Security Directory

Mercedes-Benz Polska Sp. z o.o. operates the official Mercedes-Benz website for Poland, offering a comprehensive range of luxury passenger vehicles, connectivity services, financial products including leasing and loans, and insurance solutions. The company is a subsidiary of the global Mercedes-Benz Group AG, maintaining a strong market position in the premium automotive sector. The website targets both individual consumers and business clients interested in Mercedes-Benz products and services within Poland. The business model integrates vehicle sales with digital connectivity and financial services, enhancing customer engagement and retention. Technically, the website leverages modern web technologies including Vue.js, Google Tag Manager, and Datadog Real User Monitoring, indicating a mature digital infrastructure focused on performance and user experience. The use of Adobe Experience Manager as the CMS suggests enterprise-grade content management capabilities. The site is well-optimized for mobile devices, includes comprehensive SEO metadata, and employs advanced analytics and user tracking tools to monitor and improve service delivery. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements key security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is robust, with detailed GDPR-aligned privacy policies, cookie consent mechanisms, and clear data protection officer contact information. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly visible security policy or vulnerability disclosure program suggests room for improvement in transparency and incident response readiness. Overall, the website presents a professional, trustworthy, and secure digital presence consistent with the brand's global standards. The lack of WHOIS data is mitigated by strong on-site legitimacy indicators. Strategic recommendations include enhancing security transparency, maintaining rigorous third-party script audits, and implementing a formal vulnerability disclosure channel to further strengthen trust and compliance.

Mercedes-Benz Hungária Kft. operates the official Hungarian website for Mercedes-Benz passenger cars, providing comprehensive information on vehicle models, services, financing options, and digital extras. The company is a subsidiary of Mercedes-Benz AG, a globally recognized premium automotive manufacturer. The website targets Hungarian consumers interested in luxury vehicles and related services. Technically, the site employs modern web technologies including Vue.js and Adobe Experience Manager, ensuring a fast, responsive, and professional user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Privacy compliance is robust, with detailed GDPR-aligned privacy policies and data protection officer contact information. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity.

Mercedes-Benz Denmark operates an official, comprehensive website targeting Danish consumers interested in premium passenger cars, including electric and hybrid models. The site offers detailed product information, online configurators, and service booking functionalities, positioning the brand as a leader in the Danish automotive market. The technical infrastructure leverages modern web technologies such as Vue.js and Adobe Experience Manager, ensuring a performant and responsive user experience. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although explicit security headers could be better documented. Privacy compliance is robust, with a detailed GDPR-compliant privacy policy and clear data protection officer contact information. Overall, the website reflects a mature digital presence aligned with Mercedes-Benz's global standards.

Mercedes-Benz Belgium Luxembourg NV operates the official Mercedes-Benz website for Belgium, providing comprehensive information on passenger cars, commercial vehicles, services, financing, and digital offerings. The company is a subsidiary of Daimler AG (now Mercedes-Benz Group AG), a global leader in premium automotive manufacturing. The website targets Belgian consumers and corporate clients interested in Mercedes-Benz vehicles and related services. The site is well-branded, professionally designed, and offers extensive navigation and content relevant to its audience. Technically, the website leverages modern web technologies including Vue.js, Adobe Experience Manager CMS, and integrates advanced analytics and monitoring tools such as Google Tag Manager and Datadog RUM. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the website uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is restricted due to .be domain policies, but the domain and website content strongly indicate legitimacy and corporate authenticity. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance with privacy regulations, making it a trustworthy digital presence for Mercedes-Benz in Belgium.

Mercedes-Benz România S.R.L. operates the official Mercedes-Benz brand website for Romania, offering a comprehensive digital platform for vehicle sales, financing, leasing, insurance, and after-sales services. The website targets Romanian consumers interested in premium passenger cars, including electric and hybrid models, providing tools for vehicle configuration, test-drive scheduling, and service appointments. The company is a subsidiary of the global Mercedes-Benz AG group, reflecting a strong market position in the automotive transportation sector. Technically, the website leverages modern web technologies such as Vue.js and integrates advanced analytics and monitoring tools like Google Tag Manager and Datadog RUM. The platform appears to be built on Adobe Experience Manager (AEM), ensuring robust content management and scalability. Performance and mobile optimization are good, though accessibility compliance is basic with room for improvement. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and uses modern JavaScript frameworks, contributing to a solid security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is comprehensive, with detailed GDPR-aligned policies, a named Data Protection Officer, and transparent data handling practices. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, supporting Mercedes-Benz's brand integrity in Romania. Strategic recommendations include enhancing accessibility standards, verifying security headers explicitly, and maintaining regular security audits to uphold the strong security posture.

Mercedes-Benz New Zealand Limited operates the official Mercedes-Benz passenger car website for New Zealand, offering a comprehensive range of luxury vehicles including electric and hybrid models. The company is positioned as a premium automotive brand with a strong market presence supported by authorized dealerships and financial services. The website reflects a mature digital infrastructure leveraging modern technologies such as Vue.js, Adobe Experience Manager, and advanced analytics tools including Google Analytics 360 and Datadog RUM. Security posture is robust with HTTPS enforcement, comprehensive security headers, and privacy compliance aligned with GDPR and New Zealand Privacy Act standards. The absence of WHOIS data for the domain suggests it is a subdomain or alias under a broader Mercedes-Benz domain strategy, but the website content and branding strongly affirm legitimacy. Overall, the site provides a professional, secure, and user-friendly experience tailored to New Zealand consumers interested in luxury vehicles.

Mercedes-Benz Australia/Pacific Pty Ltd operates the official Mercedes-Benz website for Australia, offering a comprehensive range of luxury passenger vehicles including electric and hybrid models. The company is a subsidiary of the global Mercedes-Benz Group and provides automotive sales, financial services, and insurance solutions tailored to the Australian market. The website is professionally designed with clear navigation, extensive product information, and strong branding consistency, targeting Australian consumers interested in premium vehicles. Technically, the website leverages modern web technologies including Vue.js, Adobe Experience Manager CMS, and integrates advanced monitoring tools like Datadog RUM. The site is optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security practices include HTTPS enforcement, cookie consent mechanisms, and use of reputable analytics and marketing platforms. From a security and compliance perspective, the site demonstrates strong adherence to privacy regulations including GDPR and the Australian Privacy Act. Comprehensive privacy policies, cookie policies, and terms of service are present and easily accessible. No critical vulnerabilities or suspicious activities were detected. However, explicit security headers could be further verified and incident response contact details could be more prominently disclosed. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include enhancing transparency on security headers, maintaining up-to-date vulnerability assessments, and improving incident response visibility to further strengthen security posture and user trust.

Mercedes-Benz Italia S.p.A. operates as the official Italian subsidiary of the global Mercedes-Benz AG automotive group, specializing in luxury passenger vehicles including electric and hybrid models. The website serves as a comprehensive platform for showcasing vehicle models, providing financial services information, and facilitating customer engagement in Italy. The company holds a strong market position as a leading luxury automotive brand with a broad portfolio of vehicles and services tailored to the Italian market. Technically, the website employs modern web technologies such as Vue.js and Adobe Experience Manager, ensuring a fast, mobile-optimized, and accessible user experience. The infrastructure includes advanced analytics and consent management tools, reflecting a mature digital presence. Security posture is robust with HTTPS enforcement, privacy compliance, and no visible vulnerabilities, though explicit public security policies and incident response contacts are not prominently disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, supporting Mercedes-Benz's brand integrity and customer trust in Italy.

Mercedes-Benz Nederland B.V. operates the official Dutch website for Mercedes-Benz, providing comprehensive information on their vehicle models, services, and corporate details. The company is a subsidiary of Mercedes-Benz Group AG, a globally recognized premium automotive manufacturer. The website targets consumers and business customers in the Netherlands, offering new and certified used cars, financing, insurance, and digital services. Technically, the site employs modern frameworks such as Vue.js and Adobe Experience Manager, with strong performance and mobile optimization. Security posture is robust with HTTPS, security headers, and consent management, though explicit security policy and incident response pages are absent. Privacy compliance is well addressed with detailed GDPR-aligned policies and a clear data protection officer contact. Overall, the site is professional, trustworthy, and well-maintained, reflecting the brand's premium market position.

Mercedes-Benz Česká republika s.r.o. operates the official Czech Republic website for Mercedes-Benz, a premium automotive brand known globally for luxury and performance vehicles. The website serves as a comprehensive platform for marketing, customer engagement, and service offerings including vehicle information, online booking, and financial services. The company is a subsidiary of Mercedes-Benz Group AG, reflecting a strong market position in the transportation sector. The website is professionally designed, mobile-optimized, and rich in localized content tailored for Czech consumers. Technically, the site leverages modern web technologies such as Vue.js, ES modules, and advanced analytics tools including Datadog RUM and Google Analytics 360. It is built on a robust CMS platform, likely Adobe Experience Manager, ensuring scalability and content management efficiency. Performance and SEO optimizations are evident, with proper meta tags, responsive design, and accessibility considerations. From a security perspective, the site enforces HTTPS and employs best practices including secure cookie consent mechanisms and likely security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with detailed GDPR-aligned policies, cookie management, and clear data protection officer contact information. However, the absence of WHOIS data introduces some uncertainty about domain registration transparency. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include enhancing explicit security header disclosures, continuous third-party script audits, and maintaining up-to-date compliance with evolving data protection regulations.

Mercedes-Benz España, S.A.U. operates the official Spanish website for Mercedes-Benz, a leading luxury automotive brand. The company offers a wide range of vehicles including sedans, SUVs, coupes, and digital services such as Mercedes me and MB.DRIVE. The website also supports after-sales services and financial products through subsidiaries like Mercedes-Benz Bank AG. The brand holds a strong market position in Spain and globally, targeting general consumers interested in premium vehicles and related services. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy information in compliance with GDPR.

M

Mercedes-Benz Canada

mercedes-benz.ca

73

Mercedes-Benz Canada operates a comprehensive and professionally designed website focused on luxury automotive products including sedans, SUVs, coupes, and electric vehicles. The site targets Canadian luxury vehicle buyers and supports the brand's premium market position with extensive vehicle model information, dealer locator services, and owner support. The technical infrastructure leverages Adobe Experience Manager CMS and Adobe Experience Cloud analytics, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and consent management for cookies, though explicit security policies and incident response information are not publicly detailed. Overall, the website reflects a high level of professionalism and trustworthiness consistent with a global luxury automotive brand.

Mercedes-Benz México operates as a premium automotive brand offering luxury passenger vehicles, financing, and after-sales services tailored to the Mexican market. The website reflects a strong market position with comprehensive product information, financing plans, and customer support channels. The digital infrastructure leverages modern technologies such as Vue.js and integrates advanced analytics and consent management tools, indicating a mature digital presence. Security posture is robust with HTTPS enforcement, security headers, and privacy policies aligned with local regulations. No critical vulnerabilities or blocking mechanisms were detected, supporting a trustworthy user experience. Overall, the site demonstrates professionalism, compliance, and strong brand consistency.

A

AH Lasereinsatztechnik GmbH

ah-laser.de

57

AH Lasereinsatztechnik GmbH is a German manufacturing company specializing in advanced laser processing technologies including 2D and 3D laser cutting, water jet cutting, CNC bending, and welding. Founded in 1991, the company operates from Hardthausen am Kocher and serves industrial clients requiring precision manufacturing and integrated logistics. The website reflects a mature business with a broad service portfolio and a strong partner network. Technically, the site is built on the Neos CMS platform using modern JavaScript libraries and frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Z

Zeppelin Konzern

zeppelin.com

71

Zeppelin Konzern is a large German enterprise specializing in providing innovative solutions across construction, industry, plant engineering, and energy sectors. The company operates globally with over 200 locations, emphasizing sustainability and corporate social responsibility. Their business model focuses on B2B services including machinery, rental, power systems, and engineering solutions. The website reflects a mature digital presence with professional design and comprehensive content tailored to industrial clients and partners. Technically, the website leverages modern frameworks such as Next.js and React, supported by CDN hosting and enhanced with Google Tag Manager and OneTrust for privacy compliance. The site is mobile-optimized, fast-loading, and accessible, indicating a high level of digital maturity. Security best practices are observed with HTTPS enforcement and security headers, although no public vulnerability disclosure or incident response information is provided. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well implemented with clear cookie consent mechanisms and GDPR-aligned privacy policies. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the website content and branding strongly support the authenticity of the business. Overall, Zeppelin Konzern presents a professional, trustworthy, and secure online presence suitable for its enterprise audience. Strategic recommendations include publishing a vulnerability disclosure policy, incident response contacts, and continuing regular security audits to maintain and enhance trust.

T

TECH.LAND

techland.org

56

TECH.LAND is a well-established Dutch-German innovation collaboration platform focused on boosting technology and innovation in the East Netherlands and North Westphalia regions. The website presents a professional and comprehensive digital presence with clear cluster focus areas including Advanced Manufacturing & Robotics, Energy, Health & MedTech, and Circular Economy. The business model centers on ecosystem collaboration, project coordination, and knowledge sharing to enhance regional competitiveness. TECH.LAND maintains a strong market position as a regional innovation hub with a medium-sized footprint and a founding date consistent with the domain age.

M

muensterLAND.digital e.V.

muensterhack.de

45

MÜNSTERHACK is a well-established civic technology hackathon based in Münster, Germany, focused on bringing together professionals, students, and civic activists to collaboratively develop ideas and prototypes that enhance the livability of the city and region. Supported by local government, businesses, and community organizations, it has a strong market position as a key event in the regional tech and civic engagement ecosystem. The website reflects a professional and community-driven business model emphasizing open data and sustainable urban development solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, and Matomo analytics, hosted on Alfahosting infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in security headers and cookie consent mechanisms are recommended. The use of Matomo indicates a privacy-conscious approach to user tracking. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, the absence of explicit security headers and cookie consent mechanisms suggests room for improvement in compliance and security posture. No incident response or vulnerability disclosure information is provided, which could be enhanced to build trust. Overall, the website is trustworthy, professionally maintained, and serves its community well. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and adding incident response contacts to improve compliance and security maturity.

M

Mittelstand-Digital Zentrum Lingen.Münster.Osnabrück

digitalzentrum-lmo.de

51

Mittelstand-Digital Zentrum Lingen.Münster.Osnabrück is a regional digital transformation support center focused on assisting small and medium-sized enterprises (SMEs) in the Lingen, Münster, and Osnabrück regions of Germany. The organization offers cost-free, practical, and needs-based services including events, training, practical projects, and self-learning opportunities to help SMEs adopt digital technologies and innovate their business models. The website is built on WordPress with modern plugins such as Elementor and Yoast SEO, indicating a mature digital infrastructure. The site is well-structured, mobile-optimized, and regularly updated with relevant content and events. Security posture is adequate with HTTPS enabled and cookie consent managed via Borlabs Cookie, though some security headers and explicit policies are missing. Overall, the domain registration data aligns with the website content, supporting legitimacy. No critical security or privacy issues were detected, but improvements in policy transparency and security headers are recommended.

The website panocloud.photo presents a ride photography service aimed at monetizing rides, likely targeting transportation businesses or professionals. The site is built on WordPress using the Divi theme and includes a cookie consent mechanism, indicating some attention to privacy compliance. However, critical business contact information such as emails, phone numbers, and physical addresses are absent, and no privacy policy or terms of service pages were found. The technical infrastructure is moderate with standard WordPress plugins and libraries but lacks advanced security headers and DNSSEC. The domain WHOIS data is privacy protected but shows an anomalous creation date in the future, which raises concerns about data accuracy or legitimacy. Overall, the site demonstrates basic digital maturity but requires improvements in transparency, security, and compliance to enhance trustworthiness.

W

WMS WebMediaSolutions GmbH

it-wms.com

53

WMS WebMediaSolutions GmbH operates a professional website offering specialized panoramic and livestream camera solutions for sectors including tourism, construction, industry, and meteorology. The company emphasizes robust outdoor systems with in-house software development, enabling customized and flexible solutions. Their market position is that of a niche technology provider with a focus on B2B clients requiring advanced camera and livestreaming technologies. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Matomo, and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and includes a comprehensive cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses bot management and reCAPTCHA services. However, it lacks explicit security headers and documented incident response policies. No critical vulnerabilities were detected in the visible content or scripts. Privacy compliance is strong with clear policies and consent management. A notable risk is the absence of WHOIS registration data for the domain, which is inconsistent with the active and professional nature of the website. This discrepancy lowers the overall trust score and suggests further verification is needed. Overall, the website is well-constructed, secure, and compliant, but domain registration transparency should be addressed.

V

Verkehrsverbund Steiermark GmbH

verbundlinie.at

59

Verbundlinie.at is the official website of Verkehrsverbund Steiermark GmbH, a regional public transportation authority in Austria's Steiermark region. The site provides comprehensive information on public transport services, including schedules, ticketing, tariffs, and customer service. It targets residents and visitors who use buses, trains, and trams in the region, offering tools like an online route planner and real-time updates. The business operates as a medium-sized essential entity within the transportation sector, maintaining a strong regional presence and digital engagement through social media channels.

Murinsel Graz operates as a hospitality and cultural event venue located in Graz, Austria, offering café services and hosting various events such as music festivals and parties. The website is professionally designed using WordPress with a focus on local visitors and tourists interested in cultural experiences. The site features an event calendar, social media integration, and a cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website presents a trustworthy and professional image consistent with a small hospitality business.

Holding Graz is the largest municipal service provider in southern Austria, delivering essential services daily to the citizens and businesses of Graz and its surroundings. The organization operates multiple subsidiaries across sectors such as energy, transportation, and public utilities, positioning itself as a key player in the regional public service market. The website reflects a mature digital presence with comprehensive information, clear navigation, and multilingual support, targeting local residents and stakeholders. Technically, the site is built on WordPress with modern JavaScript frameworks and analytics tools, ensuring good performance and user experience across devices. Security measures include HTTPS enforcement and a robust Content Security Policy, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. Overall, Holding Graz presents a professional, trustworthy, and well-maintained online presence consistent with its public service mandate.

G

Graz Museum

grazmuseum.at

44

The Graz Museum website serves as the official cultural and historical museum platform for the city of Graz, Austria. It provides comprehensive information about exhibitions, events, educational workshops, and archival services, targeting a broad audience interested in culture, history, and urban development. The museum operates as a public institution, likely funded by the city, and positions itself as a key cultural hub in the region. The website content is rich, professionally designed, and multilingual, enhancing accessibility and user engagement. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support. It employs a moderate performance profile with good mobile optimization and accessibility features. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. Security best practices are observed, including HTTPS enforcement and security headers, although formal security policies and incident response information are not publicly available. Overall, the security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. The domain registration details align well with the museum's identity, reinforcing trust and legitimacy. Strategic recommendations include publishing explicit security and incident response policies and adding a vulnerability disclosure mechanism to enhance transparency and preparedness. This website represents a mature digital presence for a government cultural institution, balancing user experience, privacy, and security effectively while maintaining high content quality and professional standards.

F

Filmcommission Graz

filmcommissiongraz.at

46

Filmcommission Graz operates as the central service and funding agency for film productions in Graz, Austria, supporting both cinema and television projects. The organization offers financial support, a location (Motiv) database, a local industry (Branchen) database, and assistance with filming permits and logistics. The website is professionally designed using WordPress with modern plugins and SEO optimization, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site reflects a trustworthy and credible business entity with a clear focus on serving the film production community in Graz.

G

Graz Tourismus

graztourismus.at

72

Graz Tourismus operates as the official tourism board for the city of Graz, Austria, providing comprehensive information and booking services for accommodation, sightseeing, and events. The website targets tourists and visitors interested in exploring Graz, positioning itself as a trusted source for travel planning in the region. The business model focuses on tourism promotion and visitor engagement, leveraging digital channels to enhance the city's attractiveness. Technically, the website employs modern web technologies including Bootstrap 5 for responsive design, Google Tag Manager for analytics, and Cookiebot for GDPR-compliant cookie management. The presence of Pimcore personalization scripts suggests a mature digital infrastructure aimed at delivering tailored user experiences. The site demonstrates good performance, mobile optimization, and accessibility standards. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Cookie consent mechanisms are in place, and privacy policies are comprehensive and GDPR compliant. However, there is no explicit security policy or incident response contact published, which could be improved to enhance transparency and readiness. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. The risk profile is low, with no detected vulnerabilities or suspicious activities. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and considering a security.txt file to facilitate vulnerability disclosures.

The website brandfresh.it presents an extremely minimal online presence with only a single text string 'BRÄND.FRESH' and no additional content, metadata, or interactive elements. The domain is registered since 2020 and is currently active with DNSSEC enabled, indicating legitimate domain management. However, the lack of content and absence of business information severely limit the ability to assess the company's market position or services. Technically, the site lacks modern web technologies, metadata, and security headers, which impacts its digital maturity and user experience negatively. Security posture is basic with SSL enabled but no advanced security measures detected. Privacy and compliance policies are absent, which is a significant gap for GDPR and other regulatory requirements. Overall, the site appears to be either under development or abandoned, with minimal risk but also minimal trust and credibility.

B

BRÄND.FRESH

brandfresh.net

51

BRÄND.FRESH is a small, regionally focused graphic and web agency based in Lana, Südtirol, Italy, founded in 2019. The company offers a comprehensive suite of creative and digital services including logo design, print design, web design, web development, CMS solutions, domain and email services, SEO, and web hosting. Their market position is that of a competent and creative local agency serving small to medium businesses and individual entrepreneurs. The website reflects a professional and consistent brand image with a well-structured portfolio showcasing client projects. Technically, the site employs modern JavaScript libraries such as jQuery and Flickity, integrates Google Analytics with a GDPR-compliant cookie consent mechanism via Klaro, and uses a proprietary CMS named Fresh.CMS. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS and DNSSEC enabled, but could be improved by adding security headers and incident response information. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations.

PSC Public Software & Consulting GmbH is a specialized IT company providing software and e-government solutions tailored for public administration and municipalities in Austria. Their flagship product, k5 Kommunalmanagement, is a market-leading software suite for municipal management, complemented by a range of services including IT infrastructure, consulting, and citizen communication platforms. The company positions itself as a trusted partner for Austrian local governments, combining regional expertise with innovative technology solutions. Technically, the website is built on ASP.NET WebForms with legacy jQuery libraries and includes accessibility features and a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some improvements in security headers and library updates are recommended. Overall, the website reflects a professional and credible business with a strong focus on public sector digital transformation.

Gemdat OÖ is a well-established IT service provider specializing in software and solutions for municipalities and public sector organizations in Upper Austria. With over 40 years of experience, the company holds a leading market position regionally, offering a broad portfolio including financial management, document management, personnel accounting, and IT security services. The website reflects a mature digital presence with modern technologies and a clear focus on customer needs. Security posture is strong, with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities. Privacy compliance is well addressed, including GDPR-aligned policies and consent banners. Overall, Gemdat OÖ presents a trustworthy and professional image suitable for its target audience.

O

OBI Hungary Kft.

obi.hu

66

OBI Hungary Kft. operates a comprehensive retail and e-commerce platform focused on home improvement, gardening, and construction products in Hungary. The website www.obi.hu serves as a digital storefront offering over 80,000 products, supported by in-store services such as tool rental and design studios. The company is part of the larger OBI Group, a well-established European retail chain. The site targets homeowners, DIY enthusiasts, and professionals seeking quality products and services for home and garden projects. Technically, the website employs modern frameworks such as Vue.js and integrates advanced analytics and marketing tools including Google Tag Manager, Hotjar, and Instana, ensuring a fast, mobile-optimized, and accessible user experience. Privacy compliance is robust, with clear cookie consent mechanisms and comprehensive privacy policies in Hungarian language, reflecting GDPR adherence. Security posture is strong, with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the site demonstrates a mature digital presence with professional design, clear navigation, and trustworthy business information.

O

OBI Česká republika

obi.cz

67

OBI Česká republika operates as a leading home improvement retailer in the Czech market, offering a wide range of products and services including online shopping, in-store purchases, wood cutting, and tool rental. The company targets consumers and DIY enthusiasts, leveraging a strong brand presence and a comprehensive e-commerce platform. The website demonstrates a mature digital infrastructure with modern technologies such as Vue.js, Google Tag Manager, and Hotjar, ensuring a fast, mobile-optimized, and accessible user experience. Security measures are robust, with HTTPS enforced and multiple security headers implemented, although no public incident response or vulnerability disclosure policies were found. Overall, the website reflects a professional and trustworthy retail operation with good privacy compliance and user engagement.

O

OBI

obi.sk

66

OBI Slovensko operates as a major retail brand specializing in home improvement, garden, construction, kitchen, and bathroom products and services. The website targets general consumers in Slovakia, offering both online shopping and in-store services such as wood cutting and tool rental. The company maintains a strong market position as a leading home improvement retailer in the region. Technically, the website leverages modern frameworks like Vue.js, integrates multiple analytics and marketing tools, and uses performance optimizations such as Baqend SpeedKit and Imgix CDN for images. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit privacy and cookie policies are not found in the provided content. Overall, the site is professional, well-branded, and trustworthy, but could improve transparency on privacy and incident response.

Д

Държавна агенция за закрила на детето

116111.bg

46

The website www.116111.bg is the official online presence of the National Telephone Line for Children 116 111, operated by the State Agency for Child Protection in Bulgaria. It provides free, anonymous, and 24/7 telephone and online chat support services aimed at children, parents, and professionals working with children. The site serves as a government non-profit service focused on child welfare and protection, with a clear mission and target audience. The content is primarily in Bulgarian with multilingual support, and the site includes news, stories, and resources relevant to child protection.

М

Министерство на външните работи на Република България

mfa.bg

64

The website mfa.bg is the official online presence of the Ministry of Foreign Affairs of the Republic of Bulgaria. It serves as a comprehensive portal for information related to Bulgaria's foreign policy, diplomatic missions, consular services, travel advisories, and governmental documentation. The site targets Bulgarian citizens, foreign diplomats, international partners, and the general public interested in Bulgaria's international relations. As a government entity, it operates under a public service model, providing authoritative and official content without commercial intent. Technically, the website employs a traditional web stack including jQuery, Bootstrap, and polyfills for legacy browser support. The site is mobile-optimized and accessible, with a moderate performance profile. SEO optimization is basic but functional, and the site structure supports clear navigation and content discoverability. From a security perspective, the site enforces HTTPS and implements several key security headers, reflecting a good security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit security or incident response policies indicates room for improvement in privacy compliance and transparency. Overall, the website is trustworthy, professionally maintained, and aligned with the expectations for a government ministry site. Strategic recommendations include implementing cookie consent to meet EU regulations, publishing security policies and incident response contacts, and enhancing SEO metadata for better visibility.

И

Информационно обслужване АД

evroto.bg

63

The website evroto.bg serves as the official Bulgarian government portal dedicated to informing citizens and businesses about the adoption of the euro currency in Bulgaria. It provides comprehensive news, events, educational materials, and multimedia content to support the transition process. The site targets a broad audience including citizens, businesses, and stakeholders interested in the eurozone integration. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Video.js for video playback, and Matomo for analytics, hosted behind Cloudflare DNS services. Accessibility features are well implemented, enhancing usability for diverse users. Security-wise, while HTTPS is presumably enabled, the site lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is privacy protected in compliance with GDPR, which is appropriate for this type of government-related domain. Overall, the site is professional, trustworthy, and serves its informational purpose effectively, though it would benefit from enhanced security and privacy disclosures.

М

Министерски съвет на Република България

gov.bg

55

The website gov.bg is the official portal of the Council of Ministers of the Republic of Bulgaria, serving as a comprehensive source of governmental information, news, administrative services, and anti-corruption initiatives. It targets Bulgarian citizens, institutions, media, and international partners, providing authoritative content in Bulgarian with an English language option. The site reflects the government's commitment to transparency and public communication. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and parallax effects, with a responsive design optimized for mobile devices. The presence of DNSSEC and enforced HTTPS indicates a strong foundational security posture. Cookie consent mechanisms are implemented with user customization, supporting GDPR compliance. Security-wise, the site demonstrates good practices such as HTTPS, DNSSEC, and cookie consent, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious activities were detected. The WHOIS data is privacy protected per GDPR, which is standard for government domains, and the domain is consistent with official Bulgarian government use. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure program to further strengthen security posture.

W

WeNet Group S.A.

wenet.pl

11

WeNet Group S.A. operates a professional digital marketing and technology services website targeting small and medium enterprises in Poland. The company offers a broad range of services including website creation, SEO, e-commerce solutions, Google Ads, social media management, hosting, and email marketing. The website is well-branded, consistent, and supported by strong trust indicators such as Microsoft and Google partnerships. Technically, the site is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and consent mechanisms, though some security headers could be improved. No blocking or WAF interference was detected, allowing full content access. WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the site reflects a mature digital presence with strong business credibility and compliance.

The website ecmaps.de is an interactive regional map platform developed by hubermedia GmbH, focusing on tourism and local points of interest in Germany. It provides users with interactive maps, routing options, and detailed information about various categories such as tours, gastronomy, events, and accommodations. The platform integrates recognized mapping technologies like Leaflet and Google Maps API and leverages external services such as TrustYou for ratings. The site is primarily targeted at general audiences interested in regional tourism and outdoor activities. Technically, the site uses a mix of older JavaScript libraries and custom frameworks, with moderate performance and basic mobile optimization. Security-wise, the site enforces HTTPS but lacks modern security headers and uses outdated libraries, which could pose risks. Privacy compliance is partially addressed with a privacy policy linked externally, but no cookie consent mechanism is present. Overall, the site is functional and moderately professional but could benefit from technical and security enhancements.

D

destination.one

destination.one

57

destination.one is a German-based digital platform specializing in destination management for the tourism and hospitality sectors. The platform offers an all-in-one solution for guest information, booking integration, and content management, targeting destination managers and tourism organizations. The website is built on TYPO3 CMS, indicating a mature and flexible technical infrastructure. The site is well-optimized for mobile devices and includes GDPR-compliant cookie consent mechanisms, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in incident response transparency and vulnerability disclosure. Overall, the website presents a professional and trustworthy digital presence suitable for its niche market.

I

Idego Group

idego.pl

11

Idego Group is a medium-sized technology company specializing in AI and data-driven business solutions. Founded in 2013, it serves multiple sectors including fintech, healthcare, e-commerce, and enterprise data management. The company offers consulting, software, platforms, and tailored AI solutions designed to improve operational efficiency and innovation for its clients. The website reflects a professional and consistent brand image with strong trust indicators such as client logos and testimonials. Technically, the site uses modern web technologies including Bootstrap and Cloudflare DNS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protection flags, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is supported by a comprehensive privacy policy and whistleblower policy, but lacks a cookie consent mechanism. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of blocking or WAF interference.

М

Министерски съвет Република България

government.bg

58

The website government.bg is the official online portal of the Council of Ministers of the Republic of Bulgaria, serving as a central hub for government information, news, administrative services, and anti-corruption initiatives. It targets Bulgarian citizens, government officials, media, and international partners, providing authoritative content about government structure, policies, and programs. The site is well-branded with consistent government imagery and bilingual support (Bulgarian and English). Technically, the site employs a modern but custom CMS platform with common web technologies such as jQuery, Bootstrap, and Font Awesome. It features responsive design and accessibility considerations, though some advanced accessibility features could be improved. Performance is moderate with standard optimization. Security is adequate with HTTPS enforced and cookie consent implemented, but lacks visible HTTP security headers which could enhance protection. From a security and compliance perspective, the site shows good adherence to GDPR with no personal data exposed and a clear cookie consent mechanism. WHOIS data is limited due to GDPR but domain legitimacy is supported by official Bulgarian government nameservers and domain status. No critical vulnerabilities or security incidents are evident. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is a trustworthy, professional government portal with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing detailed security and privacy policies, and continuous monitoring of third-party scripts to maintain security posture.

С

Столична община

sofia.bg

71

The website www.sofia.bg is the official portal of the Sofia Municipality, serving as a comprehensive platform for disseminating municipal information, news, events, and public services to residents and visitors. It holds a strong market position as the primary government website for Sofia, Bulgaria, and offers a wide range of services including public consultations, access to public registers, and updates on city activities. The site targets a broad audience including citizens, businesses, and tourists. Technically, the site is built on the Liferay CMS platform with React and AlloyUI frameworks, ensuring a modern and responsive user experience. The integration of Matomo analytics indicates a moderate level of user tracking with privacy compliance. Security posture is good with HTTPS enforcement and content security policies, although explicit security and incident response policies are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and consistent branding, making it a reliable source of municipal information.