healthcare professionals with a focus on internal medicine. Technically, the site uses a modern technology stack including jQuery, Google Tag Manager, Google Analytics, and various marketing automation and tracking tools. Hosting is via Amazon AWS DNS infrastructure, and the site is mobile optimized with good navigation and content structure. Security posture is solid with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Business credibility is supported by ACP affiliation and award recognition. Overall, the site is professional, trustworthy, and well maintained.

Pěkné Bydlení is a Czech online magazine operated by Časopisy pro volný čas s.r.o., focusing on home living, interior design, construction, garden care, and lifestyle inspiration. The website serves a target audience of homeowners and individuals interested in improving their living spaces. It operates a content publishing business model supported by advertising and magazine subscriptions. The company is positioned as an established media outlet within the Czech Republic, offering quality content and consistent branding. Technically, the website is built on WordPress 4.7.3 with integration of jQuery, Google Publisher Tags, Google Analytics, and Seznam retargeting services. It uses the Foundation CSS/JS framework for responsive design and is mobile optimized with good navigation and SEO practices. Performance is moderate, with room for improvement in accessibility and modernization of the CMS. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but it uses an outdated WordPress version which poses potential security risks. Advanced security headers are missing, and no explicit security or incident response policies are found on the site. The privacy policy is present and GDPR compliant, enhancing trustworthiness. Overall, the website is safe, professional, and trustworthy with moderate security posture. Strategic improvements in CMS updates and security headers would enhance its security and compliance standing.

Y

Yesme s chutí FOOD TRUCK

yesme.cz

45

Yesme s chutí FOOD TRUCK is a small Czech hospitality business specializing in food truck and catering services, targeting both public events and corporate clients primarily in Prague. The website provides basic information about upcoming events and catering offerings, with clear contact details and a cookie consent mechanism. Technically, the site uses older but functional technologies such as Bootstrap 3.4 and jQuery, with a CMS platform identified as inPage. Security posture is moderate with no detected blocking or WAF, but lacks advanced security headers and a privacy policy, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate for a small local business.

E

eEducation Austria

eeducation.at

64

eEducation Austria is a well-established non-profit organization dedicated to advancing digital education across Austrian schools. The website serves as a comprehensive platform offering digital competence models, educational resources, tools, and community networking to support educators and institutions in their digital transformation journey. The organization targets schools and educators primarily within Austria, positioning itself as a key player in the national digital education landscape. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, providing a responsive and user-friendly experience. While the site is well-structured and content-rich, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security-wise, HTTPS is enforced, but additional security headers are not evident, and no explicit incident response or security policies are published. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

P

Pädagogische Hochschule Oberösterreich

europaschule-linz.at

70

Europaschule Linz is an educational institution affiliated with the Pädagogische Hochschule Oberösterreich, serving students and educators in the Linz region. The website provides comprehensive information about the school, its services, projects, and contact details, targeting students, parents, and educational professionals. The institution holds a stable regional position as a pedagogical school with a medium-sized operational scale. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and jQuery, and integrates Google Analytics for visitor insights. The site is mobile-optimized and implements a detailed cookie consent mechanism compliant with GDPR requirements. Hosting and domain registration are managed by reputable providers, ensuring stable infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage user privacy. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No critical vulnerabilities or suspicious activities were detected, and the site maintains good privacy compliance. Overall, Europaschule Linz presents a professional, trustworthy, and user-friendly web presence aligned with its educational mission. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

FOTOma.sk is a Slovak-language photography portal operated by PRO.Laika, offering a comprehensive range of content including news, reviews, galleries, forums, contests, and workshops. The site targets photography enthusiasts and professionals within Slovakia and Slovak-speaking communities. It maintains a consistent brand presence and provides regular content updates, supported by active social media channels and a newsletter subscription service. Technically, the website employs a custom CMS with modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence with moderate tracking and advertising practices, aligned with GDPR compliance. WHOIS data confirms legitimacy and consistency with the business profile.

H

HSH Soft- und Hardware Vertriebs GmbH

hsh-berlin.com

71

HSH Soft- und Hardware Vertriebs GmbH is a medium-sized German company specializing in software and hardware solutions for public administration, particularly in the government sector. Their offerings include a range of specialized software products such as MESO, GESO, AUSO, and biometric solutions like Biometric Go®, positioning them as a market leader in municipal resident registration software in Germany. The company actively participates in federal IT modernization initiatives, demonstrating a strong presence in the eGovernment domain. Technically, the website employs a modern but standard technology stack including jQuery and Bootstrap, with a custom CMS backend. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, performance is moderate and accessibility features are basic. Privacy and cookie policies are implemented with GDPR compliance, but no direct contact emails or phone numbers are visible on the homepage. From a security perspective, the site lacks explicit security headers and there is no information about HTTPS or SSL configuration in the provided data. The presence of BSI-certified biometric software indicates some level of security awareness. The absence of WHOIS data for the domain is a concern, as it is inconsistent with the active and professional website presence, reducing overall trustworthiness. Overall, the website is professional and content-rich, serving a specialized government software market. The main risks relate to domain registration transparency and security header implementation. Strategic improvements in these areas would enhance trust and security posture significantly.

N

Neuland visuelle Gestaltung GmbH

neuland.li

67

Neuland visuelle Gestaltung GmbH is a professional graphic design agency based in Schaan, Liechtenstein, specializing in functional visual concepts for digital and analog applications. The company serves a diverse clientele including government bodies, cultural institutions, and private enterprises, positioning itself as a trusted local design partner. Their portfolio showcases expertise in branding, corporate design, signage, digital interfaces, and campaign development. Technically, the website is built on the concrete5 CMS and leverages modern JavaScript libraries such as jQuery, Pixi.js, and Anime.js, alongside the Foundation framework, providing a responsive and visually engaging user experience. Security posture is moderate with HTTPS presumably enabled but lacking visible security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website reflects a credible and professional business with room for improvement in security and privacy transparency.

S

Streetwork Liechtenstein

streetwork.li

61

Streetwork Liechtenstein operates as a non-profit social outreach organization focused on providing support and counseling services in public and semi-public spaces within Liechtenstein. The organization emphasizes confidentiality and flexible engagement schedules, targeting youth and community members. The website reflects a professional and consistent brand presence with clear contact points and organizational governance details. Technically, the site is built on Concrete5 CMS, leveraging modern frontend libraries such as jQuery and Foundation, and employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS enforced and email obfuscation implemented, though there is room for improvement in security headers and formal policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-positioned within its niche, with a moderate to good technical and security maturity.

S

Stiftung Sovort (Soziale Arbeit vor Ort) Liechtenstein

sovort.li

62

Stiftung Sovort (Soziale Arbeit vor Ort) Liechtenstein is a non-profit foundation established in 2023 by 10 municipalities in Liechtenstein to consolidate youth social work services including Open Youth Work and Streetwork. The organization targets local youth and communities, providing social support under a unified foundation structure. The website reflects a regional, small-sized non-profit entity with clear business focus and community engagement. Technically, the website is built on the concrete5 CMS platform, leveraging modern JavaScript frameworks such as Vue.js and Axios, and uses the Foundation framework for responsive design. The site is mobile-optimized with good SEO practices and clear navigation, though accessibility features are basic. Security posture is solid with HTTPS enforced and email obfuscation implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission and regional scope.

I

International Contrast Ultrasound Society

icus-society.org

56

The International Contrast Ultrasound Society (ICUS) operates a professional website dedicated to promoting the safe and effective use of contrast-enhanced ultrasound (CEUS) globally. The organization functions as a non-profit medical society providing education, advocacy, and resources to medical professionals and sonographers. Their market position is unique as the only global society exclusively focused on CEUS, offering webinars, training, protocols, and safety information. The website is built on WordPress with Elementor and integrates modern SEO and analytics tools, reflecting a moderate level of digital maturity. The site is mobile-optimized and professionally designed, facilitating good user experience and navigation. Security posture is adequate with HTTPS and domain registrar protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

I

isdv e.V.

isdv.net

52

isdv e.V. is a professional association representing self-employed and freelance service providers in the event industry in Germany. The organization serves as a lobby and voice for various professions within the event sector, including technical, logistical, and creative roles. The website is well-structured, professionally designed, and provides comprehensive information about the association's mission, services, and news updates. Technically, the site is built on WordPress with Elementor, uses HTTPS, and integrates Google Analytics and Tag Manager for visitor tracking. Privacy and cookie policies are detailed and GDPR-compliant, with active consent mechanisms. However, no explicit security or incident response policies are publicly available, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. Overall, the site demonstrates a solid digital presence with room for improvement in security transparency and domain legitimacy verification.

V

Verband Schweizer Plastic Recycler (VSPR)

plasticrecycler.ch

51

The Verband Schweizer Plastic Recycler (VSPR) is a Swiss non-profit association serving as the competence center for plastic recycling in Switzerland. It connects municipalities, collection systems, and recycling companies to promote sustainable, high-quality plastic recycling and circular economy principles. The website reflects a strong commitment to sustainability, quality assurance, and transparency, supported by a monitoring and licensing system that awards a quality label to certified collection systems. The target audience includes municipalities, industry partners, and the general public interested in environmental sustainability within Switzerland. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Slick Carousel, LazyLoad, and Fancybox. It employs multilingual support via Weglot and integrates Google reCAPTCHA for form security. Cookie consent is managed through the Complianz GDPR plugin, ensuring compliance with European privacy regulations. The site is well-optimized for mobile devices and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Email addresses are obfuscated to prevent scraping. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence for the VSPR. It effectively communicates its mission and services while maintaining good technical and security standards. Strategic recommendations include enhancing security headers, fixing minor image loading issues, and publishing a formal security policy or incident response contact to further strengthen trust and compliance.

VetroSwiss operates as a key organization managing glass recycling processes and fees in Switzerland, focusing on the administration of the 'vorgezogene Entsorgungsgebühr' (VEG) for glass beverage packaging. The website targets business partners involved in fee payments and compensation, providing a user-friendly customer portal and extensive informational resources about glass recycling. The organization positions itself as a central authority in the Swiss glass recycling ecosystem, emphasizing efficiency and digital transformation. Technically, the website is built on WordPress 6.6.4 with the Yoast SEO plugin, leveraging UIkit for frontend components and Matomo for privacy-respecting analytics. The site is well-structured with multi-language support (German, French, Italian), good SEO practices, and a cookie consent mechanism, reflecting a moderate to advanced digital maturity. Hosting details are not explicit but suggest a professional setup possibly involving Cubetech services. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy or security.txt file indicates room for improvement in transparency and security communication. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with a strong focus on business credibility and user experience. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the security posture and compliance.

C

CFL

cfl.lu

19

CFL is the national railway company of Luxembourg, providing passenger and freight transport services along with mobility solutions such as carsharing, bicycles, tram, and funicular. The website serves as a comprehensive travel portal offering timetable searches, ticket bookings (both national and international), travel packages, and customer services. The company holds a strong market position in Luxembourg's transportation sector with a large operational scale and multiple subsidiaries. Technically, the website employs modern frameworks like Bootstrap and FontAwesome, integrates Google Tag Manager and Matomo for analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. Privacy compliance is good with privacy and cookie policies and consent mechanisms in place. Overall, the website is professional, trustworthy, and user-friendly, though the lack of WHOIS data slightly reduces trustworthiness from a domain registration perspective.

S

Star Casino Group

cecpraha.cz

64

Star Casino Group is a prominent operator of casino and gaming venues in the Czech Republic, boasting over 50 physical locations and an online casino platform. The company emphasizes fair play and has a long operational history exceeding 25 years. Their target audience is adults interested in gambling and casino entertainment. The website is professionally designed with good navigation and mobile optimization, leveraging modern JavaScript libraries and Google Maps integration for location services. Security-wise, the site enforces HTTPS, includes age verification, and manages cookie consent in compliance with GDPR. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS registration data, slightly detracts from overall trustworthiness. The company provides clear contact information and an ethical whistleblower program, indicating a commitment to compliance and corporate governance.

L

LOGISTA d.o.o.

tehnologista.hr

34

Tehnologista.hr is an e-commerce platform operated by LOGISTA d.o.o., a Croatian company founded in 2022. The website focuses on selling technology products with services such as free delivery within Croatia and a 14-day return policy. The company targets Croatian consumers interested in technology retail, positioning itself as a local player in the e-commerce sector. The website demonstrates a good level of digital maturity, employing modern tracking and consent management tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and Cookiebot for GDPR compliance. Hosting and DNS services are professionally managed, with transparent WHOIS data matching the business claims. Security posture is solid with HTTPS enforced and anti-CSRF cookies in use, though some security headers could be improved. Privacy compliance is strong, with comprehensive cookie and privacy policies and a designated Data Protection Officer contact provided. Overall, the website is professional, trustworthy, and compliant with relevant regulations.

E

Exevio Ltd.

exevio.com

41

Exevio Ltd. is a Croatia-based small technology company specializing in corporate IT solutions including web development, loyalty platforms, app and game development, and quality assurance services. Founded in 2013, the company positions itself as a trusted partner for corporate clients seeking tailored IT solutions. The website reflects a professional and consistent brand image with clear service offerings and client partnerships. Technically, the site uses modern JavaScript libraries such as jQuery and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and has good SEO practices, though accessibility features could be improved. Security posture is solid with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and explicit security headers. Privacy compliance is well addressed with accessible privacy, cookie, and terms policies, including a cookie consent mechanism and GDPR indicators. Business credibility is supported by ISO certifications and EU funding acknowledgments. Overall, the website is trustworthy and professionally maintained with moderate user tracking and good content quality.

D

Danmarks Domstole

domstol.dk

64

Danmarks Domstole is the official website for the Danish judiciary system, providing comprehensive information about courts, legal topics, and public services related to the Danish legal system. The site targets Danish citizens and legal professionals seeking authoritative legal information. It maintains a strong market position as the official government portal for judiciary matters in Denmark. Technically, the website employs modern web technologies including jQuery and Cookiebot for cookie consent management, and integrates a third-party chat service (Puzzel) for user support. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and a professional design. Security-wise, the site enforces HTTPS and implements a robust cookie consent mechanism, demonstrating compliance with GDPR. However, explicit security headers and a public security policy or vulnerability disclosure are not present, representing areas for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with a low risk profile.

P

Požeško-slavonska županija

pszupanija.hr

60

Požeško-slavonska županija is a regional government entity in Croatia providing a wide range of public administrative, social, educational, cultural, and economic services to its residents and stakeholders. The official website serves as a central hub for information dissemination, public documents, news, and transparency initiatives. The site targets local citizens, businesses, and government partners, emphasizing accessibility and compliance with privacy regulations. Technically, the website is built on Joomla CMS with modern frameworks such as Bootstrap and Helix Ultimate, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and CSRF protections, although some security headers could be improved. Overall, the website is professional, trustworthy, and well-aligned with its government function.

B

BJELOVARSKO-BILOGORSKA ŽUPANIJA

bbz.hr

48

Bjelovarsko-Bilogorska Županija (BBŽ) is the official regional government authority for the Bjelovarsko-Bilogorska County in Croatia. The website serves as a public information portal providing news, administrative details, public calls, and legal forms relevant to residents and stakeholders of the county. It positions itself as a key regional government entity with a focus on agricultural and economic development, public administration, and community engagement. The site targets local citizens, businesses, and government officials, offering structured navigation and official announcements in Croatian with English language support.

S

Sisačko-moslavačka županija

smz.hr

59

Sisačko-moslavačka županija operates an official regional government website providing comprehensive information about county administration, public projects, news, tenders, and contact details. The site targets residents, businesses, and public officials within the Sisak-Moslavina County in Croatia. The website is built on Joomla CMS with Helix Ultimate framework and uses modern web technologies including Bootstrap and jQuery. It features good mobile optimization and accessibility tools, including an accessibility menu and cookie consent mechanisms compliant with GDPR. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and well-aligned with its government function.

L

Ličko-senjska županija

licko-senjska.hr

52

Ličko-senjska županija is the official regional government entity for the Ličko-senjska County in Croatia. The website serves as the primary digital platform for disseminating public administration information, news, official documents, tenders, and transparency reports. It targets residents, businesses, and stakeholders within the county, providing comprehensive access to government services and updates. The site reflects a medium-sized government organization with a focus on regional development, public services, and community engagement. Technically, the website employs a modern tech stack including jQuery, Modernizr, Owl Carousel, and Google Fonts, built on a CMS platform by VIT. It is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security is robust with HTTPS enforced and a Content-Security-Policy header, although some additional security headers could enhance protection. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. The security posture is strong, with no detected vulnerabilities or exposed sensitive data. The site lacks a security.txt file and explicit incident response contacts, which are recommended for improved security transparency. The domain registration is consistent with the official government entity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, serving its public sector role effectively.

Z

Zadarska županija

zadarska-zupanija.hr

47

Zadarska županija is the official regional government website for the Zadar County in Croatia, providing public administration and citizen services. The website serves as an information portal targeting residents and visitors of the region. It is built on Joomla CMS with the Helix Ultimate framework, utilizing modern web technologies such as Bootstrap, jQuery, and Font Awesome, ensuring a responsive and accessible user experience. The site demonstrates good technical maturity with HTTPS enforced and security headers implemented, reflecting a solid security posture. However, it lacks critical compliance documents such as a privacy policy and terms of service, which are essential for GDPR compliance and user trust. No contact emails or phone numbers were explicitly found, which may hinder user communication. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and compliance transparency.

S

Splitsko-dalmatinska županija

dalmacija.hr

56

Splitsko-dalmatinska županija operates as the official regional government authority for the Split-Dalmatia County in Croatia, providing public administration, regional development, tourism promotion, and social services. The website serves as a comprehensive portal for citizens and stakeholders, offering news, public procurement information, official documents, and contact avenues. The organization maintains a consistent brand presence and leverages social media channels to engage with the public. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, Bootstrap, and modern JavaScript libraries such as Swiper.js and Mmenu.js. It integrates Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or scripts. The domain WHOIS data aligns with the official government entity, confirming legitimacy. Overall, the website presents a professional, trustworthy, and functional digital presence for the regional government, with room for improvement in security header implementation and incident response transparency.

Š

Šibensko-kninska županija

sibensko-kninska-zupanija.hr

65

Šibensko-kninska županija operates as the official regional government authority for the Šibenik-Knin County in Croatia, providing a comprehensive digital platform for citizens, investors, and tourists. The website offers news, public tenders, administrative documents, and information about the county's organizational structure and services. The site is well-structured and professionally designed, reflecting its role as a government entity with a focus on transparency and public service.

E

EUROPE DIRECT CENTAR KARLOVAC

europedirect-karlovac.eu

55

Europedirect Karlovac operates as a regional European Union information center based in Karlovac, Croatia. It serves as a public outreach and informational hub, providing EU-related news, publications, and event information primarily targeting local citizens, government bodies, and regional stakeholders. The website is professionally designed using WordPress with Elementor and Yoast SEO, reflecting a moderate to good level of digital maturity. It offers multilingual support with Croatian as the primary language and English as an alternate. The business model is non-commercial, focusing on public service and EU policy dissemination.

R

RMCE BUSINESS s.r.o.

lightdata.cz

37

LightData, operated by RMCE BUSINESS s.r.o., is a Czech Republic-based B2B data service providing extensive databases of Czech companies and managerial contacts. The platform targets businesses seeking detailed company and contact information to enhance their business operations. The website offers registration and login functionalities, with demo credentials available for trial. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and integrates third-party marketing and analytics tools such as Smartsupp Live Chat and Piwik/Matomo. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, while HTTPS is assumed, explicit security headers are missing, and privacy compliance is weak due to absent privacy and cookie policies. WHOIS data is unavailable, which raises some concerns about domain legitimacy, though the website content and contact details suggest a legitimate business presence.

A

ALSENTA s.r.o.

seeky.cz

36

Seeky.cz is a Czech-based B2B service operated by ALSENTA s.r.o. that specializes in identifying and converting website visitors into potential customers. The company targets businesses seeking to enhance their lead generation and sales conversion through visitor monitoring, targeted offers, and direct customer engagement. The website demonstrates a professional presence with a clear value proposition, client testimonials, and a multi-country reach across 40 countries with over 2000 users. Technically, the site employs modern web technologies including Bootstrap, jQuery, and multiple analytics tools such as Google Analytics and Matomo, alongside live chat support for customer engagement. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, indicating room for compliance improvement. WHOIS data is unavailable, which slightly impacts trust but does not detract from the overall professional presentation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and regulatory adherence.