Security Directory

HORNBACH Baumarkt AG operates a large-scale retail and e-commerce platform specializing in home improvement, garden, and construction products primarily serving the German market and neighboring countries. The website is professionally designed, well-structured, and optimized for performance and mobile devices, reflecting a mature digital infrastructure. The company leverages modern technologies including StencilJS, Usercentrics for consent management, Dynatrace for real user monitoring, and Coveo for search analytics, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and cookie management, although explicit security policies and incident response contacts are not prominently published. Overall, the website demonstrates high trustworthiness and compliance with GDPR, supported by comprehensive privacy and cookie policies. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure to further enhance transparency and security culture.

N

Národní divadlo Brno

ndbrno.cz

56

Národní divadlo Brno is a prominent cultural institution in the Czech Republic, offering a wide range of performing arts including opera, ballet, drama, and concerts. It operates multiple venues such as Mahenovo divadlo, Janáčkovo divadlo, and divadlo Reduta, targeting a broad audience from general public to young and mature theatergoers. The website reflects a well-established organization with a strong market position in the cultural sector, providing ticket sales, educational programs, and outreach activities. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Tag Manager, and various plugins for SEO, multilingual support, and cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented for enhanced search engine understanding. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a valid SSL certificate and employs cookie consent mechanisms compliant with GDPR. However, explicit security headers are not detected, and no public security policy or incident response information is available. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content show no suspicious indicators. Overall, the website presents a professional, trustworthy, and user-friendly platform for the national theatre, with good privacy compliance and moderate security posture. Strategic improvements in security headers and incident response transparency are recommended to enhance trust and resilience.

T

TSC Group

tsc-group.cz

54

TSC Group is a prominent holding company based in the Czech Republic, specializing in a broad range of facility management and technical services including cleaning, laundry, technological cleaning, and paint stripping. The group oversees 12 subsidiaries, serving diverse sectors such as industrial manufacturing, healthcare, administrative offices, and outdoor maintenance. Their market position is strong as the largest group in their sector within the Czech Republic, supported by certifications like ISO 50001 and EcoVadis, and partnerships with notable sports clubs. The website reflects a professional and comprehensive digital presence with clear service offerings and strong branding consistency. Technically, the website employs modern web technologies including Google Tag Manager, Swiper.js for UI components, and the Nette framework for form validation. The site is mobile-optimized with good performance and SEO practices. Security measures include HTTPS enforcement, use of reCaptcha on forms, and a cookie consent mechanism compliant with GDPR. However, some recommended security headers like Content-Security-Policy and X-Frame-Options are not explicitly confirmed and could be improved. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain registration insights, but the professional presentation, certifications, and subsidiary network strongly indicate legitimacy and trustworthiness. The website content is safe for general audiences, with no adult or questionable material detected. Strategically, TSC Group should focus on enhancing security headers, maintaining GDPR compliance, and continuing to leverage their strong market position and certifications to build trust and expand their service offerings.

V

Veselá věda kroužky a tábory, SVČ z.ú. / Veselá věda středisko volného času s.r.o.

veselaveda.cz

46

Veselá věda is a Czech educational organization specializing in science clubs and camps for children, operating for over 12 years with a presence in more than 350 cities. Their offerings include science experiment clubs, LEGO building clubs, day camps, and residential camps, targeting children and parents seeking engaging educational activities. The website is professionally designed with clear navigation and mobile optimization, leveraging modern web technologies including jQuery, Nette Framework, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. Privacy and cookie policies are present with consent mechanisms, reflecting good GDPR compliance. Security posture is adequate with HTTPS enforced but could be improved by adding more security headers and publishing a formal security policy. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and consistent with an established educational service provider. Overall, the site presents a trustworthy and professional front for its business activities.

R

Realness s.r.o.

realness.cz

57

Realness s.r.o. is a Czech Republic-based branding and creative marketing agency specializing in brand strategy, creative campaigns, visual and verbal identity, and digital marketing services. The company positions itself as an award-winning agency with a strong portfolio of clients across various sectors including biotechnology, education, retail, and IT. The website demonstrates a high level of professionalism, with excellent design quality, clear navigation, and comprehensive content showcasing their projects and accolades. Technically, the site is built on Webflow, leveraging modern web technologies and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected in the HTML content. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism was found, which may pose GDPR compliance risks. The absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy, though the website content and business information suggest a legitimate and credible business. Overall, the site scores well on content quality, technical implementation, and business credibility, with recommendations to enhance privacy compliance and security headers.

N

NOHO Energy

nohoenergy.cz

58

NOHO Energy is a Czech-based company specializing in sustainable energy solutions and community-focused real estate development. The company emphasizes renewable energy sources, community benefits, and ecological responsibility, positioning itself as a trusted developer in the green energy and sustainable housing market. Their website reflects a professional and modern digital presence, leveraging Webflow CMS and integrating advanced analytics and user engagement tools. Security measures include HTTPS enforcement and CAPTCHA protection on forms, indicating a mature security posture. While WHOIS data is not publicly available due to privacy protection, the website's content quality, trust signals, and business consistency support its legitimacy. Overall, NOHO Energy demonstrates a strong commitment to sustainability, community engagement, and professional service delivery.

P

Prodesi/Domesi

prodesidomesi.cz

51

Prodesi/Domesi is a Czech Republic based architectural and construction firm specializing in wooden houses and dřevostavby (wooden buildings). The company offers comprehensive services including individual design and realization, turnkey wooden houses, and public/commercial buildings. With over 22 years of experience and 250 completed projects, they hold a solid regional market position. Their website is professionally designed, mobile optimized, and includes clear navigation and relevant content targeting clients interested in wooden architecture. Technically, the site uses WordPress CMS with modern tracking and analytics tools such as Google Analytics, Hotjar, and Google Tag Manager. Hosting is provided by OVH, a reputable provider. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though security headers and incident response policies are absent. Overall, the site is trustworthy and compliant with GDPR, with clear contact information and social media presence.

M

Malý Chmel

maly-chmel.cz

58

Malý Chmel is a small architectural studio based in Prague and České Budějovice, Czech Republic, offering architectural design and model making services. The website is built on the Wix platform and integrates Google Analytics and Google Tag Manager for visitor tracking. The site presents professional content with good design and navigation, targeting a general audience interested in architectural services. Security posture is moderate with HTTPS enabled but lacks security headers and privacy policies. The absence of WHOIS data limits domain trust assessment, but the website content suggests a legitimate small business. Strategic recommendations include adding privacy and cookie policies, improving security headers, and providing clear contact information to enhance trust and compliance.

P

Photon Remediation

photonremediation.com

52

Photon Remediation is a specialized environmental remediation company focused on providing advanced solutions for PFAS and other contamination challenges. The company leverages innovative technologies such as WaterGuard Nano™ and EarthGuard PRB™ to deliver sustainable cleanup services targeting groundwater, soil, surface water, and biosolids. Positioned as a trusted partner to militaries, airports, chemical manufacturers, and academic institutions, Photon Remediation operates under the Photon Energy Group umbrella, emphasizing eco-friendly and customized remediation strategies. Technically, the website demonstrates a modern and professional digital presence, utilizing contemporary JavaScript libraries, Google Tag Manager, and invisible reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and a clear navigation structure. However, some technical improvements could be made in accessibility and security headers to enhance overall robustness. From a security perspective, the site enforces HTTPS and employs Google reCAPTCHA to protect forms, alongside a cookie consent mechanism aligned with GDPR requirements. Despite these strengths, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No explicit security policies or incident response contacts are published, indicating room for maturity in security governance. Overall, Photon Remediation presents a credible and professional business front with solid technical implementation and privacy compliance. The main risk lies in the domain registration inconsistency, which should be addressed to strengthen trust and reduce potential reputational risks.

D

DEBYT

debyt.cz

59

DEBYT is a small Czech architecture and furniture design studio that integrates architectural services with sociological participation and community involvement. Their offerings include architectural projects, artistic creations by architect Tomáš Petrášek, and a curated e-shop for retro and antique furniture renovation and sales. The website presents a professional portfolio and clear contact information, targeting clients interested in personalized architectural and furniture solutions. Technically, the website uses modern analytics tools and is mobile-optimized, but lacks some security headers and privacy compliance features. The absence of WHOIS data raises concerns about domain legitimacy, although the website content itself is professional and safe. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

N

Nadace Partnerství

aukceproprirodu.cz

49

The website 'Aukce pro přírodu - Nadace Partnerství' is a Czech language platform dedicated to a charitable auction event organized by Nadace Partnerství, a non-profit foundation. The event aims to raise funds to plant 10 million trees in the Czech Republic, targeting environmentally conscious individuals and supporters of ecological causes. The site presents a professional and consistent brand image aligned with its charitable mission. Technically, the website employs modern frontend technologies including Bootstrap and Vue.js frameworks, integrates tracking tools such as Google Tag Manager and Facebook Pixel, and uses Mapy.cz API for mapping features. However, the site lacks visible privacy and cookie policies, security headers, and WHOIS registration transparency, which impacts its overall security posture and privacy compliance. The absence of explicit contact information and security policies suggests room for improvement in trust and compliance aspects. Overall, the site is functional and well-designed for its purpose but requires enhancements in security and privacy transparency to strengthen user trust and regulatory compliance.

N

Nadace Partnerství (The Environmental Partnership Foundation)

adapterraawards.cz

63

The Adapterra Awards website is operated by Nadace Partnerství, a Czech non-profit foundation focused on promoting climate change adaptation through awards, contests, and an inspirational database. The site targets experts and the general public interested in environmental adaptation measures, primarily in the Czech Republic and Austria. It offers resources such as downloadable booklets and showcases best practice projects. Technically, the site uses ASP.NET WebForms with Kentico CMS, integrates modern JavaScript libraries, and employs Google Tag Manager and Seznam tracking for analytics and marketing. The design is professional, mobile-optimized, and content-rich, supporting good user experience and SEO. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response contacts. WHOIS data is unavailable, limiting domain legitimacy verification, though the presence of official partner logos and contact details supports trustworthiness. Overall, the site is a credible, well-maintained resource for climate adaptation information with room for security and compliance enhancements.

N

Nadace Partnerství

lifetreecheck.eu

58

LIFE Tree Check is a non-profit environmental project coordinated by Nadace Partnerství, focused on helping Central European cities adapt to climate change by strengthening green infrastructure. The website serves as an educational and resource platform offering applications, publications, and inspirational content to municipalities and the public. The project is supported by the EU LIFE program and partners across multiple countries, positioning it as a reputable initiative in the climate adaptation sector. Technically, the site is built on Kentico CMS with ASP.NET WebForms, leveraging modern web technologies like jQuery and Google Tag Manager for analytics and marketing. The site is well-designed, mobile-optimized, and provides clear navigation and rich content in Czech. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit incident response information. WHOIS data is unavailable due to EURid privacy policies, but the site’s legitimacy is supported by its association with a known non-profit and EU funding. Overall, the site is professional, trustworthy, and serves its target audience effectively.

N

Nadace Partnerství

otevrenazahrada.cz

58

Otevřená zahrada is a non-profit initiative managed by Nadace Partnerství, offering a unique blend of nature, education, and community experiences in the heart of Brno, Czech Republic. The website targets children, schools, companies, and the general public, providing educational programs, event spaces, and recreational opportunities. The project is positioned as a local community and environmental hub with a strong focus on sustainability and learning. Technically, the website is built on ASP.NET WebForms with Kentico CMS elements, utilizing modern libraries such as Bootstrap, jQuery, and Tippy.js for UI enhancements. It integrates Google Tag Manager and Microsoft Clarity for analytics and tracking, and implements a cookie consent mechanism aligned with GDPR requirements. The site demonstrates good mobile optimization and SEO practices, though some accessibility improvements are possible. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers in the provided data. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the association with a reputable foundation and clear contact information enhance credibility. Overall, the website is professional, content-rich, and trustworthy, with recommendations to enhance security headers and improve domain transparency through WHOIS data availability.

C

Cestopisy

cestopisy.net

39

Cestopisy.net is a Czech independent travel guide website operating for over 19 years, offering detailed travelogues, quality photographs, and video guides focused on tourism, vacations, and sightseeing tips. The site targets travelers and tourists seeking authentic and well-curated travel content. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy/cookie policies, which are areas for improvement. WHOIS data is missing, which raises concerns about domain registration transparency but does not detract significantly from the site's professional content and trustworthiness. Overall, the site is a reliable resource for travel information with moderate technical and security maturity.

F

Federace židovských obcí v České republice

10hvezd.cz

40

The website 'Deset hvězd' is a cultural heritage project managed by the Federation of Jewish Communities in the Czech Republic. It focuses on preserving and promoting Jewish cultural heritage through a network of regional cultural and educational centers located in restored synagogues. The project is part of the European Route of Jewish Heritage, certified by the Council of Europe, and offers exhibitions, cultural programs, and concerts. The target audience is the general public interested in cultural history and education. The business model is non-profit, emphasizing cultural preservation and education. Technically, the website uses a traditional tech stack including jQuery, Owl Carousel, Fancybox, and Google Analytics for tracking. It is built on the Nette Framework, a PHP-based CMS. The site shows moderate performance and basic mobile optimization but uses outdated JavaScript libraries that may pose security risks. SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS and includes Google Analytics scripts but lacks visible security headers and uses outdated libraries. There are no forms collecting sensitive data, reducing immediate risk, but the absence of privacy and cookie policies indicates compliance gaps. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professionally presented but would benefit from updating its technical stack, implementing security best practices, and adding privacy and cookie policies to improve compliance and user trust.

P

Photon Energy Group

photonenergy.com

54

Photon Energy Group is a well-established renewable energy company specializing in solar power plant development, battery energy storage systems, energy trading, and flexibility solutions. With over 16 years of industry experience and operations in more than 15 countries, the company maintains a significant portfolio of photovoltaic assets and offers comprehensive services from project development to operations and maintenance. The website reflects a professional and modern digital presence with strong branding and clear communication of services and case studies. Technically, the site employs a modern technology stack including Google Tag Manager, reCAPTCHA, and various JavaScript libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and spam protection on forms, though it lacks some advanced security headers and explicit incident response or vulnerability disclosure pages. The absence of WHOIS data limits domain trust verification, but the overall business credibility remains high due to transparent business information, investor relations, and social media presence. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving domain registration transparency.

S

Studio UpFront

upfront.cz

51

Studio UpFront is a small Czech graphic and web studio specializing in web development, multimedia presentations, printing services, and promotional items. The company targets local businesses and organizations seeking professional digital and print media solutions. Their website presents a consistent brand image with clear service offerings and customer references, positioning them as a trusted local service provider. Technically, the website uses legacy JavaScript libraries and lacks HTTPS enforcement, which impacts security and user trust. The absence of privacy and cookie policies further reduces compliance posture. Security-wise, the site shows no advanced protections or security headers, and the WHOIS data is missing, which raises concerns about domain legitimacy. Overall, the business appears legitimate and professional but would benefit from technical and security improvements to enhance trust and compliance.

T

TicTac Learn AB

tictaclearn.net

74

TicTac Learn AB is a European-based company specializing in e-learning and digital learning solutions, combining human creativity with AI-powered technology to deliver scalable learning platforms and custom content. The company holds a strong market position as a Core Leader on the Fosway 9-Grid™ and is ISO 27001 certified, emphasizing its commitment to security and compliance. Their offerings include well-known platforms such as Articulate 360, Docebo, Vyond, and Skillhabit, supported by comprehensive customer success services including training, onboarding, and AI readiness consulting. Technically, the website is built on Webflow CMS with integrations including Google Tag Manager, Sendinblue for marketing automation, Weglot for multilingual support, and Captcha.eu for form security. The site is well-optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices and modern web technologies. Security posture is robust with HTTPS enforced, ISO certification, GDPR compliance, and use of CAPTCHA on forms. However, the absence of visible HTTP security headers and lack of published incident response or vulnerability disclosure policies represent areas for improvement. The missing WHOIS registration data is a notable concern for domain legitimacy, though the website content and trust signals strongly support business credibility. Overall, the website presents a professional, secure, and user-friendly digital presence suitable for its B2B education market. Strategic recommendations include enhancing security header implementation, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

R

RichmondShare Blog | High quality content and interaction in the ELT world | RichmondShare is a free-access blog aimed at teachers and future teachers of English as a Foreign Language where ELT professionals (authors, editors, teachers educators, teachers etc) share their ideas, experiences and reflections.

richmondshare.com.br

68

RichmondShare is a niche educational blog focused on English Language Teaching (ELT) professionals and future teachers, primarily targeting the Brazilian market. The website serves as a free-access platform for sharing ideas, experiences, and reflections within the ELT community. It operates on a WordPress CMS with standard SEO optimizations and integrates Google Analytics and Tag Manager for visitor tracking. Hosting infrastructure appears to be on Amazon AWS, providing reliable performance and scalability. The site demonstrates good mobile optimization and accessibility basics, supporting a positive user experience for its audience. However, the absence of explicit privacy and terms of service pages, as well as contact information, limits its compliance and business transparency. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published policies. Overall, RichmondShare is a credible educational resource with room for improvement in privacy compliance and business information transparency.

SVEN Biolabs is a Czech Republic based business operating since 2016, likely in the biotechnology or laboratory sector. The website uses OpenCart CMS with the Journal3 theme and integrates modern web technologies including Bootstrap, Font Awesome, and Google Tag Manager. The site is moderately optimized for mobile and performance, with basic SEO and accessibility features. Security posture is moderate with HTTPS implied but no explicit security headers detected. Privacy compliance is limited, with no visible privacy policy or terms of service, though a cookie consent mechanism is present. Contact information is not explicitly provided on the site, which may impact user trust and compliance. Overall, the website is functional and professional but would benefit from enhanced security and compliance disclosures.

Santillana is a well-established educational content provider focused on Spanish language learning materials in Brazil. The website serves as a portal offering catalogs, educational resources, and accessible content for students and educators. The business operates under the Grupo Santillana umbrella, leveraging partnerships with related educational brands such as Moderna and Richmond. The site is professionally designed with consistent branding and targets educational institutions and learners. Technically, the site uses a custom CMS (Lumis Portal) and integrates common analytics and tracking tools such as Google Analytics and Facebook SDK. Hosting is professional, utilizing AWS DNS infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. Overall, the site is safe, accessible, and trustworthy for its intended audience.

S

SampsonMay

sampsonmay.com

71

SampsonMay is a London-based design and digital experience agency specializing in strategic consultancy, branding, design, and content creation services targeted at multinationals, established independents, and progressive start-ups. The company positions itself as a professional and creative partner in the technology sector, delivering tailored digital solutions. The website reflects a modern and professional digital presence with good design quality and user experience. Technically, the site leverages Cloudflare for security and performance, uses Umbraco CMS, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforcement, security headers, and anti-forgery cookies, though explicit security and incident response policies are not publicly disclosed. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and a consent mechanism. However, the absence of WHOIS data and lack of explicit contact information slightly reduce the overall trustworthiness. Strategic recommendations include publishing terms of service, security policies, and incident response contacts to enhance transparency and trust.

M

Melrose Industries PLC

melroseplc.net

71

Melrose Industries PLC is a UK-listed, industry-leading global aerospace business specializing in manufacturing aerospace engines and structures for major OEMs across civil and defense markets. The company emphasizes value creation, technology leadership, and sustainability, serving investors, customers, and stakeholders with comprehensive reporting and governance. The website demonstrates a mature digital presence with modern technologies, accessibility features, and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and a public security policy are absent. The lack of WHOIS data introduces some uncertainty about domain registration legitimacy, but the professional corporate content and investor relations mitigate this risk. Overall, the website reflects a credible and well-managed aerospace business with room for security enhancements.

A

Afipre - Fabrico de Ferramentas de Corte com Rigor e Precisão

afipre.pt

47

Afipre – Ferramentas de Corte, Lda is a Portuguese manufacturer specializing in precision cutting tools for the metalworking and metal-mechanical industries. With 25 years of experience, the company offers a range of services including consultancy, sharpening and repair, PVD coatings, and stock management, targeting industrial manufacturers seeking productivity improvements. The website is built on WordPress using modern plugins like Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is well-designed, mobile-optimized, and SEO-friendly, but lacks explicit privacy and cookie policies, as well as incident response or vulnerability disclosure information. Security posture is adequate with HTTPS enabled, but missing security headers and formal security policies reduce the overall security maturity. No blocking or WAF challenges were detected, allowing full content access and analysis.

W

Wavecom

wavecom.pt

59

Wavecom is a Portuguese engineering company specializing in telecommunications and innovative communication solutions, including RFID, IoT, Wi-Fi coverage, and smart city technologies. Established around 2015, it holds a strong market position in Portugal and internationally, with recognized certifications such as INOVADORA COTEC 2025. The company offers proprietary solutions and consulting services targeting businesses and public entities requiring advanced wireless and location-based technologies. Technically, the website is built on WordPress with modern plugins and analytics integrations, showing good digital maturity and performance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature business with transparent contact and governance information.

V

VisionSpace

visionspace.com

57

VisionSpace is a specialized technology company focused on satellite operations, cybersecurity, and AI solutions primarily serving the space and defense sectors. The company offers end-to-end services including consultancy, product development, and ground segment AIV, positioning itself as a niche expert in these high-technology domains. The website reflects a professional and consistent brand image with comprehensive service descriptions and active social media engagement. Technically, the website is built on WordPress using Elementor and Slider Revolution, leveraging modern web technologies and fonts from Google and Adobe. The site is hosted with GoDaddy and employs HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is adequately addressed with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and a cookie consent mechanism compliant with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-established domain with consistent registration details, enhancing trustworthiness. Overall, VisionSpace presents a secure, professional, and compliant online presence suitable for its target audience. Strategic improvements in security headers, incident response transparency, and accessibility could further strengthen its posture.

S

STI Group

sti-group.com

54

STI Group is a large, Germany-based manufacturer specializing in sustainable packaging and point-of-sale display solutions. The company emphasizes innovation and environmental responsibility, offering fiber-based, plastic-free packaging for food and non-food products. Their market position is strong, supported by multiple certifications and awards, and they operate multiple production sites across Europe and Asia Pacific. Technically, the website is built on TYPO3 CMS with modern frontend libraries and includes comprehensive cookie consent and privacy management, reflecting good digital maturity. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, user-friendly, and trustworthy, but the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy.

S

SPEEDBIRD VEICULOS AEREOS NAO TRIPULADOS SA

speedbird.aero

60

Speedbird Aero is a Brazilian-based company specializing in drone delivery logistics, offering a certified and innovative platform for commercial, industrial, and healthcare sectors. Their business model centers on Drone as a Service (DaaS), providing unmanned aircraft systems, navigation software, and droneport infrastructure to enable efficient and safe package delivery. The company has established partnerships with major clients and operates globally with plans for expansion by 2030. Technically, the website employs modern web technologies such as jQuery and Bootstrap, with integrated analytics and a cookie consent mechanism, reflecting moderate digital maturity. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and published security policies, indicating room for improvement. Overall, the website is professional, content-rich, and trustworthy, though it would benefit from enhanced privacy and security disclosures.

O

Open Cosmos Ltd.

open-cosmos.com

73

Open Cosmos Ltd. is a technology company specializing in the design, build, and operation of space missions, providing accessible satellite data and insights globally. The company offers end-to-end satellite mission services including assembly, launch, in-orbit operations, and data delivery. Their innovative OpenConstellation platform enables shared satellite infrastructure to address global challenges such as climate change and natural resource management. With multiple European offices and a strong social media presence, Open Cosmos positions itself as a key player in the satellite data and earth observation market. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, and Google Tag Manager for analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, featuring a professional design and clear navigation. Cookie consent mechanisms and privacy policies indicate good privacy compliance. However, explicit security headers and incident response information are absent, representing areas for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities or sensitive data exposure. The lack of WHOIS transparency slightly reduces trust but the overall business credibility remains high due to consistent branding, multiple physical addresses, and professional content. The site uses Google Analytics for moderate user tracking with good privacy compliance. Overall, Open Cosmos demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to further strengthen trust and compliance.

M

Motofil

motofil.com

51

Motofil is a Portuguese-based company specializing in the development and manufacturing of industrial robotic welding and cutting equipment, including MIG/MAG welding, submerged arc welding, robotic automation, handling, and thermal cutting technologies such as laser, plasma, and oxy-fuel cutting. Established in 1981, Motofil positions itself as a leader in robotic welding solutions serving various industrial sectors including aeronautics, automotive, metalworking, and renewable energy. The company maintains a medium-sized business model focused on B2B industrial clients, supported by a professional website with comprehensive product and service information, testimonials, and active participation in international industry fairs. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Slick Carousel, and integrates analytics and marketing tools like Google Analytics, Google Tag Manager, and HubSpot. The site is well-optimized for mobile devices, has good SEO practices, and includes GDPR-compliant privacy and cookie policies with consent mechanisms. Security posture is generally good with HTTPS enforced and reCAPTCHA on forms, though explicit security headers and a published security policy are absent. The WHOIS data for the domain www.motofil.com is not publicly available, which raises concerns about domain registration legitimacy and consistency with the company's claimed history. Despite this, the website content and business information appear professional and trustworthy. No signs of adult or questionable content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, Motofil demonstrates a strong business presence and digital maturity with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to strengthen trust and compliance.

I

Imaginary Cloud

imaginarycloud.com

67

Imaginary Cloud is a Portugal-based technology company specializing in custom software development and digital acceleration services. Founded in 2010, the company offers a comprehensive suite of services including product ideation, software development, AI and data science, UX/UI design, and quality assurance. Their market position is reinforced by a portfolio of notable clients such as Neom, Remax, ThermoFisher, and Nokia, indicating strong industry trust and credibility. The website reflects a professional and modern digital presence, optimized for performance and mobile devices, with clear navigation and rich content that targets businesses seeking scalable technology solutions. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and HubSpot forms for marketing and analytics. The site demonstrates good SEO and accessibility practices, with fast loading times and responsive design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not evident, suggesting room for improvement in formal security documentation. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through comprehensive privacy and cookie policies, including GDPR compliance indicators. The absence of WHOIS registration data is a notable anomaly that slightly reduces trustworthiness but is mitigated by the professional presentation and business transparency on the site. Strategically, the company should enhance its security documentation and consider publishing a vulnerability disclosure policy to further strengthen trust. Monitoring domain registration status is recommended due to the missing WHOIS data. The website’s digital maturity and business credibility position Imaginary Cloud well for continued growth in the competitive software development market.

A

Amper S.A.

grupoamper.com

56

Grupo Amper is a Spanish industrial and technological group with over 60 years of history, specializing in defense, security, communications, energy, and sustainability sectors. The company positions itself as a leader in technological and industrial strategic capabilities with a significant international presence. Their key services include defense and security solutions, energy and sustainability services, and telecommunications. The website reflects a professional corporate presence targeting businesses and government entities in these sectors. Technically, the website is built on WordPress using common plugins such as WPBakery Page Builder, Slider Revolution, and LiteSpeed Cache. It employs modern tracking and analytics tools like Google Tag Manager and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized with good SEO practices and structured data implementation, although accessibility features are basic. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which impacts the overall trustworthiness assessment. Overall, the website is professional and content-rich, but the discrepancy in WHOIS data suggests a need for further verification of domain registration. Strategic recommendations include enhancing security headers, publishing incident response policies, and clarifying domain registration details to improve trust and compliance.

D

Dragonfly Aerospace

dragonflyaerospace.com

70

Dragonfly Aerospace is a South African-based technology company specializing in the design and manufacture of high-performance satellite imagers, payloads, and satellite buses for CubeSats, small satellites, and microsatellites. Positioned as a leader in the commercial aerospace sector, the company offers turnkey satellite solutions that minimize time, cost, and risk for Earth observation missions. Their flagship product, EOSSAT-1, exemplifies their capability in delivering advanced imaging technology for sustainable agriculture and forest monitoring. The company maintains a strong market presence supported by memberships in reputable aerospace organizations and a consistent stream of news and partnerships.

A

Aernnova

aernnova.com

73

Aernnova is a leading aerospace company specializing in the design and manufacturing of aero structures such as wings, stabilizers, and fuselages using metal and composite materials. The company targets aerospace OEMs and partners, positioning itself as a key player in the aerospace manufacturing sector. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on Webflow with modern web technologies, includes cookie consent mechanisms, and uses Google Tag Manager for analytics. Security posture is strong with HTTPS and privacy compliance, though some security headers and explicit contact/security policies are missing. The WHOIS data is not available, which raises some concerns about domain registration transparency but does not detract from the professional presentation of the website. Overall, the site is well-structured, compliant, and trustworthy from a business and technical perspective.

T

Tirol Werbung

visittirol.nl

57

The website www.visittirol.nl serves as the official Dutch-language travel guide for Tirol, Austria, operated by Tirol Werbung GmbH. It provides comprehensive information on outdoor activities, cultural events, accommodations, and travel logistics, targeting tourists interested in visiting the Tirol region. The site is well-branded, professionally designed, and offers multilingual support through links to partner sites in German, English, Italian, French, Czech, and Polish. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates GDPR-compliant cookie consent via Usercentrics. Security measures include HTTPS enforcement and CAPTCHA protection on forms, though explicit security headers are not visible in the provided content. Contact information is clearly presented, enhancing business credibility. Overall, the site demonstrates a mature digital presence with good SEO, accessibility, and user experience.

T

Tirol Werbung

tirolo.com

59

The website www.tirolo.com serves as the official Italian language tourism portal for the Tyrol region in Austria, operated by Tirol Werbung. It provides comprehensive information on outdoor activities, cultural events, accommodations, and travel services targeting tourists interested in visiting Tyrol. The site is well-branded, professionally designed, and offers multilingual support through linked partner sites in other languages. Technically, it is built on TYPO3 CMS with modern frontend technologies and includes GDPR-compliant privacy and cookie policies with a consent management platform. Security measures include HTTPS enforcement and CAPTCHA protection on forms, though security headers are not detected. The absence of WHOIS registration data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the site demonstrates a mature digital presence with strong content quality and user experience, suitable for its tourism promotion purpose.

T

Tirol Werbung

tyrol.com

60

The website www.tyrol.com serves as the official online travel guide for Tirol, Austria, providing comprehensive information about holidays, outdoor sports, cultural events, accommodation, and travel services in the region. It targets tourists and holidaymakers seeking to explore Tirol's natural beauty and cultural heritage. The site is professionally designed with excellent content quality and consistent branding, positioning itself as a trusted regional tourism portal. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager for analytics and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with secure HTTPS connections and CAPTCHA protections on forms. However, some security headers are not explicitly visible, and no dedicated security policy or incident response page was found. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, privacy compliance, and secure form handling. The absence of WHOIS registration data is a notable anomaly, reducing the trust score somewhat, but the overall site content and external references strongly indicate legitimacy. No vulnerabilities or suspicious content were detected. Overall, the site presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing a security policy, and clarifying WHOIS registration details to improve trust and compliance.

M

PestaQQ ⚡️ Link PKV Games #1 Terpercaya & Seru!

megateem.com

43

The website appears to be an Indonesian-focused online platform promoting PKV games, which are a form of online gambling. It positions itself as a trusted and fun link for these games but lacks transparency in business identity and compliance documentation. The technical infrastructure relies heavily on third-party marketing and analytics tools, including Google Analytics, Facebook Pixel, AppsFlyer, MoEngage, and others, indicating a strong focus on user tracking and advertising. Security posture is weak, with no DNSSEC, no visible security headers, and suspicious WHOIS data that undermines trust. Privacy and cookie policies are absent, and no contact or business legitimacy information is provided, raising compliance and credibility concerns.

T

TSC Marketing, s.r.o.

tsc-marketing.com

50

TSC Marketing, s.r.o. is a marketing and communication company serving as the centralized marketing arm for the TSC Group holding. The company focuses on brand building, managing online and offline campaigns, internal communications, public relations, HR marketing, and event management. It supports the entire TSC Group, which is a leading provider of cleaning and technical services in the Czech Republic. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site uses modern web technologies including Google Tag Manager and Nette Framework for form validation, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and reCaptcha protection on forms, but lacks explicit security headers and published security policies. WHOIS data is missing or unavailable, which raises some trust concerns despite the professional appearance and business legitimacy. Overall, the site is safe, business-focused, and well-structured, but could improve transparency and security documentation.

T

TSC Spectre, s.r.o.

tsc-spectre.cz

49

TSC Spectre, s.r.o. operates as the central administrative and support entity within the TSC Group holding, providing comprehensive economic, legal, personnel, administrative, and IT services to its subsidiaries. The company emphasizes quality management, ISO certification support, and ESG initiatives, positioning itself as a key enabler of operational excellence within the group. Their market presence spans multiple countries including the Czech Republic, Slovakia, Germany, Poland, and Hungary, serving a large client base with a workforce exceeding 7,000 employees. Technically, the website employs modern web technologies such as Google Tag Manager and Swiper.js, with responsive design and good SEO practices, although some security headers are missing. Security posture is solid with HTTPS and secure forms, but could be improved with additional headers and published security policies. The absence of WHOIS data is a concern for domain legitimacy, but the professional content and detailed contact information mitigate this risk. Overall, the company demonstrates a mature business model with strong compliance and quality focus.

T

TSC Clena, s.r.o.

tsc-clena.com

52

TSC Clena, s.r.o. is a Czech-based company specializing in comprehensive cleaning services, hygiene supplies, and statutory compliance services (náhradní plnění) for businesses. It operates as part of the larger TSC Group, a holding company with multiple subsidiaries offering cleaning and technical services across the Czech Republic. The company targets corporate clients, particularly those with legal obligations to employ persons with disabilities, providing both regular and one-time cleaning services. The website reflects a professional and consistent brand image aligned with the parent group, emphasizing quality and compliance.

T

TSC Services, s.r.o.

tsc-services.cz

49

TSC Services, s.r.o. is a professional cleaning service provider based in the Czech Republic, specializing in cleaning, hygienic material supply, and substitute fulfillment services related to employing persons with disabilities. As part of the larger TSC Group holding, it holds a strong market position with a large workforce and a broad client base across the country. The company emphasizes quality and sustainability, supported by multiple ISO certifications. Technically, the website is well-structured, mobile-optimized, and uses modern technologies such as Google Tag Manager and Swiper.js. Security posture is solid with HTTPS and secure forms, though improvements in security headers and explicit privacy/security policies are recommended. Overall, the website is professional, trustworthy, and business-focused with comprehensive contact options and clear branding.

T

TechClean, s.r.o.

tech-clean.cz

49

TechClean, s.r.o. is a specialized industrial cleaning company based in the Czech Republic, offering advanced cleaning technologies such as laser cleaning, dry ice, steam, and drone cleaning. As part of the TSC Group, the largest cleaning and technical services holding in the Czech Republic, TechClean benefits from a strong market position and a broad service portfolio including outdoor maintenance and technical consulting. The website is professionally designed, mobile-optimized, and provides clear contact information and service descriptions. Technically, the site uses modern JavaScript libraries and frameworks, including Google Tag Manager and Nette Framework for form validation, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and reCaptcha on forms, but lacks visible advanced security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, limiting domain trust verification, but the business legitimacy is supported by its association with TSC Group. Overall, the site is trustworthy and professional but could improve security and privacy transparency.

T

TSC Jet, a.s.

tsc-jet.com

51

TSC Jet, a.s. is a Czech-based company specializing in comprehensive technological cleaning and paint stripping services primarily for industrial clients such as automotive manufacturers and paint shops. It operates as part of the larger TSC Group holding, which encompasses multiple subsidiaries offering cleaning, facility management, and related services. The company emphasizes modern technologies including robotic and manual high-pressure water jet stripping, chemical, thermal, and laser cleaning methods. The website reflects a professional and consistent brand image with clear service descriptions and multiple contact points. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and includes a GDPR-compliant privacy and cookie policy. Security posture is moderate with HTTPS enabled and use of reCaptcha on contact forms, but lacks explicit security headers and incident response information. WHOIS data is missing, which raises concerns about domain registration legitimacy, though the website content and group affiliation support business credibility. Overall, the site is well-structured, safe, and serves its target industrial audience effectively.

T

TSC Facility, s.r.o.

tsc-facility.com

51

TSC Facility, s.r.o. is a Czech-based company specializing in integrated facility management, technical building management, and maintenance services. It operates as part of the larger TSC Group, which is the largest holding in its sector in the Czech Republic. The company offers a comprehensive range of services including facility management, technical inspections, maintenance, and consulting, targeting businesses that require professional upkeep of their commercial, administrative, or production facilities. The website is professionally designed, multilingual, and provides clear contact channels including a GDPR-compliant contact form. From a technical perspective, the website employs modern web technologies such as Google Tag Manager for analytics, Swiper.js for interactive carousels, and the Nette framework for form validation. The site is mobile-optimized and demonstrates good SEO practices. However, some security best practices like explicit security headers are not evident, and the SSL configuration details are not provided. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit incident response or security policy disclosures. The site includes GDPR compliance elements such as a privacy policy and consent checkbox on forms but lacks a cookie consent mechanism. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional appearance and business consistency. Overall, the website is a credible and professional business platform with room for improvement in security transparency and domain registration verification. Strategic recommendations include enhancing security headers, verifying SSL configuration, adding explicit cookie consent, and resolving WHOIS data inconsistencies.

T

TSC GROUP, a.s.

tsc-cleaning.sk

47

TSC GROUP, a.s. is a holding company operating in Slovakia and the Czech Republic, specializing in facility management, cleaning, security, laundry, and technical cleaning services. The company holds a strong market position as the largest group in its sector in the Czech Republic and maintains a significant presence in Slovakia. Their service portfolio covers industrial, healthcare, commercial, and public sectors, leveraging modern technologies and extensive experience. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on its contact form to mitigate spam. Cookie consent mechanisms are implemented with granular controls, and privacy policies are comprehensive and GDPR compliant. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. The risk profile is low, with recommendations focusing on improving security headers, publishing security policies, and enhancing accessibility compliance to further strengthen the security posture and user trust.

T

TSC Cleaning, a.s.

tsc-cleaning.cz

49

TSC Cleaning, a.s. is a leading Czech company specializing in comprehensive cleaning services for administrative, industrial, healthcare, and specialized environments. As part of the TSC Group holding, it benefits from a broad network of subsidiaries and a strong market position as the largest provider in its sector in the Czech Republic. The company emphasizes quality, sustainability, and technological innovation in its service offerings. Technically, the website employs modern JavaScript libraries such as Swiper.js and Google Tag Manager, with asynchronous script loading to optimize performance. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and includes form validation with reCaptcha, but lacks some security headers and explicit security policies. The absence of WHOIS data for the domain reduces trust somewhat, but the professional presentation and group affiliation mitigate concerns. Overall, the site is secure, compliant with GDPR through cookie policies, and provides comprehensive contact information.

A

Annual Reviews

katinamagazine.org

55

Katina Magazine is a specialized digital publication focused on elevating the role of librarians and promoting open knowledge. Published by Annual Reviews, a reputable nonprofit publisher, it serves a niche audience of library professionals and academics. The website offers topical articles, resource reviews, and a newsletter subscription to engage its community. Technically, the site uses a modern but somewhat dated tech stack including jQuery and MathJax, hosted behind Cloudflare DNS with a Tucows registrar. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are minimal. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. However, no terms of service or security incident response policies are published. Overall, the site is professional, trustworthy, and safe for general audiences.