Security Directory

M

Milena Quattrocchi, KANUL.ART Art & Design

kanul.art

61

Milena Quattrocchi is an independent visual artist based in Vevey, Switzerland, specializing in minimalist graphic art that embraces imperfection. The website serves as a professional portfolio showcasing recent collections, exhibitions, and design collaborations, notably with ZigZagZurich. The business model centers on art sales via an online shop and partnerships with galleries and design houses, targeting art collectors and enthusiasts. The site is well-branded and consistent, with clear contact information and a focus on artistic expression.

IVZ-Trauer is an online media platform operated by ivz.medien GmbH & Co. KG, specializing in the publication and search of funeral notices (Traueranzeigen) primarily serving the Tecklenburger Land region in Germany. The website offers users the ability to search through thousands of funeral announcements, submit new notices, and access related information such as cemetery locations and funeral service partners. The platform targets a general audience seeking obituary information and funeral-related services. Technically, the site employs a combination of Bootstrap (versions 3 and 4), jQuery, and various JavaScript libraries including Jssor Slider and Swiper.js, alongside a custom CMS. It integrates Google Analytics for visitor tracking and Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized with a responsive design and clear navigation, providing a good user experience.

A

Altmeppen Verlag GmbH & Co. KG

verlag-altmeppen.de

41

Altmeppen Verlag GmbH & Co. KG operates as a leading regional media house in northern Münsterland, Germany, publishing print newspapers and digital news platforms focused on local news for Rheine, Emsdetten, Neuenkirchen, and Wettringen. The website reflects a professional media publishing business with clear regional targeting and a consistent brand presence. Technically, the site uses a modern stack including jQuery, Bootstrap, Usercentrics for consent management, and Matomo for privacy-conscious analytics. Security posture is moderate with HTTPS enforced and consent mechanisms in place, but lacks visible security headers and incident response information. Privacy compliance is strong with comprehensive policies and consent management. Overall, the site is accessible, trustworthy, and well-structured for its audience.

S

symplr

symplr.de

50

symplr is a specialized AdTech and website monetization partner based in Germany, serving publishers, bloggers, and media houses primarily in the DACH region. The company offers a comprehensive suite of services including programmatic advertising, consent management, ad management, and analytics tools. It holds multiple industry certifications such as Google Certified Publishing Partner and maintains a strong market position with a focus on transparent and personalized service. The website reflects a professional and user-friendly digital presence built on WordPress with modern technologies and integrations for privacy and tracking.

W

Sign in - Matomo

webstats1.de

48

The website webstats1.de serves as a login portal for the Matomo open-source web analytics platform. It provides a free/libre analytics service primarily targeted at website administrators and analytics users. The platform is designed to offer privacy-focused analytics without reliance on third-party services. The site’s content is minimal, focusing on user authentication and configuration of the analytics platform. The business model revolves around providing an open-source analytics solution, likely supported by community contributions or enterprise services. The market position is not explicitly stated but aligns with privacy-conscious analytics providers.

N

netpoint media gmbh

netpoint-media.de

56

Netpoint Media GmbH is a German-based online advertising company established in 2001, specializing in high-quality online media marketing with a strong focus on travel and tourism sectors. The company operates a broad portfolio of digital advertising services including programmatic advertising and addressable TV, targeting media planners, advertisers, and publishers. Their market position is that of a leading independent online media marketer in Germany, supported by memberships in industry bodies such as AGOF, OVK, and BVDW. Technically, the website is built with standard modern web technologies (HTML5, CSS3, JavaScript) and hosted on professional infrastructure (dogado.de). The site is mobile-optimized with good SEO and basic accessibility features. Security posture is moderate with HTTPS and a Content-Security-Policy header implemented, but lacks additional security headers and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR in terms of privacy policy presence, though cookie consent is missing. Contact is primarily via a web form, with social media presence on Xing and LinkedIn. The domain registration data aligns well with the business claims, indicating legitimacy and consistency.

S

Stadt Wien

wienwohntbesser.at

64

The website wienwohntbesser.at is an official government platform operated by the City of Vienna (Stadt Wien) focused on providing information and updates about municipal housing initiatives, campaigns, and services. It serves residents and housing seekers in Vienna, offering news, event details, and service area information related to affordable and livable housing. The site is well-branded with consistent city imagery and messaging, reinforcing its authoritative position in the local housing sector. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design, ensuring good mobile optimization and accessibility. It employs Piwik analytics with a GDPR-compliant cookie consent mechanism, reflecting a mature approach to privacy and user tracking. Performance is moderate, with no critical technical issues detected. However, security headers are not explicitly visible, and no dedicated security or incident response policies are published. From a security perspective, the site uses HTTPS and has implemented cookie consent controls, but lacks visible advanced security headers and formal vulnerability disclosure mechanisms. No exposed sensitive data or vulnerable libraries were detected. The WHOIS data confirms the domain is legitimately registered to the City of Vienna, aligning with the website's governmental nature and enhancing trustworthiness. Overall, the website presents a professional, secure, and privacy-conscious platform suitable for its public service role. Strategic improvements could include publishing explicit security policies, enhancing security headers, and providing clearer contact information for incident response. These steps would further strengthen the site's security posture and user trust.

W

Wiener Wohnen

wienerwohnen.at

64

Wiener Wohnen operates as the largest municipal housing provider in Europe, delivering affordable and quality public housing in Vienna. The website serves tenants and prospective tenants with comprehensive information about housing options, application procedures, tenant services, and community news. The organization maintains a strong market position as a key government entity in the real estate sector, focusing on social housing and tenant support. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates multimedia players and accessibility tools such as JWPlayer and ReadSpeaker. The site is mobile-optimized, accessible, and uses Matomo analytics with a clear cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and avoids exposing sensitive data. However, it lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced transparency and readiness. No vulnerabilities or suspicious elements were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its public sector mission with clear navigation, relevant content, and user-friendly services. Strategic recommendations include publishing a dedicated security policy, incident response information, and implementing additional security headers to further strengthen the security posture.

W

Wohnservice Wien Ges.m.b.H.

wohnservice-wien.at

62

Wohnservice Wien Ges.m.b.H. is a Vienna-based government-affiliated entity focused on providing social housing information and services to residents. The website serves as a comprehensive portal for housing search, tenant assistance, neighborhood programs, and housing subsidies, positioning itself as a key facilitator in Vienna's social housing ecosystem. The site is well-structured, professionally designed, and targets residents seeking affordable and quality housing solutions. Technically, the website is built on TYPO3 CMS with Bootstrap framework, integrates hCaptcha for form security, and uses Piwik (Matomo) for analytics, reflecting a modern and privacy-conscious infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting its credibility as a public service platform.

B

Bundesministerium für Klimaschutz, Umwelt, Energie, Mobilität, Innovation und Technologie

klimaaktiv-gebaut.at

60

The klimaaktiv Gebäudedatenbank website is a government-backed platform operated by the Austrian Federal Ministry for Climate Protection, Environment, Energy, Mobility, Innovation and Technology. It serves as a comprehensive database and showcase for sustainable building projects in Austria, focusing on klimaaktiv certified buildings and award-winning architecture. The platform targets professionals and stakeholders in sustainable construction and renovation, providing valuable information and examples to promote energy-efficient and environmentally friendly building practices. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, and Slick Carousel for interactive elements. It uses Matomo Analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and consistent branding. However, some security best practices such as security headers and explicit cookie consent mechanisms are missing. From a security perspective, the site benefits from HTTPS with excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. The lack of security headers and absence of a published security policy or incident response contact are areas for improvement. The WHOIS data confirms the domain is legitimately registered to the Austrian government ministry, reinforcing trust and legitimacy. Overall, the website is professional, trustworthy, and well-suited for its purpose. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing a security policy, and establishing a vulnerability disclosure process to enhance security posture and compliance.

T

Travel Emilia Romagna

travelemiliaromagna.it

59

Travel Emilia Romagna operates as the official regional tourism blog for the Emilia-Romagna region in Italy, providing curated travel content, cultural itineraries, event information, and family travel guides. The website targets tourists and travelers interested in exploring the region's cultural, natural, and gastronomic offerings. It holds a solid market position as an official tourism information source, leveraging partnerships with regional tourism entities. Technically, the site is built on WordPress with modern plugins for SEO, caching, multilingual support, and privacy-compliant analytics. The infrastructure supports good performance and mobile optimization, ensuring a positive user experience. Security posture is strong with HTTPS enforcement, reCAPTCHA integration, and cookie consent management, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a trustworthy and professional digital presence aligned with its business goals.

T

TrekkSoft AG

trekksoft.com

67

TrekkSoft AG operates a leading online booking platform tailored for day tour companies and tour operators. Their SaaS solution centralizes booking management by integrating online and offline sales channels, simplifying backend operations. The company positions itself as a market leader in the tour operator booking software niche, targeting travel businesses seeking streamlined booking solutions. Technically, the website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, and LinkedIn Insight Tag. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the professional website presence and use of reputable platforms mitigate some risk. Overall, the site is functional, professional, and safe for general audiences, but would benefit from enhanced transparency in privacy, contact, and security disclosures.

D

Deutscher Handwerkskammertag e.V.

handwerk.de

58

Das Handwerk.de is an official German platform operated by Deutscher Handwerkskammertag e.V., providing comprehensive information on handcraft professions, training, and career opportunities. The website targets young people seeking apprenticeships, businesses in the handcraft sector, and the general public interested in the industry. It serves as a trusted resource with extensive content, including educational materials, job listings, and promotional campaigns. Technically, the site is built on Drupal 10 with modern web technologies such as lazy loading and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses a consent management platform (Cookiebot) for GDPR compliance. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies. Overall, the website presents a low-risk profile with high business credibility and professional presentation. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

B

Bundesministerium für Wirtschaft und Klimaschutz

gruendungswoche.de

66

The website www.gruendungswoche.de is a German government-backed platform managed by the Bundesministerium für Wirtschaft und Klimaschutz, focused on promoting entrepreneurship and self-employment through nationwide events and workshops. It serves a broad audience including prospective founders, students, craftsmen, and social entrepreneurs. The platform operates as a non-profit initiative with a strong partner network including government bodies and competence centers. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, offering good mobile optimization and accessibility. Security posture is moderate with HTTPS usage and secure login forms, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in its niche, though improvements in security and privacy transparency are recommended.

H

Handwerkskammerapp

handwerkskammer-app.de

63

The Handwerkskammerapp website serves as an official portal presenting mobile applications tailored for the German handcraft sector. It provides an app directory and additional information aimed at handcraft businesses and interested parties within Germany. The site is professionally designed, consistent in branding, and uses modern web technologies including jQuery, Bootstrap, and a German CMS platform (ODAV). The technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is strong with HTTPS enforced and privacy-conscious analytics via self-hosted Matomo, complemented by a comprehensive cookie consent mechanism. However, the site lacks explicit security policies, incident response contacts, and Terms of Service, which are recommended for enhanced trust and compliance. Overall, the domain registration and hosting details align well with the website's official nature, indicating a legitimate and trustworthy presence.

L

Lehrstellenradar

lehrstellen-radar.de

63

Lehrstellenradar is a specialized German platform and mobile app designed to facilitate the search for apprenticeship and internship opportunities in over 130 craft professions. It targets school leavers, parents, teachers, and training advisors, providing a nationwide search capability via both web and mobile applications. The platform positions itself as a niche service within the vocational education sector in Germany, offering free access to listings and the ability to enter new apprenticeship positions. Technically, the website leverages a modern tech stack including jQuery, Bootstrap, and a proprietary ODAV Content Management System. It integrates self-hosted Matomo analytics for privacy-conscious visitor tracking and uses CCM19 for cookie consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism. However, no explicit security headers were detected, and there is no published security policy or incident response information. The use of self-hosted analytics and cookie consent tools indicates a good privacy posture, but the absence of a vulnerability disclosure policy and security.txt file suggests room for improvement. Overall, Lehrstellenradar presents a trustworthy and professional online presence with a clear business focus and good technical implementation. The site is safe for general audiences, compliant with GDPR, and well-positioned within its market niche. Strategic enhancements in security transparency and accessibility would further strengthen its posture.

H

Handwerkskammer Dresden

ausbilderakademie-handwerk.de

51

The website www.ausbilderakademie-handwerk.de is operated by the Handwerkskammer Dresden, a regional chamber of crafts in Dresden, Germany. It serves as an educational and informational platform targeting trainers, apprentices, and handcraft businesses. The site offers resources such as Ausbilderforen (trainer forums), an Ausbilder-App for knowledge enhancement, and various continuing education programs. The business model is non-profit and government-affiliated, focusing on supporting vocational training in the crafts sector. The website is professionally designed with consistent branding and clear navigation, targeting a German-speaking audience with multilingual options.

N

njumii - Das Bildungszentrum des Handwerks

njumii.de

53

njumii.de is the official website of njumii - Das Bildungszentrum des Handwerks, an educational center affiliated with the Handwerkskammer Dresden, Germany. The organization offers a broad range of vocational training, master craftsman courses, continuing education, and company training primarily targeting skilled trades professionals. The website is well-structured, professionally designed, and uses TYPO3 CMS with modern frontend technologies to deliver a responsive and accessible user experience. While the site demonstrates strong business credibility and good technical implementation, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS usage but no visible security headers or incident response information. Overall, the site is trustworthy and serves its educational purpose effectively but could improve privacy compliance and security transparency.

P

Papoo Software & Media GmbH

clickskeks.at

52

Clickskeks is a specialized technology company offering an automated cookie consent banner solution tailored for Austria and Germany. The company operates a SaaS model providing GDPR-compliant cookie management tools that simplify compliance for website owners and agencies. With over 2,000 clients and a strong partner ecosystem, clickskeks holds a reputable position in the regional market. The website is professionally designed, content-rich, and highly user-friendly, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS, integrates Google Analytics and Tag Manager for tracking, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, clickskeks presents a trustworthy and professional business with clear contact channels and legal transparency.

Y

Ynvolve

ynvolve.com

51

Ynvolve is a Netherlands-based company specializing in circular system integration for fit-for-purpose IT infrastructure solutions. Founded in 2013, the company targets businesses seeking sustainable and cost-effective IT solutions. Their market position is that of a niche player focusing on circular economy principles within the IT sector, offering services such as fit-for-purpose IT solutions, circular IT expertise, and consulting. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress using modern technologies including Bootstrap, Yoast SEO, and integrates multiple analytics tools such as Google Analytics and Microsoft Clarity. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, but could be improved by enabling DNSSEC and adding security headers. No explicit security policy or incident response information is provided, which is a gap in transparency. Overall, the website is trustworthy and compliant with GDPR, with moderate user tracking and good advertising transparency.

M

Mr Suricate

mrsuricate.com

50

Mr Suricate is a technology company specializing in SaaS-based no-code automated testing solutions designed to detect bugs efficiently. Positioned as a leader in the no-code test automation market, the company targets software developers, QA teams, and businesses seeking streamlined testing tools. The website reflects a professional and consistent brand image with clear messaging about its turnkey SaaS offering. Technically, the site is built on WordPress using Elementor and Yoast SEO, integrating multiple marketing and analytics tools such as Matomo, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing approach. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of privacy policy and security headers suggests room for improvement. The WHOIS data is notably missing, which raises questions about domain registration legitimacy despite the active and professional website presence. Overall, the site is safe, well-designed, and business-focused but should address compliance and transparency gaps to enhance trust and security.

E

EasyVirt

easyvirt.com

56

EasyVirt is a French technology company specializing in sustainable IT solutions, offering software products such as DC Scope®, DC NetScope®, and CO2 Scope® to optimize IT infrastructure and reduce environmental impact. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security best practices like security headers and explicit privacy policies are missing. The absence of WHOIS data reduces transparency and slightly impacts trust. Overall, the site presents a credible business with room for improvement in compliance and security documentation.

P

Proges Plus

proges.com

61

Proges Plus is a French technology company specializing in software publishing and IT services, with a focus on ERP solutions for SMEs, HR management software, IT infrastructure management, and environmental monitoring IoT systems. With over 35 years of experience and presence in more than 70 countries, the company serves diverse sectors including industry, health, research, agro-food, and local authorities. Their business model centers on providing modular, customizable software and expert IT services to empower businesses with data-driven solutions. Technically, the website is built on WordPress with modern tools such as Elementor and Yoast SEO, and integrates Google Tag Manager and Mailjet for analytics and marketing. The site is mobile-optimized and well-structured, reflecting a mature digital presence. Security-wise, HTTPS is enforced and cookie consent is implemented, though explicit security headers are not detected, and no dedicated security or incident response policies are published on the site. The absence of WHOIS data for the domain www.proges.com is a notable concern, as it prevents verification of domain registration legitimacy. Despite this, the website content and business information appear professional and trustworthy. Overall, the site demonstrates good content quality, technical implementation, and privacy compliance, but would benefit from enhanced security practices and transparency regarding domain registration.

L

Le médiateur national de l'énergie

energie-mediateur.fr

45

The French Energy Ombudsman website serves as an official public authority platform dedicated to assisting consumers in France with dispute resolution involving energy companies. It provides mediation services, consumer rights information, and access to an online dispute submission platform (Sollen). The site is positioned as a national independent authority with a clear focus on consumer protection in the energy sector. Technically, the website is built on WordPress, leveraging modern web technologies such as jQuery and SEO plugins, with embedded multimedia content and a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The domain WHOIS data is not publicly available, likely due to privacy protection, but the site’s branding, content, and social media presence strongly support its legitimacy. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

P

Pronosoft

pronosoft.com

70

Pronosoft is a French media website specializing in sports betting assistance, offering pronostics, betting tips, live scores, statistics, contests, and proprietary software products. The site targets French-speaking sports bettors and pronostiqueurs, providing a comprehensive platform with a long-standing presence since 2000. The business model relies on content, software sales, advertising, and affiliate marketing partnerships. Technically, the site uses a traditional web stack with jQuery, Google Analytics, and multiple ad networks integrated via header bidding technologies. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS and cookie consent but lacks advanced security headers and published security policies. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is professional and trustworthy for its niche audience but could improve security posture and transparency.

C

Candu123

croissance-verte.net

52

The website 'Candu123' operates as an online gaming agent platform primarily targeting users interested in gambling and gaming services. It offers products and services related to online gaming with claims of official PAGCOR licensing, positioning itself as a niche player in the online gaming e-commerce sector. The business appears small and relatively new, founded in 2019, with a physical address claimed in Paris, France. The website content is accessible and moderately structured but lacks comprehensive privacy and security policies, which impacts its trustworthiness. Technically, the site uses a modern but basic technology stack including Bootstrap, jQuery, and several popular JavaScript libraries for UI and interactivity. Hosting is supported by Cloudflare DNS, and HTTPS is enabled, but security headers and advanced security practices are missing. The site shows moderate performance and mobile optimization but has SEO and accessibility only at a basic level. From a security perspective, the site has some strengths such as HTTPS and Cloudflare DNS but lacks critical security headers and explicit data protection compliance. The absence of privacy and cookie policies, as well as incident response contacts, indicates compliance gaps. The use of multiple external and shortened URLs, some unrelated to the main domain, raises concerns about transparency and potential phishing risks. Overall, the website presents moderate risk with questionable content safety due to its gambling-related services and lack of robust privacy and security measures. Strategic improvements in security posture, privacy compliance, and clearer business information are recommended to enhance trust and reduce risk.

C

CONSEIL DÉPARTEMENTAL DE LOIR-ET-CHER

departement41.fr

54

The website www.departement41.fr is the official online presence of the Conseil Départemental de Loir-et-Cher, a French local government entity. It provides comprehensive information and services related to local administration, public services, culture, environment, mobility, and social solidarity. The site targets residents, associations, businesses, and public entities within the Loir-et-Cher department. The business model is focused on public service and information dissemination, positioning itself as a trusted government resource. Technically, the website is built on WordPress, utilizing modern web technologies such as Font Awesome, Roboto fonts, Swiper.js for carousels, and Gravity Forms for form handling. It implements a cookie consent mechanism compliant with GDPR, and the site is mobile-optimized with good accessibility and SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, uses standard security headers, and does not expose sensitive data. However, it lacks a dedicated security policy page, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. The WHOIS data is missing, which slightly reduces trust but is not uncommon for government domains in France. Overall, the website is professional, trustworthy, and well-maintained, serving its public service role effectively. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and maintaining regular security audits to ensure ongoing compliance and protection.

B

Brest en vue

brestaim.fr

57

Brest en vue is a French public local enterprise specializing in the management of major public equipment and the creation of events within Brest métropole. The company positions itself as a dynamic and responsive entity serving the public interest with a focus on innovation, entertainment, discovery, entrepreneurship, and regional influence. The website reflects a medium-sized organization with a clear mission and a strong local government sector presence. Technically, the site is built on WordPress with Yoast SEO, featuring modern web standards and mobile optimization, though some security headers are missing. Security posture is solid with HTTPS and cookie consent but could be improved with additional headers and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and legal disclosures.

The website www.essonne.fr currently presents a security challenge page indicating anti-DDoS flood protection and firewall measures are active. This prevents access to the actual website content, limiting the ability to analyze business operations or services. The page is minimalistic, with no visible contact information, privacy policies, or business details. The WHOIS data is unavailable, with no registrar, creation, or registrant information, which raises concerns about transparency and legitimacy. Technically, the site uses obfuscated JavaScript for bot detection and relies on Google Fonts for styling. No analytics or tracking technologies are detected, and no forms or user input fields are present. Overall, the site appears to be in a protective mode, blocking access to normal users and bots alike.

A

Domain Default page

araoo.tech

44

The website araoo.tech currently hosts a default placeholder page generated by Plesk, a popular web hosting control panel. The content is informational about Plesk services and related tools but does not represent an active business or service offering. The domain is registered with OVH since 2016, indicating a legitimate registration, but the website itself is not yet developed or customized. Technically, the site uses standard HTML5, CSS3, and JavaScript with Plesk branding assets. It is hosted on OVH infrastructure and shows moderate performance and good mobile optimization. However, there are no advanced frameworks or CMS detected, and no analytics or tracking scripts are present. The site lacks security headers and DNSSEC is not enabled, which are areas for improvement. From a security perspective, the site uses HTTPS (implied by the URL scheme), but no additional security headers or policies are implemented. There are no privacy, cookie, or terms of service policies, and no contact or incident response information is provided. No vulnerabilities or suspicious content were detected, but the lack of security best practices and compliance documentation lowers the security posture. Overall, the site is a basic placeholder with minimal content and low business credibility. It is safe for general audiences but lacks any meaningful business or security features. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing contact information to improve trust and compliance.

B

Banca Popolare Etica S.c.p.a.

fiarebancaetica.coop

72

Fiare Banca Etica is a cooperative and independent bank operating primarily in Spain and Italy, focused on ethical finance principles. It offers a range of financial products including current accounts, loans, credit, deposits, and ethical investment funds, targeting individuals, companies, and organizations interested in socially responsible banking. The bank emphasizes transparency, cooperative governance, and positive social impact. Technically, the website is built on WordPress with modern plugins and libraries, including Yoast SEO for optimization, Matomo for privacy-friendly analytics, and Iubenda for cookie consent management. The site is mobile-optimized, accessible, and well-structured, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but could improve by enabling DNSSEC and adding explicit security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration details align well with the business identity, supporting legitimacy and trustworthiness.

A

Audit People Srl – Società Benefit

ghgcompensation.com

64

ghgcompensation.com is a website operated by Audit People Srl – Società Benefit, providing sustainability consulting and greenhouse gas compensation services targeted at micro and small enterprises in Italy. The company offers free initial consultancy, online training, simplified emission calculations, improvement plans, and carbon offsetting options. The website positions itself as a pioneering independent service for small businesses aiming to be environmentally responsible. Technically, the site is built on WordPress with popular plugins such as WPBakery, Slider Revolution, and Contact Form 7, incorporating modern features like Google reCAPTCHA v3 and Iubenda cookie consent management. Security posture is adequate with HTTPS and form protections, though it lacks DNSSEC and some security headers. Privacy compliance is strong with GDPR-aligned policies and explicit consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, serving a niche market effectively.

F

FS International SpA

fsinternational.it

62

FS International SpA is a prominent European rail transport company specializing in high-speed rail services across borders, regulated rail passenger services, and urban mobility solutions. As part of the FS Italiane Group, it holds a leading position in the European transportation sector, focusing on sustainable and seamless passenger mobility. The website reflects a professional corporate presence with clear branding and comprehensive business information. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and analytics tools, ensuring a good user experience and mobile optimization. Security measures include HTTPS and a strict Content-Security-Policy header, complemented by a cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure and strong business credibility, with room for enhanced security transparency.

F

FSTechnology

fstechnology.it

61

FSTechnology is a medium-sized technology company operating within the transportation sector in Italy, primarily serving as a digital transformation and technology service provider for the Ferrovie dello Stato Italiane group. The company offers a range of services including continuous and project-based technological services, managed and proprietary platforms, and advanced digital solutions such as IoT, blockchain, 5G, and robotic process automation. The website reflects a professional and consistent corporate identity with a focus on innovation and sustainability. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and marketing tools, and implements strong security measures including HTTPS and a strict Content-Security-Policy. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. However, explicit contact information and security policies are not prominently displayed on the homepage, which could be improved. Overall, the website and domain registration data indicate a legitimate and trustworthy business entity with a solid market position in Italy's transportation technology sector.

F

Fondazione FS Italiane

fondazionefs.it

66

Fondazione FS Italiane is a well-established non-profit organization dedicated to preserving and promoting Italy's railway heritage. The website offers comprehensive information about historic train journeys, museum visits, and cultural events, targeting railway enthusiasts, tourists, and educational groups. The foundation operates under the umbrella of the FS Italiane group, Italy's state railway company, reinforcing its market position and credibility. Technically, the website is built on Adobe Experience Manager with modern JavaScript libraries and includes robust cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, Content Security Policy, and no evident vulnerabilities, although some additional headers could enhance protection. Privacy compliance is well addressed with GDPR-aligned policies and consent banners. Overall, the site is professional, trustworthy, and serves its audience effectively.

F

Ferservizi Spa

ferservizi.it

54

Ferservizi Spa is a key service company within the FS Italiane Group, providing a broad range of services including accounting, real estate management, procurement, HR administration, and facility management. The company supports the Italian railway sector with specialized internal and external services, positioning itself as an important entity in transportation and real estate services in Italy. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to corporate clients and stakeholders. Technically, the site leverages Adobe Experience Manager and integrates modern analytics and consent management tools, indicating a solid digital infrastructure. Security posture is strong with HTTPS, a strict Content-Security-Policy, and cookie consent mechanisms, although some additional security headers could enhance protection. Overall, the site is trustworthy, compliant with GDPR, and aligned with the business's corporate identity and market position.

I

Italcertifer S.p.A.

italcertifer.com

55

Italcertifer S.p.A. is a medium-sized Italian company specializing in railway certification, testing, and safety verification services. It is a subsidiary or closely affiliated entity of Ferrovie dello Stato Italiane, Italy's national railway group, and collaborates with prominent Italian universities. The company positions itself as a center of excellence in railway conformity and safety, offering services such as certification of rolling stock, signaling, infrastructure, energy, and urban transport, alongside laboratory testing and project verification. The website content is professionally presented in Italian, targeting industry stakeholders and clients requiring railway safety and compliance services. Technically, the website is built on Adobe Experience Manager CMS, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates analytics and marketing tools including Siteimprove Analytics, Adobe Launch, and LinkedIn Insight Tag. The site is mobile-optimized with good accessibility and SEO practices. Cookie consent and privacy policies are implemented in compliance with GDPR, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible HTTP security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, though the website's affiliation with a reputable parent company mitigates this risk. Overall, Italcertifer's website demonstrates a solid business and technical foundation with good security hygiene, though improvements in domain registration transparency and security header implementation are recommended to enhance trust and compliance.

I

Italferr S.p.A.

italferr.it

10

Italferr S.p.A. is a prominent Italian engineering company specializing in railway infrastructure design, project management, and technological innovation. As a subsidiary of Ferrovie dello Stato Italiane, Italferr holds a leading market position in the transportation sector, offering comprehensive engineering services with a strong focus on sustainability and quality. The company targets government agencies, infrastructure developers, and transportation stakeholders, leveraging its extensive experience and certifications to maintain competitive advantage. The website reflects a mature digital presence with clear navigation, professional content, and consistent branding. Technically, the site is built on Adobe Experience Manager, utilizing modern analytics and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is robust with HTTPS, Content Security Policy, and secure script loading, although some additional headers could enhance protection further. Overall, the website demonstrates high trustworthiness and professionalism, supporting Italferr's business credibility and market reputation.

B

Banca Etica

bancaetica.it

11

Banca Etica is an Italian cooperative bank specializing in ethical finance, focusing on transparency and social/environmental impact. It serves individuals, families, businesses, and organizations with banking products such as current accounts, loans, ethical investments, and advisory services. The bank holds a niche leadership position in Italy and Spain, emphasizing cooperative governance and sustainability. Technically, the website is built on WordPress with modern libraries and tools, including Matomo for analytics and Iubenda for cookie compliance. The site is well-optimized for SEO, accessibility, and mobile use. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly detailed. WHOIS data confirms legitimacy with consistent registrant information and domain age matching the business history. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations.

S

Syloé

syloe.com

57

Syloé is a French technology company specializing in open source software consulting, DevOps, cloud management, and IT infrastructure services. The company positions itself as an expert in Linux and open source environments, targeting IT professionals and businesses seeking specialized DevOps and cloud expertise. The website is professionally designed using WordPress with modern technologies and optimized for performance and mobile devices. Security posture is good with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and published security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies. WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, though the website content suggests an established business since 2016. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security documentation.

D

DRI

dri.fr

53

DRI is a French-based company specializing in sovereign and eco-responsible web hosting and IT management services. Established since 2001, it serves a diverse clientele including public sector entities and environmentally conscious organizations. The company emphasizes security, environmental responsibility, and social engagement, holding ISO 27001 and ISO 14001 certifications. Their service portfolio includes managed hosting, infogérance, DevOps consulting, and AI sovereign services under the EVA brand. The website demonstrates a mature digital presence with good content quality, clear navigation, and mobile responsiveness. Technically, it uses modern frameworks like Bootstrap and FontAwesome, and integrates marketing automation via Mautic. Security posture is strong with HTTPS and certifications, though some improvements in security headers and incident response transparency are recommended. WHOIS data is missing, which slightly impacts trust but the extensive client testimonials and certifications support legitimacy. Overall, DRI presents as a credible and professional hosting provider with a strong focus on sustainability and security.

Emilia Romagna Turismo is the official tourism information website for the Emilia Romagna region in Italy, providing comprehensive travel information, event listings, and itineraries to visitors. The website serves as a key regional portal promoting tourism and experiences in the area, targeting tourists and travelers interested in exploring Emilia Romagna. The business model focuses on information dissemination and regional tourism promotion, positioning itself as a trusted and official source. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates Matomo and Google Analytics for visitor tracking, and uses Cookiebot for GDPR-compliant cookie consent management. The site is well-structured with good SEO and accessibility practices, delivering a professional user experience. Security posture is solid with HTTPS enforced, CSRF protection, and cookie consent mechanisms, though some security headers could be improved and DNSSEC is not enabled. No critical vulnerabilities or suspicious content were detected. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the site. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving contact information visibility to strengthen business credibility and compliance.

H

Handwerkskammer Dresden

hwk-dresden.de

53

Handwerkskammer Dresden is a regional chamber of crafts serving the Dresden area, providing a broad range of services including vocational training, continuing education, business consulting, legal advice, and political representation for the handcraft sector. The organization targets handcraft businesses, apprentices, trainers, and educational institutions within its jurisdiction. The website is professionally designed, content-rich, and well-structured, supporting multiple languages and offering extensive resources and event information. Technically, the site is built on TYPO3 CMS with modern libraries such as jQuery and Bootstrap, hosted likely by Deutsche Telekom, ensuring reliable infrastructure and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and active social media presence.

S

Stadt Wien

wien.at

59

Stadt Wien operates the official website for the city of Vienna, Austria, providing comprehensive information, services, news, and event details to residents and visitors. The site serves as a central hub for municipal services including administrative procedures, health information, cultural events, and public transportation. It holds a strong market position as the authoritative source for city-related information and services. Technically, the website employs modern web technologies including JavaScript modules and custom web components, ensuring a responsive and accessible user experience across devices. The site is well-optimized for SEO and mobile use, with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, though it lacks a dedicated security policy or incident response contact details. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a high level of trustworthiness and professionalism, suitable for a government entity.

W

wohnfonds_wien

hauskunft-wien.at

47

Hauskunft is a municipal service operated by wohnfonds_wien, providing free and subsidized consulting for building renovations and energy efficiency upgrades in Vienna. The website offers comprehensive information about their services, including orientation consultations, future checks, and support for creating renovation concepts. The target audience includes homeowners, property managers, architects, and planners in Vienna. The service is well integrated with city initiatives like 'Raus aus Gas' and collaborates with partners such as the City of Vienna and klimaaktiv-gebaut.at. Technically, the website uses modern web technologies, including Matomo for privacy-friendly analytics and Swiper.js for interactive content. It is well optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS, security headers, and secure forms, though incident response and vulnerability disclosure information could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for a government service.

W

Wohnberatung Wien

wohnberatung-wien.at

63

Wohnberatung Wien is a municipal housing advisory service providing free assistance to residents of Vienna seeking subsidized or municipal housing. The website offers comprehensive information about housing options, funding, and the Wiener Wohn-Ticket required for housing applications. Technically, the site is built on TYPO3 CMS with Bootstrap, ensuring a responsive and accessible user experience. Analytics are implemented via Piwik (Matomo) with a GDPR-compliant cookie consent mechanism. Security posture is generally good with HTTPS enforced, though the absence of security headers and incident response information suggests room for improvement. Overall, the site is trustworthy, professionally maintained, and serves an essential government function.

W

wohnpartner

wohnpartner-wien.at

64

wohnpartner is a Vienna-based social service organization focused on fostering good community living in municipal housing. As part of Wohnservice Wien, it offers conflict mediation, social advice, and neighborhood engagement through various projects and events. The website reflects a mature digital presence built on TYPO3 CMS with a clear structure and good user experience. Privacy and cookie compliance are well implemented, including a consent mechanism and a comprehensive privacy policy. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy and professionally maintained, serving a government/non-profit sector audience effectively.

M

MieterHilfe

mieterhilfe.at

63

MieterHilfe.at is a well-established public service website providing free tenant legal advice and consultation services primarily for residents of Vienna, Austria. The platform offers comprehensive information on housing and tenancy law, subsidized housing, and condominium ownership, supported by online tools such as rent and cost calculators. The website is clearly positioned as a trusted non-profit advisory service, backed by the parent organization wohnservice-wien.at, and prominently features official contact details and endorsements from city officials. Technically, the site is built on TYPO3 CMS with Bootstrap, integrates privacy-conscious analytics (Matomo), and employs hCaptcha for form security. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policy and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, serving its target audience effectively.

G

Gebietsbetreuung Stadterneuerung (GB*)

stadtteilmanagement.wien

51

The website www.stadtteilmanagement.wien represents the Gebietsbetreuung Stadterneuerung (GB*), a municipal service initiative of the City of Vienna focused on urban renewal and neighborhood management in new residential districts. It provides residents and stakeholders with information on urban development projects, events, and local services to foster community engagement and support. The site is professionally designed using TYPO3 CMS and integrates modern frontend technologies such as Owl Carousel and Leaflet.js for interactive content. Privacy is well addressed with comprehensive cookie consent mechanisms and a detailed privacy policy, leveraging Matomo analytics for privacy-friendly user tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and incident response information is absent. WHOIS data is unavailable, likely due to privacy protection, but the website's content and external links strongly indicate legitimacy and official backing. Overall, the site is a reliable and well-maintained digital platform serving Vienna's urban development community.