Security Directory

K

Kurt Wöll Bedachungs GmbH

woell-bedachungen.de

48

Kurt Wöll Bedachungs GmbH is a small German company specializing in roofing services and photovoltaic system installations. The company positions itself as a reliable partner for new construction, renovation, and repair projects, offering expert consultation and comprehensive support throughout the project lifecycle. Their market presence is local to regional, focusing on residential and commercial clients requiring roofing and solar energy solutions. The website reflects a professional business with clear service offerings and partnerships with reputable industry suppliers. Technically, the website is built on WordPress using Elementor and common plugins such as Contact Form 7 and Complianz for GDPR compliance. Hosting is provided by a German hosting provider, ensuring good performance and regional compliance. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security practices include HTTPS enforcement and cookie consent mechanisms, though some advanced security headers and policies are not explicitly published. From a security perspective, the site maintains a good posture with encrypted connections and GDPR-compliant data collection via contact forms. However, it lacks a publicly available security policy or incident response contacts, which could be improved to enhance trust and readiness. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic improvements in security transparency and header implementation would further strengthen its security posture and user trust.

E

EBITSCHenergietechnik GmbH

ebitsch-energietechnik.de

44

EBITSCHenergietechnik GmbH is a well-established German company specializing in renewable energy solutions, particularly photovoltaic systems, battery storage, and heat pumps. Founded in 1990, it has a strong regional presence with over 45 employees and more than 5000 completed solar projects. The company holds multiple industry certifications and awards, reinforcing its market credibility. The website reflects a professional digital presence built on WordPress with modern plugins and themes, providing a good user experience and clear navigation. Security posture is solid with HTTPS and some security headers, though improvements in cookie consent and vulnerability disclosure are recommended. Overall, the site is trustworthy and aligns well with the company's business claims.

D

DATRON, a.s.

datron.cz

49

DATRON, a.s. is a Czech IT company founded in 1997, specializing in software applications and expert services aimed at automating business and municipal processes. Their offerings include municipal portals, complementary application systems (DAS), Microsoft licensing partnership, ICT infrastructure solutions, cybersecurity services, and IT education. The company targets public sector organizations and businesses seeking digital transformation and cybersecurity support. Technically, the website is built on modern frameworks such as Bootstrap and jQuery, hosted by WEDOS, and employs Google Analytics and reCAPTCHA for analytics and security. The site is mobile optimized with good design and navigation. Security posture is moderate with HTTPS enabled and reCAPTCHA usage, but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie consent banner but no visible privacy policy or terms of service. WHOIS data confirms a long-established domain consistent with the business identity, supporting legitimacy. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

S

Skupina KAREL DVOŘÁK

dvorak.cz

46

Skupina KAREL DVOŘÁK is a Czech real estate group specializing in leasing retail and commercial spaces across a diverse portfolio including shopping centers, office buildings, hotels, industrial parks, and cultural venues. The company positions itself as a reliable partner with over 20 years of experience, targeting businesses seeking quality commercial properties in strategic locations. The website is professionally designed using WordPress with modern SEO and cookie compliance tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit incident response information. The absence of WHOIS data limits domain legitimacy verification, posing a moderate risk. Overall, the site is business-focused, safe, and functional but could improve transparency and security practices.

H

Hrvatska udruga IBCLC

husd.hr

40

Hrvatska udruga IBCLC is a Croatian non-profit association dedicated to breastfeeding counseling and support. The organization provides educational resources, organizes symposia, and publishes an annual newsletter to promote breastfeeding awareness and best practices. Their website serves as an information hub for parents, healthcare professionals, and breastfeeding counselors, positioning them as a niche healthcare entity within Croatia. Technically, the website is built on WordPress using Elementor and related plugins, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks security headers and formal privacy/cookie policies, indicating room for compliance improvements. Overall, the site is trustworthy and professionally maintained, but could enhance its privacy and security frameworks to better align with GDPR and modern web standards.

Hrvatska udruga za promicanje primaljstva is a Croatian non-profit association dedicated to promoting midwifery. The organization provides educational resources, community engagement, and organizes events such as symposiums to support midwives and related healthcare professionals. The website serves as an information hub for members and the public, featuring news, educational content, and membership services. The association is well-established with a domain registered since 2013 and operates primarily within Croatia.

I

International Board of Lactation Consultant Examiners

iblce.org

64

The International Board of Lactation Consultant Examiners (IBLCE) is a globally recognized non-profit organization dedicated to advancing professional lactation consultation through credentialing. With over 38,000 certified professionals worldwide, IBLCE holds a strong market position as the standard bearer in lactation consultant certification. The website reflects a mature organization with comprehensive services including certification, recertification, educational resources, and recognition programs. The presence of multiple regional offices and clear contact information supports its global operational footprint. Technically, the website is built on WordPress and hosted on WordPress.com infrastructure, leveraging modern JavaScript libraries and plugins to enhance user experience. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate likely due to rich media content. Security posture is solid with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and implementing advanced security headers such as Content-Security-Policy. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness with no signs of malicious activity or content safety concerns. The organization’s WHOIS data aligns well with its public claims, reinforcing legitimacy. Strategic recommendations include enhancing DNS security, publishing a vulnerability disclosure policy, and improving security header implementation to further strengthen the security posture.

E

Elacta

elacta.eu

58

Elacta is a European non-profit alliance dedicated to supporting lactation consultants and promoting breastfeeding through education, conferences, and publishing a specialized journal. The organization targets healthcare professionals and advocates within Europe, providing valuable resources and networking opportunities. The website reflects a well-established entity with consistent branding and professional content, supporting its mission effectively. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good mobile responsiveness and moderate performance. Security posture is solid with HTTPS and cookie consent implemented, though some security headers and explicit incident response policies are absent. Overall, the site presents a trustworthy and credible online presence for a specialized healthcare non-profit.

E

Eesti Tervishoiutöötajate Kutseliit

kutseliit.eu

39

Eesti Tervishoiutöötajate Kutseliit (ETK) is the largest professional association representing healthcare workers in Estonia. The organization focuses on protecting members' labor and socio-economic rights, providing continuous information and training, and advocating for improved living standards and safe working environments. The website reflects a well-structured non-profit entity with a clear mission and active partnerships. Technically, the site is built on WordPress with modern plugins and uses HTTPS with Cloudflare Turnstile captcha for form security. However, explicit privacy and terms of service pages are not found, and security headers are not detected, indicating room for improvement in compliance and security posture. Overall, the site is professional, trustworthy, and serves its target audience effectively.

S

Sünnitusmajade Fond

aitaalustadaelu.ee

40

Sünnitusmajade Fond is a small Estonian non-profit organization dedicated to supporting maternity hospitals through charitable events and exhibitions. Founded in 2000, it has a focused mission to raise awareness and funds for childbirth-related causes. The website is built on WordPress and hosted by Zone Media OÜ, reflecting a moderate level of technical maturity with caching and responsive design. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but could improve in transparency and security documentation.

Z

Zone Media OÜ

perekool.ee

44

Perekool.ee is a well-established Estonian family and parenting portal operated by Zone Media OÜ since 2010. It offers a comprehensive range of articles, community forums, and resources focused on pregnancy, childbirth, and parenting. The website targets parents and expecting parents in Estonia, positioning itself as a trusted local leader in the parenting education sector. The business model revolves around content provision and community engagement, supported by advertising and partnerships. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie compliance, hosted by Zone Media OÜ. The site demonstrates good digital maturity with responsive design and structured data implementation. Security posture is solid with HTTPS enforced and anti-spam measures, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and safe for general audiences.

D

Deutscher Hebammenverband

hebammenverband-olga.de

48

The website hebammenverband-olga.de serves as an online educational platform (ILIAS LMS) for midwives affiliated with the Deutscher Hebammenverband. It provides a login portal for members to access e-learning content related to obstetrics and midwifery. The platform is supported by partner organizations such as Weleda and the Deutscher Hebammenverband itself, indicating a focused niche audience of healthcare professionals in Germany. Technically, the site uses established open-source LMS technology with common JavaScript libraries and offers basic mobile and accessibility features. However, the landing page content is minimal, primarily serving as a login gateway with instructions and support contact information. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies, which are critical for compliance and trust. No signs of blocking or WAF interference were detected, and the domain registration data aligns with the business purpose, indicating legitimacy.

D

Deutscher Hebammenverband (DHV)

hebammenforum.de

59

Hebammenforum.de is the official website of the Hebammenforum magazine, the leading professional publication for midwives in Germany affiliated with the Deutscher Hebammenverband (DHV). The site offers rich content including news, subscription options, job listings, and digital app access, targeting approximately 23,000 DHV members. The business model centers on providing specialized media content and advertising opportunities within the midwifery sector. Technically, the site is built on WordPress with modern plugins and privacy-respecting analytics (Matomo), showing a mature digital infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though explicit security policies and incident response information are not published.

N

Neišnešiotų naujagimių asociacija „Neišnešiotukas“

neisnesiotukas.lt

62

Neišnešiotų naujagimių asociacija „Neišnešiotukas“ is a Lithuanian non-profit organization dedicated to supporting premature newborns and their families. The association provides educational resources, psychological support, advocacy, and fundraising activities to improve care and awareness. The website reflects a well-structured, content-rich platform targeting parents, healthcare professionals, and supporters. It maintains a strong social media presence and transparent contact information, enhancing community engagement and trust. Technically, the website is built on WordPress and hosted by Hostinger, utilizing modern web technologies including jQuery and popular plugins like Contact Form 7 and CookieYes for cookie consent management. The site integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag, all implemented with user consent mechanisms. The site demonstrates good mobile optimization and SEO practices, though some security headers could be improved. From a security perspective, the website enforces HTTPS and uses cookie consent banners compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests room for improvement in security transparency and readiness. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic enhancements in security headers and policy disclosures would further strengthen its security posture and user confidence.

Barnmorskan.se is a professionally maintained website owned and operated by Svenska Barnmorskeförbundet, the Swedish Midwives Association. It serves as a communication and information platform dedicated to midwives and those interested in midwifery, providing news, blogs, research articles, and professional portraits. The site targets healthcare professionals and stakeholders in Sweden, positioning itself as a niche media outlet within the healthcare and non-profit sectors. The business model focuses on content dissemination and professional dialogue rather than commercial transactions. Technically, the website is built on WordPress CMS with the Yoast SEO plugin, leveraging modern web technologies such as jQuery and Modernizr. Hosting and domain registration are managed by Loopia AB, a reputable Swedish registrar and hosting provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The presence of structured data and canonical tags supports search engine visibility. From a security perspective, the site uses HTTPS with a presumably strong SSL configuration, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. There is no explicit privacy or cookie policy found, which is a compliance gap under GDPR. The site uses an error reporting service (mindiusSentry) indicating some monitoring capability but lacks public incident response or vulnerability disclosure information. Overall, Barnmorskan.se is a credible and trustworthy professional association website with good content quality and technical implementation. However, it would benefit from improved privacy compliance, enhanced security headers, and clearer contact and incident response information to strengthen its security posture and regulatory adherence.

A

Agentura Život spol. s r.o.

zivot.cz

34

Agentura Život spol. s r.o. is a Czech security agency established in 1990, providing comprehensive physical security services including protection of persons, property, and event security. The company holds recognized certifications such as ISO 9001, ISO 27001, and OHSAS 18001, indicating a mature integrated management system. Their client base includes government entities and commercial organizations, positioning them as a trusted medium-sized security service provider in the Czech Republic. Technically, the website uses common web technologies like Bootstrap, jQuery, and Google Analytics, but lacks HTTPS enforcement and modern security headers, which weakens its security posture. The absence of privacy and cookie policies also indicates compliance gaps. Overall, the site is professional and content-rich but requires improvements in security and privacy compliance to align with best practices.

C

CCA Group a.s.

cca.cz

49

CCA Group a.s. is a Czech-based software development company with over 30 years of experience specializing in custom software solutions, application development, customer support, and cybersecurity services. The company serves both public sector clients, including major government institutions, and commercial enterprises. Their website reflects a professional and mature digital presence with clear service offerings and client references. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with a cookie consent mechanism implemented, indicating awareness of privacy compliance requirements. However, the absence of a visible privacy policy and WHOIS data gaps reduce transparency. Security posture is moderate with some best practices observed but lacking explicit security headers and incident response information. Overall, the company appears credible and established, but improvements in transparency and security documentation are recommended.

K

Kompostuj

kompostuj.cz

47

Kompostuj.cz is a well-established Czech non-profit organization dedicated to promoting bio-waste sorting and recycling awareness across the Czech Republic. The website reflects a medium-sized organization with a clear focus on environmental education and sustainability. The business model centers on communication and advocacy rather than commercial activities, positioning it as a trusted entity in the non-profit environmental sector. The website's content is relevant and professionally presented, targeting a general audience interested in ecological topics. Technically, the website is built on WordPress using popular themes and plugins such as Astra, Elementor, and Smart Slider 3. It employs modern web technologies including JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. Accessibility features are basic but present. From a security perspective, the site uses HTTPS with excellent SSL configuration, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given the use of tracking technologies. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

B

BTL Industries

btlnet.com

59

BTL Industries is a well-established global manufacturer of medical equipment specializing in rehabilitation, cardiology, and aesthetic medicine. The company offers a broad portfolio of clinically proven devices and maintains a strong international presence with direct offices in over 90 countries. Their website reflects a professional and comprehensive digital presence, showcasing detailed product categories, educational resources, and event participation. The technical infrastructure leverages modern web technologies and integrates multiple analytics and marketing tools, ensuring good performance and user experience across devices. Security posture is generally strong with HTTPS enforcement and secure forms, though the absence of visible security headers and a published security policy indicates room for improvement. Privacy compliance is robust, featuring a comprehensive GDPR-aligned privacy and cookie policy with user consent mechanisms. However, the lack of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, which should be further investigated. Overall, BTL Industries presents a credible and professional online presence aligned with its business scope and market position.

B

BTL zdravotnická technika, a.s.

btl-shop.cz

49

BTL zdravotnická technika, a.s. operates an e-commerce platform (BTL-shop.cz) specializing in rehabilitation, physiotherapy, and medical consumables and equipment. The website targets healthcare professionals and wellness providers primarily in the Czech Republic. It offers branded products, a loyalty program, and expert advice, positioning itself as a specialized supplier in the healthcare sector. The site is built on Magento CMS and uses modern web technologies including jQuery and RequireJS, with social login integrations for user convenience. The website is well-structured, mobile-optimized, and provides clear navigation and professional content. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, no explicit security policies or incident response contacts are published, and WHOIS data is unavailable, which limits transparency. Overall, the site presents a professional and trustworthy online presence for its niche market.

B

BTL

btl-kariera.cz

57

BTL is a Czech-based company specializing in the development and manufacturing of advanced medical technologies, including devices for cardiology, physiotherapy, and aesthetic medicine. The company operates globally with over 80 branches worldwide and positions itself as a leader in physiotherapy device manufacturing. Their website focuses on career opportunities, showcasing innovation and a strong presence in the healthcare technology sector. Technically, the website uses modern web technologies such as Ruby on Rails, Google Tag Manager, and YouTube integrations, hosted on Wedos.net infrastructure. The site is well-optimized for SEO, mobile-friendly, and includes comprehensive privacy and cookie consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS enforcement and CSRF protections, although explicit security headers are not confirmed. No critical vulnerabilities or blocking mechanisms were detected, and contact information is clearly provided. Overall, the website demonstrates a professional and trustworthy online presence aligned with the company's business goals.

M

Město Klimkovice

mesto-klimkovice.cz

9

Město Klimkovice operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information about city governance, public services, events, and practical information for residents and visitors. It maintains a clear and consistent brand presence with active social media links on Facebook and YouTube. The website is built on a CMS platform, likely Ocelot, and uses modern web technologies including jQuery and Bootstrap for responsive design. Navigation is well-structured, facilitating user access to a wide range of municipal resources. From a technical perspective, the site demonstrates moderate performance and good mobile optimization. However, there is no evidence of advanced security headers or detailed privacy policies, which are important for compliance and user trust. The cookie consent banner is implemented, indicating some level of privacy compliance. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and official domain usage strongly suggest it is a legitimate municipal resource. Security posture is moderate; HTTPS is implied but no security headers were detected in the provided data. No vulnerabilities or exposed sensitive data were found, but improvements are recommended in security best practices and privacy disclosures. Overall, the website is functional and professional but would benefit from enhanced security and compliance documentation to strengthen trust and regulatory adherence.

L

Léčebné lázně Bohdaneč a.s.

llb-kariera.cz

10

Léčebné lázně Bohdaneč a.s. operates a professional career website focused on recruitment for their spa and healthcare services. The company specializes in rehabilitation and treatment of musculoskeletal conditions, with a long-standing history since 1897. The website targets job seekers interested in healthcare, hospitality, and administrative roles within the spa industry. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and includes standard privacy and cookie compliance mechanisms. Security posture is adequate with HTTPS and reCAPTCHA, but lacks some security headers and has an expired domain registration status which poses a risk. Overall, the website is professional, trustworthy, and compliant with GDPR, serving as a credible recruitment platform for the spa company.

The Multiple Sclerosis Society of India (MSSI) is a non-profit organization dedicated to supporting individuals affected by Multiple Sclerosis across India. The website serves as a comprehensive platform for awareness, advocacy, and community engagement, featuring multiple regional chapters, events, campaigns, and educational resources. The organization positions itself as a key player in the healthcare non-profit sector in India, with a focus on enhancing quality of life for MS patients. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and content management capabilities. The site is mobile-optimized and integrates social media channels effectively, although some accessibility features could be improved. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some security headers and explicit privacy and cookie policies, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy-protected, which is common for non-profits, but limits direct verification of registrant details. Overall, the website is trustworthy and professional, with strong community engagement and positive user feedback. However, it should enhance privacy compliance and security best practices to improve its risk posture and user confidence.

A

ABEM

abem.org.br

41

ABEM is a Brazilian non-profit association dedicated to supporting people affected by Multiple Sclerosis through emotional support, information, and awareness campaigns. The organization has a strong presence in Brazil with over 41 years of activity and serves more than 12,000 people directly. Their website reflects a professional and consistent brand image, targeting patients, families, and donors. Technically, the site is built on WordPress using the Astra theme and Ultimate Addons for Gutenberg, hosted by HostGator Brazil, and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks published security policies and incident response contacts. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its niche but could improve compliance and security transparency.

MS Australia is a reputable non-profit organization dedicated to accelerating research for Multiple Sclerosis in Australia. The website serves as a comprehensive resource for people affected by MS, researchers, and healthcare professionals, offering information on symptoms, treatments, clinical trials, and support services. The organization positions itself as a leading entity in the MS research community with a clear mission and vision. Technically, the website is built on WordPress using modern plugins and frameworks such as Elementor and Yoast SEO, ensuring good SEO and user experience. The site integrates analytics and tracking tools like Google Analytics and Facebook Pixel to monitor engagement and optimize outreach. Security-wise, the website enforces HTTPS, employs standard security headers, and maintains privacy and cookie policies with consent mechanisms, reflecting a mature security posture. However, it lacks a publicly available security policy or incident response information, which could enhance trust further. Overall, the domain appears legitimate despite privacy-protected WHOIS data, supported by consistent branding, professional content, and clear contact information. Strategic recommendations include publishing a security policy, incident response details, and vulnerability disclosure information to strengthen security transparency and compliance.

M

Mizuho OSI

mizuhosi.com

63

Mizuho OSI is a specialized healthcare company focused on manufacturing and supplying surgical tables and pressure management products primarily for orthopedic and spine surgeons. With over 40 years of industry presence, the company offers a range of surgical tables, positioning accessories, and related products designed to improve patient outcomes. The website reflects a mature digital presence built on WordPress with WooCommerce, incorporating modern web technologies and compliance mechanisms such as GDPR cookie consent. Security posture is solid with HTTPS and security headers, though the absence of a public security policy and incident response information suggests room for improvement. The missing WHOIS data raises concerns about domain legitimacy, warranting further verification. Overall, the website is professional, user-friendly, and compliant with privacy regulations, targeting healthcare professionals and institutions.

J

joimax GmbH

joimax.com

47

joimax GmbH operates a professional and comprehensive website focused on endoscopic minimally invasive spine surgery solutions. The company positions itself as a leader in this specialized healthcare sector, offering innovative products and extensive training programs. The website is well-structured, visually appealing, and targets both healthcare professionals and patients. Technically, the site is built on WordPress with modern plugins and frameworks, including consent management and analytics integration, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data slightly reduces trust but the overall professional presentation and consistent branding support legitimacy. Privacy compliance is strong with GDPR-aligned policies and cookie consent. Overall, the site demonstrates a solid balance of business credibility, technical implementation, and privacy awareness.

G

Globus Medical

globusmedical.com

78

Globus Medical is a leading healthcare company specializing in the development, manufacturing, and distribution of musculoskeletal device solutions. The company targets healthcare professionals, surgeons, and hospitals with a broad portfolio of implants and surgical products. Their market position is strong as an innovator in musculoskeletal solutions, supported by certifications such as ISO 13485 and a professional digital presence. Technically, the website is built on WordPress with modern plugins and SEO tools, delivering a good user experience with mobile optimization and accessibility features. The site employs standard security headers and enforces HTTPS, reflecting a mature security posture. However, the absence of a public security policy and incident response contact information suggests room for improvement in transparency and readiness. Overall, the security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data is missing, which slightly reduces trustworthiness but does not outweigh the professional presentation and business legitimacy evident on the site. Strategically, Globus Medical should enhance its security transparency by publishing incident response and vulnerability disclosure information. This will strengthen trust and align with best practices for healthcare organizations handling sensitive data.

R

Radiologická společnost ČLS JEP

crs.cz

51

Radiologická společnost ČLS JEP is a professional society serving radiology professionals in the Czech Republic, providing membership access to educational resources, events, publications, and professional networking. The website is well-structured, built on WordPress with Elementor, and includes modern plugins for user management and cookie compliance. The organization has a long-standing presence since 1998, supported by consistent WHOIS data and domain age. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. Google Analytics is used for visitor tracking with moderate user tracking levels. Overall, the site is professional, trustworthy, and targeted at healthcare professionals.

Č

Česká pediatrická společnost ČLS JEP

pediatrics.cz

54

Česká pediatrická společnost ČLS JEP is a professional pediatric society in the Czech Republic providing educational resources, events, publications, and membership services to pediatric healthcare professionals. The website serves as a portal for news, congress information, and resources for both professionals and parents. Technically, the site is built on WordPress with modern integrations such as Google reCAPTCHA and The Events Calendar plugin, ensuring a functional and moderately performant user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though additional security headers could enhance protection. The absence of WHOIS data limits full domain legitimacy verification, but the website's professional presentation and comprehensive contact information support its credibility. Overall, the site is well-structured, secure, and compliant with privacy regulations, serving its target audience effectively.

S

Sofokus

sofokus.com

65

Sofokus is a Finnish digital business design and software development agency specializing in creating modern business concepts for ambitious clients. The company positions itself as a partner in digital business development, targeting businesses seeking innovative digital transformation and software solutions. The website is professionally designed, leveraging WordPress CMS and modern web technologies such as jQuery, AOS, and Google Tag Manager, indicating a mature digital infrastructure. Analytics tools like Google Analytics and Hotjar are used for user behavior insights, complemented by a comprehensive cookie consent mechanism powered by Cookiebot, reflecting attention to privacy compliance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and lack of published security policies suggest room for improvement. The WHOIS data is notably missing or inaccessible, which raises questions about domain registration legitimacy despite the professional web presence. Overall, the website is trustworthy and well-maintained but would benefit from enhanced transparency in privacy and security policies and verification of domain registration details.

Z

Združenie Sclerosis multiplex Nádej

tatrydunaj.sk

42

The website tatrydunaj.sk represents a Slovak non-profit organization 'Združenie Sclerosis multiplex Nádej' that organizes an annual cycling event to raise awareness and support for multiple sclerosis patients. The event, now in its 12th year, is well-established and targets young adults and the general public to promote early diagnosis and solidarity. The website is professionally designed using WordPress with modern technologies such as Bootstrap and jQuery, and it integrates SEO best practices via Yoast SEO. Social media integration and multimedia content enhance engagement. Security posture is solid with HTTPS and DNSSEC enabled, and Google reCAPTCHA is used to protect forms. However, the site lacks formal privacy and cookie policies, as well as explicit security incident contacts or vulnerability disclosures, which are important for compliance and trust. Overall, the site is trustworthy and effective for its mission but could improve compliance and security transparency.

F

Foires de France

foiresdefrance.com

51

Foires de France operates as a collective brand under Unimev, promoting and organizing a network of fairs and exhibitions across France. The website provides detailed information about upcoming fairs, socio-economic impact reports, and links to partner event sites. The business targets the general public interested in regional and national fairs, positioning itself as an important player in the French exhibition sector. Technically, the site is built on WordPress with common plugins and libraries, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to improve trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance measures.

F

Fondation ManpowerGroup

fondationmanpowergroup.fr

56

Fondation ManpowerGroup is a French non-profit foundation dedicated to supporting organizations that help individuals distant from employment acquire skills for workforce integration. It operates under the aegis of ManpowerGroup France, reflecting a strong market position in social inclusion and employment support. The website is professionally designed using WordPress with modern SEO and accessibility features, indicating a mature digital presence. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full domain trust analysis, but the consistent branding and social media presence support legitimacy. Overall, the foundation demonstrates a responsible approach to privacy and compliance.

F

Fondation Entreprendre

fondation-entreprendre.org

60

Fondation Entreprendre is a French non-profit foundation recognized as a public utility, dedicated to promoting entrepreneurship as a lever for social emancipation and inclusion. The foundation supports a network of associations and philanthropic partners to foster an entrepreneurial ecosystem focused on equality of opportunity and sustainable societal impact. Key services include research and innovation programs (Le Lab), collective innovation initiatives (La Réponse Collective), and strategic development support (L'Accélérateur). The foundation maintains a strong presence in the French social entrepreneurship sector with reputable partnerships and transparent financial reporting. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses privacy-respecting analytics via Matomo. It implements cookie consent management through Tarteaucitron.js and maintains good mobile optimization and accessibility standards. The site is served over HTTPS with no detected blocking or WAF interference, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and published incident response or vulnerability disclosure policies. No exposed sensitive data or vulnerabilities were detected. WHOIS data is unavailable due to privacy protection, which is typical for non-profit organizations and does not detract from the site's legitimacy. Overall, Fondation Entreprendre presents a professional, trustworthy, and privacy-conscious online presence aligned with its mission. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

G

Guadeloupe Énergie

guadeloupe-energie.gp

57

Guadeloupe Énergie operates as the official regional energy policy platform for Guadeloupe, focusing on the energy transition towards renewable sources and energy independence. The website serves as a comprehensive resource for legislation, renewable energy data, and public initiatives aligned with the regional Multi-Year Energy Program (PPE). The target audience includes residents, policymakers, and energy stakeholders in the Caribbean region. Technically, the site is built on WordPress with modern plugins and analytics integrations, offering good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and incident response information. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

R

Recyclage & déchets

dechets-guadeloupe.fr

59

Recyclage & déchets is a small niche informational website focused on recycling, zero waste, and waste management topics primarily targeting French-speaking audiences, including Guadeloupe. The site provides blog articles and news related to environmental sustainability and waste reduction. The business model is content publishing aimed at raising awareness and educating the public on eco-friendly practices. Technically, the website is built on WordPress using Elementor and Astra theme, hosted on infrastructure consistent with its French domain registration. The site is mobile-optimized and SEO-friendly but lacks privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

C

Comité Tourisme des Iles de Guadeloupe

lesilesdeguadeloupe.com

63

The website www.lesilesdeguadeloupe.com serves as the official tourism portal for the Guadeloupe islands, operated by the Comité Tourisme des Iles de Guadeloupe. It provides comprehensive information on activities, beaches, accommodations, cultural events, and travel planning resources targeted at tourists and visitors. The site is multilingual, supporting French, English, and German, and is well-structured with rich media and SEO optimizations. Technically, it is built on WordPress with modern plugins and tracking tools, offering good mobile responsiveness and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published privacy or terms policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the site is professional and trustworthy for tourism purposes but would benefit from enhanced transparency and security documentation.

G

Guadeloupe Formation

guadeloupeformation.com

45

Guadeloupe Formation is a regional public administrative institution dedicated to professional training, orientation, and insertion services in Guadeloupe. Established in 2007, it offers a broad range of training programs targeting employees, job seekers, and the general public. The institution emphasizes pre-qualification, qualification, and support throughout the training journey. The website reflects a well-structured, professional presence with clear navigation and relevant content tailored to its audience. It maintains an active social media presence and displays recognized certifications such as Qualiopi, enhancing its credibility. Technically, the website is built on Joomla CMS using modern libraries like jQuery and Bootstrap, hosted by OVH sas. It employs HTTPS with good SSL configuration and integrates Google Analytics, Facebook SDK, and OneSignal for push notifications. Cookie consent mechanisms are implemented, though a dedicated privacy policy page is not found. The site is mobile-optimized and performs moderately well. From a security perspective, the site uses HTTPS and reCAPTCHA for forms but lacks DNSSEC and explicit security headers. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business profile, showing a long-established domain without privacy protection, indicating transparency. Overall, the security posture is adequate but could be improved with additional headers and published security policies. The overall risk is low, with no signs of malicious activity or suspicious content. Strategic recommendations include enhancing DNS security, publishing privacy and security policies, and implementing security headers to strengthen protection and compliance.

W

WEBPHORMAT Internetagentur

webphormat.de

44

WEBPHORMAT Internetagentur is a small, established internet agency based in Germany, specializing in TYPO3 CMS programming, WordPress, and Shopware online shops. With over 20 years of experience and more than 200 successful projects, the company serves businesses and advertising agencies primarily in the Saarland and Rheinland-Pfalz regions. Their service offerings include consulting, web design, development, hosting, maintenance, and SEO optimization. The website reflects a professional and consistent brand image with clear contact information and a portfolio of references. Technically, the website is built on TYPO3 CMS with Bootstrap and uses modern web technologies including FontAwesome and Google Fonts. Hosting is provided by SchlundTech, and the site employs Matomo analytics for privacy-conscious user tracking. The site is mobile optimized, accessible, and SEO friendly, with a moderate performance profile. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is good but could be improved with additional headers and documented policies. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

S

Stiftung OJA Liechtenstein

oja.li

62

Stiftung OJA Liechtenstein is a non-profit foundation operating under the mandate of 10 municipalities in Liechtenstein to provide open youth work and socio-cultural animation. The organization runs multiple youth centers and specialized programs to support youth independence and social engagement. The website reflects a well-structured, professional digital presence with clear navigation and relevant content targeting local youth and community stakeholders. Technically, the site uses modern frameworks such as Vue.js and jQuery, built on the concrete5 CMS, and integrates Matomo for analytics, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and aligns well with the organization's mission and regional focus.

F

Federal Office of Information Technology, Systems and Telecommunication FOITT

eiam.swiss

50

The website www.eiam.swiss serves as the official portal for the Swiss Federal Administration's central identity and access management system, eIAM. It provides a unified login infrastructure for federal web applications and native mobile apps, streamlining authentication processes and reducing costs. The site targets federal employees, IT specialists, application officers, integration managers, as well as citizens and business representatives via the CH-LOGIN service. The business model is a government service focused on secure, centralized identity management within the Swiss federal ecosystem. Technically, the website employs a traditional tech stack including jQuery and JavaScript, hosted likely on government infrastructure with a CMS identified as U5 CMS. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security practices include HTTPS usage and no visible vulnerabilities, though security headers and explicit privacy/cookie policies are absent. From a security standpoint, the site demonstrates a solid posture consistent with government standards but lacks some modern security headers and explicit privacy compliance disclosures. The WHOIS data is privacy protected, which is typical for Swiss government domains, and does not detract from the site's legitimacy. No signs of malicious activity or vulnerabilities were detected. Overall, the site is trustworthy, professionally maintained, and serves a critical government function. Recommendations include enhancing privacy and cookie policy transparency, implementing security headers, and improving mobile and accessibility features to align with best practices.

A

Appenzellerland Tourismus AI

appenzell.ch

51

Appenzellerland Tourismus AI operates the official tourism portal for the Appenzell region in Switzerland, providing comprehensive information on accommodations, gastronomy, events, cultural activities, and regional products. The website serves as a key resource for tourists and visitors, offering detailed event listings, booking options, and regional insights. The organization positions itself as the authoritative source for tourism in the Appenzell area, supported by consistent branding and professional content. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery, Slick Carousel, and Google Maps API. It integrates marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Sendinblue for newsletter management. The site is mobile-optimized with good SEO practices and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses security headers, and implements Google reCAPTCHA on forms to mitigate spam and abuse. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. However, there is room for improvement by adding a security.txt file and publishing incident response contacts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable platform for regional tourism promotion. Strategic recommendations include enhancing security headers, formalizing vulnerability disclosure, and improving accessibility features to further strengthen the site's security posture and user experience.

C

comperio.ch aG

trainingplus.ch

48

comperio.ch aG operates the TRAININGplus platform, a specialized course management software designed to simplify and digitize course administration for organizations. The company has a longstanding presence since 1990 and targets businesses and institutions requiring efficient course planning, participant management, and reporting. The website reflects a professional and consistent brand image with clear service offerings and contact channels. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and form protection, though it lacks some advanced security headers and formal policies. Privacy compliance is incomplete due to missing privacy and cookie policies. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

The website vzp.sk operates as a Slovak health-focused e-commerce platform and informational catalog, specializing in nutritional supplements, natural cosmetics, and health-related products. It targets the general Slovak population interested in health and wellness. The business has been established since 2007, supported by domain registration data, and maintains a consistent brand presence online. The site leverages WordPress CMS with WooCommerce for e-commerce capabilities, enhanced by Astra theme and Elementor page builder, indicating a modern and flexible technical infrastructure. Analytics and advertising are managed via Google Tag Manager, Google Analytics, and Google AdSense, reflecting standard digital marketing practices. Security posture is adequate with HTTPS enforced and some security best practices observed, though explicit security headers and formal security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages in the analyzed content. Overall, the site is professional, functional, and trustworthy but would benefit from enhanced privacy disclosures and security documentation.

V

VOIS

vois.org

10

VOIS is a German software provider specializing in modular solutions for municipal administration, focusing on integrating various specialized procedures into a unified platform. Their software targets a wide range of municipalities, from small villages to large data centers, aiming to improve citizen services and administrative efficiency. The website is professionally designed, primarily in German, and demonstrates a clear focus on government and public sector clients. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern JavaScript libraries such as jQuery and Swiper.js. It employs Matomo analytics with a cookie consent mechanism, reflecting a privacy-conscious approach. The site is mobile-optimized and shows good SEO and accessibility practices, though some security headers are missing. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. Overall, the domain WHOIS data is unavailable or privacy-protected, which is common for this business type but limits registration transparency. The website content and structure indicate a legitimate and professional operation with a moderate to good security posture. Strategic recommendations include enhancing security headers, publishing security and privacy policies, and improving contact transparency to strengthen trust and compliance.

T

Tandvårdcentralen Akut Mottagning Malmö AB

tandvardcentralen.se

64

Tandvårdcentralen Akut Mottagning Malmö AB operates a professional dental care website targeting patients in Malmö and Landskrona, Sweden. The company offers quality dental services including emergency care, positioning itself as a local trusted provider. The website is built on WordPress with Elementor, indicating a modern and maintainable technical infrastructure. It integrates common marketing and analytics tools such as Google Analytics, Google Tag Manager, and Google Ads, alongside a robust cookie consent mechanism via Cookiebot, demonstrating awareness of privacy compliance requirements. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and compliant with basic GDPR requirements, but lacks explicit privacy and terms of service pages. Strategic recommendations include enhancing security headers, publishing a privacy policy, and establishing an incident response contact to improve trust and compliance.

M

Morekontor

morekontor.se

10

Morekontor is a Swedish e-commerce retailer specializing in office furniture and related services such as delivery, assembly, and office interior design. The company has been operating online since 2004 and targets business customers primarily in Sweden. The website presents a professional and comprehensive catalog of products with clear navigation and customer service information. Technically, the site is built on ASP.NET WebForms with modern JavaScript libraries and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and InMobi advertising. Security posture is strong with HTTPS, security headers, and reCAPTCHA usage, although no explicit security or incident response policies are published. The absence of WHOIS data for the domain www.morekontor.se raises questions about domain registration legitimacy, but the website content and business information appear consistent and trustworthy. Overall, the site demonstrates good digital maturity and business credibility with room for improvement in transparency and domain registration verification.