Security Directory

J

Junip Inc.

juniphq.com

60

Junip Inc. operates a SaaS platform focused on helping ecommerce brands collect and display customer reviews to enhance product understanding and increase conversions. The company targets online retailers and boasts over 5000 customers, positioning itself as an industry leader in ecommerce review solutions. Their services include mobile-first review collection, automated requests, review display widgets, syndication to major sales channels, moderation, tagging, analytics, and multi-store management. Founded in 2020 and based in Canada, Junip demonstrates a strong market presence with integrations to platforms like Shopify and Klaviyo.

W

Wirtschaftsbetriebe Duisburg - AöR

wb-duisburg.de

62

Wirtschaftsbetriebe Duisburg - AöR is a large municipal utility and infrastructure service provider for the city of Duisburg, Germany. The organization manages a broad range of public services including waste disposal, street cleaning, wastewater management, road and bridge construction, municipal real estate, playgrounds, green spaces, and cemeteries. The website serves as a comprehensive portal for residents and businesses to access these services, including online scheduling, information, and customer portals. The site is well structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on modern frameworks such as Next.js and React, with content managed via Storyblok CMS. It integrates third-party services like Usercentrics for cookie consent management and uses legacy jQuery 1.12.4, which may pose some security risks. Performance is moderate with good SEO and accessibility features. The site uses HTTPS and has basic security best practices but lacks explicit security headers and a published security policy or incident response information. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. However, the use of an outdated jQuery version and absence of a vulnerability disclosure mechanism are areas for improvement. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website represents a trustworthy and professional municipal service portal with a solid business credibility score. Strategic recommendations include upgrading legacy libraries, publishing security policies, and enhancing security headers to further strengthen the security posture and compliance.

S

Solid Starts Inc

solidstarts.com

67

Solid Starts Inc operates a comprehensive digital platform focused on pediatric feeding and baby nutrition, offering a subscription-based app, a free First Foods® database, educational guides, and a published book. The company targets parents and caregivers seeking expert guidance on introducing solid foods to babies and toddlers. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Next.js, supported by Cloudflare DNS and CDN services. The platform integrates multiple analytics and marketing tools including Microsoft Clarity, TikTok Pixel, Facebook Pixel, and Google Tag Manager, enabling moderate user tracking with privacy compliance measures in place. Security posture is strong with HTTPS enforcement and security headers, though enabling DNSSEC would further enhance DNS security. The domain is well-established since 2014, registered through a reputable registrar with protective domain statuses, supporting the legitimacy of the business. Overall, the website is professionally designed, mobile-optimized, and provides clear navigation and rich content, fostering high trustworthiness and user engagement.

Sozialkompass.info is a German-language platform launched in 2023 that provides individuals with personalized information about social benefits they may be entitled to. The service uses a question-based approach to tailor social benefits information and offers a centralized overview of supported social benefits with relevant contact points. The website targets residents in Germany seeking guidance on social welfare programs. Technically, the site is built on a modern React and Next.js stack, hosted and DNS-managed via Cloudflare, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enforced and clientTransferProhibited domain status, but lacks DNSSEC and some security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact is primarily via email, with no phone numbers or detailed business registration info publicly available. Overall, the site is professional and trustworthy but could improve in security and compliance transparency.

S

SendOwl

sendowl.com

63

SendOwl is a mature and well-established digital commerce platform specializing in enabling businesses and individuals to sell digital products, subscriptions, memberships, and more. The platform offers a comprehensive suite of tools including payment links, storefronts, and checkout solutions, targeting a broad audience of digital sellers from solopreneurs to scale-ups. The website demonstrates strong market positioning with over $2 billion in transactions processed and a decade-long community focus. Technically, the website is built on modern frameworks such as Next.js and React, leveraging popular analytics and marketing tools like Google Analytics, Segment, and Facebook Pixel. The site is performant, mobile-optimized, and accessible, reflecting a high level of digital maturity. Hosting and CDN services appear to be provided by Cloudflare, ensuring reliability and security. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates secure payment gateways. However, there is room for improvement in cookie consent mechanisms and publishing explicit security policies or incident response contacts. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency, but the overall trustworthiness is supported by the professional website and business signals. Overall, SendOwl presents a low-risk profile with strong business credibility and technical robustness. Strategic recommendations include enhancing privacy compliance with explicit cookie consent, publishing vulnerability disclosure information, and improving transparency around incident response and data retention policies.

D

Deutsche Bahn AG

bahnhof.de

63

bahnhof.de is the official platform operated by Deutsche Bahn AG providing comprehensive information about passenger train stations across Germany. It offers live departure and arrival times, station facilities, accessibility information, and local services to travelers. The website is well-positioned as a leading national transportation information portal, serving a broad audience of train passengers and mobility users. Technically, the site leverages modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, bahnhof.de demonstrates a mature digital presence with high trustworthiness and professional content.

C

Centre national de la musique

cnmwork.fr

49

CNMwork is a professional portal operated by the Centre national de la musique (CNM) focused on providing a directory and job, internship, and service offers within the French music sector. It serves as a national platform connecting music industry professionals and job seekers, positioning itself as a key resource in the French music employment ecosystem. The website is well-branded with official logos and government affiliation, enhancing its credibility. Technically, the site is built using modern web technologies including React, Next.js, and Material-UI, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although accessibility compliance could be improved. Performance is moderate, with no blocking or WAF detected, indicating reliable availability. Security posture is solid with HTTPS enforced and secure cookie settings, but lacks explicit security headers and documented security policies or incident response information. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Overall, CNMwork presents a trustworthy and professional digital presence for the French music sector, though improvements in security headers and accessibility would enhance its posture. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its official backing.

K

Kino Star

kinostar.sk

55

Kino Star is a local cinema portal website targeting audiences in Slovak towns Zvolen and Lučenec. It provides a simple interface for users to select their preferred cinema location. The website is built using modern web technologies including React and Next.js, indicating a contemporary technical infrastructure. However, the content is minimal and primarily serves as a navigation gateway to subdomains for each cinema location. Security posture is basic with no detected security headers or privacy policies, and no contact information is provided on the main page. The site does not appear to use tracking or analytics services, which reduces privacy concerns but also limits business intelligence capabilities. Overall, the website is functional for its purpose but lacks comprehensive compliance and security features.

D

Divadlo Astorka Korzo '90

astorka.sk

57

Divadlo Astorka Korzo '90 is a Slovak theatre company offering unique theatrical productions with a rich history. The website serves as a portal for program information, ticket sales, and contact details, targeting theatre enthusiasts and the general public in Slovakia. The business operates primarily in the hospitality and cultural sector, focusing on live performances and audience engagement. Technically, the website is built on modern frameworks such as React and Next.js, with Material UI for styling, providing a responsive and user-friendly experience. However, performance is moderate and accessibility features are basic, indicating room for improvement. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response contacts, which could enhance trust and protection. Privacy compliance is addressed with visible privacy and cookie policies, though a consent mechanism is absent. Overall, the website is professional and trustworthy but could benefit from enhanced security and privacy features to align with best practices.

S

Sterio Kino

stercentury.sk

53

Sterio Kino is a regional cinema chain operating multiple locations across Slovakia, offering cinema screenings, online ticket sales, and special event programming. The website serves as a portal for customers to access cinema programs and purchase tickets online, targeting general cinema-going audiences. Technically, the site is built using modern web technologies including React and Next.js, with integrations for analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site demonstrates good mobile optimization and SEO practices but lacks some accessibility features and security headers. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and incident response transparency. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the website is professional and trustworthy, with a moderate risk profile primarily due to privacy and security policy gaps.

T

Tero Radio

teroradio.com

47

Tero Radio is a Thai-based online radio and entertainment platform offering multiple radio stations, podcasts, music charts, event promotions, and video content. The website targets a general Thai audience interested in contemporary hits, Asian music, and entertainment news. The platform is moderately mature with a domain age of approximately 3.5 years and a consistent brand presence across social media and partner subdomains. Technically, the site uses modern web technologies such as Next.js and React, with integrations for Google Tag Manager and advertising via Google DoubleClick. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and domain status protections, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is legitimate and professionally maintained but would benefit from enhanced security and privacy transparency.

M

Musée du Louvre

louvre.fr

73

The Louvre Museum's official website serves as a comprehensive digital portal for visitors, researchers, and art enthusiasts worldwide. It offers detailed information on exhibitions, events, collections, ticketing, and educational programs. The site is well-branded, professionally designed, and optimized for mobile devices, reflecting the institution's global prominence and commitment to accessibility. Technically, the site uses modern web technologies including React and Next.js, ensuring a responsive and performant user experience. Security measures such as HTTPS and robust security headers are in place, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Overall, the website demonstrates high business credibility and trustworthiness, consistent with a major government cultural institution.

A

AXA Prévention

axaprevention.fr

66

AXA Prévention is a well-established prevention platform under the AXA Group umbrella, focusing on climate risk adaptation, health, safety, and cybersecurity awareness for the French public and professionals. The website offers a broad range of free services, guides, and campaigns to educate and protect its audience. Technically, the site is built on modern web technologies including React and Next.js, with good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site reflects a mature, trustworthy, and professional digital presence aligned with AXA's corporate standards.

P

Prisme.ai

gogowego.com

61

Prisme.ai is a technology platform offering scalable AI and automation solutions primarily targeting developers and enterprises. The platform provides tools for workspace creation, app development, and API integrations, positioning itself as an innovative player in the AI platform market. The website is professionally designed using modern web technologies such as Next.js and React, indicating a mature digital infrastructure. However, some technical aspects such as security headers and explicit HTTPS enforcement are not clearly visible in the provided data, suggesting room for improvement in security posture. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are lacking. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security and contact transparency.

P

Prisme.ai

prisme.ai

61

Prisme.ai is a technology company offering a scalable AI platform designed to empower developers and enterprises with customizable AI and automation workspaces. The platform emphasizes flexibility and user control, positioning itself as an innovative player in the AI SaaS market. The website reflects a modern, professional digital presence built on contemporary web technologies such as Next.js and React, indicating a mature technical infrastructure. However, some aspects like hosting provider details and CMS usage remain undisclosed. Security posture is moderate; while HTTPS is implied, explicit security headers and policies are absent, and no contact information for incident response is provided. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent and terms of service are missing. Overall, the website is trustworthy and professional but could improve transparency and security practices to enhance user trust and compliance.

TeroAsia is a Thai media company operating a digital news and entertainment portal focused on delivering timely content related to news, sports, entertainment, and cultural programming, particularly associated with Channel 7HD. The website demonstrates a moderate level of digital maturity, leveraging modern web technologies such as Next.js and React, and integrates advertising and tracking tools like Google Tag Manager and Google Ad Manager. While the site is well-structured and mobile-optimized, it lacks critical privacy and cookie policies, which impacts its compliance posture. Security measures such as HTTPS and domain protection are in place, but additional security headers and vulnerability disclosures are absent, indicating room for improvement in security maturity. Overall, the site is legitimate and serves a broad Thai-speaking audience with relevant media content.

EDEKA is a leading German supermarket chain with a strong online presence offering weekly offers, recipes, nutrition information, and sustainability initiatives. The website reflects a mature digital infrastructure using modern technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the business's market position.

Č

Česká televize

ct24.cz

66

ČT24 is the official news portal of Česká televize, the Czech Republic's public television broadcaster. It provides trusted, up-to-date news, live broadcasts, weather updates, and podcasts primarily targeting the Czech-speaking general audience. The website is professionally designed with consistent branding and high-quality content, positioning it as a leading national news source. Technically, the site leverages modern web technologies including React and Next.js, with integrations for analytics and user tracking via Google Tag Manager and Microsoft Clarity. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with good performance and accessibility, supporting its role as a trusted media outlet.

M

MOIN Filmförderung Hamburg Schleswig-Holstein

ffhsh.de

59

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The organization targets filmmakers and producers primarily in Northern Germany, offering funding and industry support from project inception through production and distribution. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, optimized for performance and mobile devices. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

M

MOIN Filmförderung Hamburg Schleswig-Holstein

moin-filmfoerderung.de

60

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, delivering excellent performance and mobile optimization. The organization maintains a strong market position in northern Germany's media sector, providing comprehensive funding programs and industry support. Security posture is robust with HTTPS, security headers, and secure form handling, though some improvements in cookie consent and incident response transparency are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

S

SPM MEDIA a.s.

spmmedia.cz

55

SPM MEDIA a.s. is a Czech media company founded in 2023, serving as the umbrella organization for several media brands including Echo Media, HROT MEDIA a.s, Radio Prostor, and the blogging platform Blogosvět. The company targets a general Czech audience with independent news and media content. Their business model focuses on media publishing and advertising, leveraging multiple platforms and brands to reach a broad audience. The website is professionally designed using modern web technologies such as Next.js and React, with good mobile optimization and SEO practices. Security measures include HTTPS and Google reCAPTCHA for form protection, though some security headers and policies are missing. The WHOIS data is unavailable, which limits domain trust verification, but the website content and business information appear consistent and professional. Overall, the company presents itself as a credible media group with a growing presence in the Czech media market.

I

Institute of Documentary Film

kinedok.net

67

KineDok is a cultural media project operated by the Institute of Documentary Film, specializing in the distribution and screening of documentary films from Central and Eastern Europe in alternative venues such as cafes, galleries, and open-air cinemas. The project also offers online streaming and educational programs, targeting documentary enthusiasts and cultural communities across multiple European countries. The website is well designed, mobile optimized, and uses modern web technologies including React and Next.js, hosted on Websupport.cz. Privacy and cookie policies are present and GDPR compliant, with active social media engagement. Security posture is good with HTTPS and standard security headers, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is published. WHOIS data shows a stable domain registration since 2014, consistent with the project's history and legitimacy. Overall, the website demonstrates a mature digital presence with strong content quality and business credibility.

C

CleevioX

cleeviox.com

63

CleevioX is a specialized technology company focusing on blockchain and Web3 product development, AI integrations, and consulting services. Positioned as a recognized expert in the Web3 space, the company serves a global clientele including notable brands such as Animoca Brands and SatoshiLabs. Their service offerings encompass end-to-end product builds, Web3 strategy, AI-enhanced crypto products, and scaling solutions. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive content tailored to blockchain and AI project stakeholders. Technically, the website leverages a modern tech stack including Ethereum, Solana, React.js, Next.js, and cloud platforms like Google Cloud and AWS. It is hosted on Webflow with fast performance and excellent mobile optimization. The site integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and LinkedIn Insight, balanced with a robust cookie consent mechanism supporting GDPR compliance. From a security perspective, the site enforces HTTPS and uses CAPTCHA protections on forms, but lacks explicit security headers and published security policies or incident response contacts. The absence of WHOIS domain registration data is a notable concern, reducing transparency and trustworthiness despite the professional business presentation. Overall, CleevioX demonstrates a strong market position and digital maturity with minor security and transparency gaps. Strategic improvements in domain registration disclosure, security policy publication, and enhanced security headers would further strengthen their security posture and business credibility.

C

Culture Amp

whereshouldwebeginatwork.com

58

The website 'At Work - Esther Perel x Culture Amp' presents a collaborative product combining Esther Perel's relational expertise with Culture Amp's workplace research to offer a 100-question game aimed at transforming workplace culture. The site targets team leaders and managers seeking to foster meaningful relationships at work. Technically, the site is built with modern frameworks such as Next.js and React, hosted on Vercel, and uses Sanity CMS for content management. It includes marketing and analytics tools like Facebook Pixel and LinkedIn Insight Tag, indicating moderate user tracking. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. The WHOIS data shows inconsistencies, notably a future domain creation date, which raises trust concerns despite the professional and consistent branding on the site. Overall, the site is functional and professionally designed but would benefit from improved transparency in privacy, security policies, and domain registration details.

L

LabRulez s.r.o.

gcms.cz

57

LabRulez GCMS is a specialized Czech online portal dedicated to the field of gas chromatography and mass spectrometry, offering a comprehensive range of resources including news, scientific articles, webinars, job listings, and a marketplace for analytical instruments. The portal serves a niche audience of analytical chemists, researchers, and laboratory professionals, positioning itself as a trusted information and commerce hub within the analytical chemistry community. The business operates under LabRulez s.r.o., established in 2012, and maintains a consistent brand presence across related domains such as lcms.cz and icpms.cz. Technically, the website is built using modern web technologies including React and Next.js, hosted and secured via Cloudflare CDN. It employs advanced tracking and analytics tools such as Google Tag Manager, Fathom Analytics, and Leady for user behavior insights while maintaining GDPR-compliant cookie consent mechanisms. The site demonstrates good performance, mobile optimization, and accessibility standards, supported by structured data for enhanced SEO. From a security perspective, the site enforces HTTPS with strong SSL configuration and benefits from Cloudflare's security headers. However, explicit security policies and incident response information are not publicly disclosed, representing an area for improvement. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, LabRulez GCMS presents a professional, trustworthy, and well-maintained digital presence with strong business credibility and technical maturity. Strategic enhancements in security transparency and incident response readiness could further strengthen its security posture and user trust.

L

LabRulez s.r.o.

lcms.cz

59

LabRulez s.r.o. operates the LabRulez LCMS portal, a specialized online platform dedicated to the field of liquid chromatography and mass spectrometry. The website serves as a comprehensive resource offering news, scientific articles, webinars, job listings, and a marketplace for analytical instruments. It targets professionals and researchers in analytical chemistry, particularly those focused on chromatography and mass spectrometry technologies. The company has established itself as a niche leader in this domain with a consistent brand presence and a content-rich platform that supports the scientific community in the Czech Republic and neighboring regions. Technically, the website is built on modern web technologies including React and Next.js, leveraging Cloudflare for DNS and CDN services. It integrates analytics and marketing tools such as Google Tag Manager, Fathom Analytics, and Leady tracking. The site demonstrates good performance, mobile optimization, and accessibility standards. SEO practices are well implemented with comprehensive metadata, Open Graph tags, and structured data (JSON-LD) to enhance search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. It provides cookie consent mechanisms aligned with GDPR requirements and maintains privacy and terms of service documentation. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. No vulnerabilities or suspicious activities were detected in the analysis. Overall, LabRulez LCMS presents a professional, trustworthy, and well-maintained online presence with a strong focus on its scientific niche. The site supports its users with valuable content and services while maintaining good technical and security standards. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

L

LabRulez s.r.o.

icpms.cz

56

LabRulez s.r.o. operates the icpms.cz website, a specialized online portal dedicated to the field of inductively coupled plasma mass spectrometry and related analytical chemistry disciplines. The site offers a comprehensive range of content including news articles, scientific publications, webinars, product and service listings, job offers, and a marketplace for laboratory instruments. The business targets analytical chemists, researchers, and laboratory professionals primarily in the Czech Republic but with international reach through partnerships and content. The company has been established since 2012, reflecting a mature presence in its niche market. Technically, the website is built on modern web technologies including React and Next.js, hosted behind Cloudflare for performance and security. It employs various analytics and tracking tools such as Google Tag Manager, Fathom Analytics, and Leady, with a cookie consent mechanism in place. The site demonstrates good SEO, mobile optimization, and accessibility standards, providing a positive user experience. From a security perspective, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact information, which could be improved to enhance trust and compliance. Privacy policies and terms of service are present but could be expanded to better address GDPR requirements. Overall, icpms.cz presents as a professional, trustworthy, and content-rich portal serving a specialized scientific community. Strategic improvements in privacy compliance and security transparency would further strengthen its position and user confidence.

A

academymuseum.org

academymuseum.org

48

The website www.academymuseum.org appears to represent a museum or cultural institution, likely related to an academy or art exhibitions. However, the provided HTML content is minimal, lacking visible business descriptions, contact information, or detailed content. The site uses modern web technologies such as Next.js and React, with Stripe.js integrated for payment processing, indicating some e-commerce or ticketing functionality. Despite this, the site lacks visible privacy, cookie, or terms of service policies, and no contact details or social media links are present in the analyzed content. The WHOIS data is unavailable due to a malformed request, preventing verification of domain registration details and reducing trustworthiness. Security posture is weak, with no detected security headers or SSL configuration details, and no forms or user input fields are visible to assess data protection practices. Overall, the site is accessible without WAF or security challenges but provides limited information for a comprehensive security and compliance assessment.

S

Sanity

sanity.work

61

Sanity is a technology company providing a comprehensive content operating system designed for developers, content creators, and business leaders. Their platform offers a fully customizable backend for AI, automations, and content applications, positioning them as an innovative leader in the headless CMS and content management space. The website reflects a mature digital presence with a strong focus on developer tools, enterprise solutions, and AI-powered content workflows. Technically, the site leverages modern frameworks such as React, Next.js, and TypeScript, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, complemented by comprehensive privacy and cookie policies indicating GDPR compliance. The absence of WHOIS data suggests privacy protection, which is typical for SaaS companies. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

B

Bad Flash Bar Karlín

badflash-karlin.cz

64

Bad Flash Bar Karlín is a small hospitality business specializing in craft beers from its own brewery and partner breweries, located in Karlín, Czechia. The website provides a comprehensive digital presence with detailed information about the bar, its offerings, and reservation services. The technical infrastructure is modern, leveraging Next.js and React frameworks, hosted likely by Active24, with integrations for payment and mapping services. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no explicit security or incident response policies are published. Privacy and cookie policies are present and GDPR compliant, with user consent mechanisms implemented. Overall, the website is professional, user-friendly, and trustworthy, targeting mature audiences interested in craft beer and bar experiences.

B

Bad Flash Bar Krymská

badflash-krymska.cz

64

Bad Flash Bar Krymská is a local hospitality business operating a bar located in Prague 10, Czechia, specializing in a diverse selection of draft and bottled beers. The business targets local customers and beer enthusiasts, offering a stylish and welcoming atmosphere with 12 draft beers on tap and a variety of domestic and international bottled beers. The website is built on a modern tech stack including Next.js and React, hosted with reputable providers and utilizing Cloudflare for CDN and security. It features good performance, mobile optimization, and clear navigation. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. The domain is recently registered but consistent with the business's online presence. Overall, the website is professional, trustworthy, and well-maintained, supporting the business's local market position.

Unified is a well-established ecommerce agency based in Richmond, London, specializing in ecommerce strategy, design, development, and digital marketing services for premium and B2B brands. The company leverages expertise in leading ecommerce platforms such as Shopify Plus, Adobe Commerce (Magento), and BigCommerce to deliver tailored, growth-focused solutions. Their portfolio includes award-winning case studies and partnerships with recognized brands, positioning them as a trusted partner in the ecommerce space. Technically, the website is built on modern frameworks including Next.js and Storyblok CMS, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and domain protections in place, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, Unified demonstrates a mature digital presence with professional branding, clear contact information, and a solid technical foundation.

G

Guild Education, Inc.

guildeducation.com

67

Guild Education, Inc. is an established enterprise-level company specializing in transforming education and skilling into strategic talent advantages for businesses. Their platform offers education benefits, customized cohort learning, and skill-specific programs aimed at improving recruitment, retention, mobility, and diversity. The company serves both employers and employees, positioning itself as a leader in the education benefits market with a strong client base including major corporations like Pepsico, Hilton, and Chipotle. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and uses a reputable CMS (Storyblok). It integrates advanced analytics and tracking tools like Segment, Google Tag Manager, and FullStory, indicating a mature digital infrastructure. The site is fast, mobile-optimized, and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS, uses domain locking status flags, and employs reputable third-party services. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published. Privacy compliance is strong with comprehensive privacy and cookie policies, and GDPR compliance is indicated. Overall, the website presents a low-risk profile with high professionalism and trustworthiness. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response information, and considering a vulnerability disclosure program to further enhance security posture and trust.

P

Private by Design, LLC

splitbee.io

65

Splitbee was a technology company providing an all-in-one analytics and conversion tool aimed at website owners and digital marketers. The company was founded in 2020 and has since sunset its service, with the team joining Vercel to continue analytics development. The website serves primarily as a sunset notice and redirection to Vercel Analytics. Technically, the site is built on modern frameworks such as Next.js and React, hosted on Vercel, and uses Cloudflare DNS. The site is performant, mobile-optimized, and accessible. Security posture is moderate with HTTPS enforced and domain transfer protections in place, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No contact or incident response information is provided, limiting user trust and compliance transparency.

I

Intuit Credit Karma

creditkarma.com

63

Intuit Credit Karma is a leading personal finance platform offering free credit scores, reports, and personalized financial product recommendations. With a large user base exceeding 140 million members, it operates under the Intuit Inc. umbrella, providing a trusted and comprehensive suite of financial tools including credit cards, loans, insurance, and money management. The website demonstrates a high level of digital maturity, leveraging modern web technologies such as React and Next.js, hosted on Akamai CDN, and monitored with New Relic for performance and reliability. The design is professional, mobile-optimized, and user-friendly, supporting a seamless user experience. Security posture is strong with enforced HTTPS, encryption, and security headers, although explicit public privacy and cookie policies are not found in the provided content. Overall, the site is trustworthy and well-positioned in the finance sector.

D

Dorohlíku - rohlík jak ho neznáte

dorohliku.cz

56

Dorohliku.cz is a Czech-based food service website specializing in traditional Czech dishes served in crispy rohlík bread. Founded in 2020, the business targets general consumers seeking quick, quality Czech comfort food, delivered via modern automated vending machines. The website employs modern web technologies including React and Next.js, with integrations such as Google Tag Manager and Google Maps API to enhance user experience and analytics. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the domain registration details are consistent with the business claims, indicating legitimacy. Strategic improvements in privacy disclosures, security headers, and contact transparency would enhance trust and compliance.

U

U Dřeváka Beer&Grill

udrevaka.cz

66

U Dřeváka Beer&Grill is a small hospitality business operating a restaurant and bar located in Brno, Czechia. The company offers food delivery, takeaway, and reservation services through a professionally designed website that integrates an online menu and ordering platform. The business has an established market presence since 2012 and maintains active social media profiles on Google, Facebook, and Instagram to engage with customers. The website is built on modern web technologies including React and Next.js, hosted likely via the registrar's infrastructure, and leverages the ChoiceQR platform for digital ordering and management. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is addressed with clear privacy and cookie policies and a consent mechanism. However, explicit security policies and incident response contacts are not published. Overall, the website is well-optimized for performance, mobile use, and SEO, providing a trustworthy and user-friendly experience for mature audiences interested in dining and alcoholic beverages.

S

swap.fm

swap.fm

55

The website swap.fm appears to be a minimal landing page for a platform likely related to music or media, featuring options to log in or join a waitlist. The site is built using modern web technologies such as React and Next.js and is hosted on Vercel, indicating a contemporary technical infrastructure. However, the content is very limited, with no detailed business descriptions, contact information, or policy documents available. Security posture is basic, with HTTPS enabled but lacking visible security headers and formal privacy or cookie policies. The use of Google Tag Manager suggests some level of user tracking, but privacy compliance is minimal. Overall, the site presents a low level of business credibility and trustworthiness due to the lack of transparency and minimal content.

C

Costco Wholesale Corporation

costco.com

55

Costco Wholesale Corporation is a leading global membership-based wholesale retailer offering a wide range of products including electronics, furniture, appliances, and more at competitive warehouse prices. The company operates an extensive e-commerce platform alongside its physical warehouse locations, targeting both general consumers and business customers. The website reflects a mature digital presence with a focus on user experience, mobile optimization, and comprehensive product offerings. Technically, the site leverages modern frameworks such as Next.js and React, supported by Akamai CDN for performance and scalability. Security measures are robust, including HTTPS enforcement, security headers, and session management, although no explicit incident response or vulnerability disclosure pages were found. Overall, the site demonstrates a high level of professionalism and trustworthiness consistent with a large enterprise retail brand.

I

Intuit Inc.

intuit.com

79

Intuit Inc. is a leading financial software company providing a suite of products including TurboTax, Credit Karma, QuickBooks, and Mailchimp. The company targets individual consumers, small and medium businesses, and accounting professionals, offering SaaS-based solutions that empower users with financial confidence. Intuit holds a strong market position as a trusted brand in the finance and technology sectors. The website reflects a mature digital infrastructure leveraging modern web technologies such as React and Next.js, optimized for performance and mobile responsiveness. Security posture is robust with HTTPS enforcement, comprehensive security headers, and privacy compliance mechanisms including GDPR adherence and cookie consent management. While WHOIS data is privacy protected, the domain and website content align with Intuit's corporate identity, supporting legitimacy. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with industry best practices.

P

Plzeňská vstupenka

plzenskavstupenka.cz

76

Plzeňská vstupenka is an established online ticket sales platform founded in 2004, specializing in cultural events such as theatre, concerts, musicals, opera, and ballet in the Pilsen region of the Czech Republic. The website offers a comprehensive range of event listings and ticket purchasing options, targeting residents and visitors interested in cultural experiences. The platform positions itself as the largest provider of event tickets in the region, emphasizing a broad and diverse catalog of cultural offerings. Technically, the website is built using modern web technologies including Next.js and React, with integration of Google Tag Manager, Facebook Pixel, and Cookiebot for analytics and privacy compliance. Hosting is provided by REG-WEBGLOBE, consistent with the domain registration data. Security posture is solid with HTTPS enforced and a detailed cookie consent mechanism, although explicit security headers and incident response policies are not publicly visible. Privacy compliance is strong, with GDPR-aligned cookie consent and detailed cookie declarations. Overall, the website demonstrates a professional and trustworthy digital presence with good user experience and content quality.

D

Discover Magazine

discovermagazine.com

63

Discover Magazine is a well-established science media publication providing accessible and relevant science news, feature articles, and multimedia content. It operates under LabX Media Group and targets a broad audience interested in science, health, environment, and technology. The website offers subscription services, newsletters, and advertising opportunities, positioning itself as a reputable source in the science media sector. Technically, the site uses modern frameworks such as Next.js and React, integrates with major analytics and advertising platforms, and is hosted on a reliable CDN infrastructure. The site is mobile-optimized with good SEO and accessibility features, delivering a professional user experience. Security-wise, the site enforces HTTPS and uses reputable third-party services but lacks some security headers and published security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. The absence of WHOIS registration data is a concern, reducing trust scores, though the site's content and social media presence support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security disclosures.

S

SafeTalk

safetalk.cz

66

SafeTalk is a SaaS provider specializing in whistleblowing reporting systems designed to help companies comply with whistleblower protection laws, particularly targeting companies with over 50 employees. The platform emphasizes secure, anonymous communication between employees and management, facilitating legal compliance and internal investigations. The website presents a professional and user-friendly interface built on modern web technologies such as React, Next.js, and Material-UI, indicating a mature digital infrastructure. Tracking and analytics tools like Microsoft Clarity and Google Tag Manager are used, reflecting a moderate level of user behavior analysis. Security posture is solid with HTTPS enforced and secure form handling, though the absence of explicit security headers and privacy policies suggests room for improvement. The lack of WHOIS data transparency limits full trust verification of the domain registration, but the website content and design indicate a legitimate business. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear incident response and vulnerability disclosure information.

S

Skool: Discover Communities or Create Your Own

skool.com

61

Skool.com is an online community platform that enables users to discover and create communities, some of which are free and others paid. The platform targets creators, learners, and community builders, offering monetization opportunities. The website is built using modern technologies including React and Next.js, hosted on AWS infrastructure with AWS WAF protection. The site demonstrates excellent design quality, mobile optimization, and user experience, with a strong focus on community engagement and education. However, the absence of explicit privacy, cookie, and terms of service policies, as well as missing contact information, indicates gaps in privacy compliance and user trust mechanisms. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy, though the website content and technical setup suggest a legitimate business operation. Overall, the site scores well on content and technical implementation but needs improvements in privacy compliance and transparency.

S

SafeTalk

safetalk.io

67

SafeTalk is a SaaS provider specializing in whistleblowing reporting systems designed to help companies comply with whistleblower protection laws efficiently and securely. The platform targets medium to large companies, particularly those with over 50 employees, offering secure anonymous communication and internal investigation tools. The website is professionally designed, multilingual, and emphasizes legal compliance and cybersecurity. Technically, it leverages modern frameworks such as Next.js and Material-UI, with integrations for analytics and marketing tools like Microsoft Clarity and Google Tag Manager. Security posture is strong with HTTPS and secure form handling, though security headers and explicit privacy policies are lacking. WHOIS data is unavailable, likely due to privacy protection, which is justified for this business type. Overall, the site is trustworthy and well-positioned in its niche.

T

The City Escape Room

thecityescaperoom.com

45

The City Escape Room is a small hospitality business offering physical escape room entertainment experiences in three major Spanish cities: Madrid, Barcelona, and Valencia. The website serves as a landing page directing users to city-specific subpages. The business appears to be relatively new, with domain registration dating back to early 2022, consistent with the business's likely founding date. The company targets a general audience interested in leisure and entertainment activities in Spain. Technically, the website is built using modern web technologies including Next.js and React, with DNS managed via Cloudflare. The site is moderately optimized for mobile devices and has a basic but consistent design. However, the website lacks visible privacy, cookie, or terms of service policies, and no contact information or social media links are present in the provided homepage HTML. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site does not show evidence of security headers or DNSSEC, and SSL configuration details are unknown but likely present given modern hosting practices. The absence of privacy and cookie policies and contact information reduces compliance and trustworthiness. No forms or data collection mechanisms were found on the homepage, minimizing immediate data protection concerns. Overall, the website is functional and safe for general audiences but would benefit from enhanced privacy compliance, improved security headers, and more transparent contact and business information to increase trust and regulatory adherence.

R

Render

onrender.com

70

Render is a mature cloud application platform founded in 1998, offering developers and teams a fast, scalable environment to build, deploy, and manage applications. The platform supports a wide range of services including web services, static sites, cron jobs, and databases, positioning itself as a trusted solution for cloud infrastructure needs. The website demonstrates a high level of digital maturity with modern technologies such as Next.js, React, and integration with analytics and marketing tools like Google Analytics and Segment. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although incident response contact details and vulnerability disclosure mechanisms could be enhanced. Overall, Render presents a professional, trustworthy, and well-structured online presence suitable for its target audience of developers and technology teams.

B

Beeper

beeperstatus.com

51

Beeperstatus.com serves as the official status monitoring page for Beeper, a technology company providing multi-platform messaging services. The website offers real-time uptime and operational status for Beeper's infrastructure and applications including desktop, Android, and iOS apps, as well as integrations with popular platforms like WhatsApp, Instagram, and Facebook. The site targets Beeper users and customers who require transparency about service availability and incident updates. Technically, the site is built using modern web technologies such as Next.js and React, with image hosting via Cloudinary. It is well-optimized for performance and mobile responsiveness, providing a smooth user experience. The site lacks a traditional CMS and appears to be a specialized status page likely hosted on a platform like Vercel or similar. From a security perspective, the website enforces HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. However, it lacks explicit security headers and does not provide a security policy or incident response contact details. Privacy compliance is minimal, with no visible privacy or cookie policies, which could be improved to meet GDPR and other regulations. Overall, the website is trustworthy and professional in its presentation but would benefit from enhanced privacy and security disclosures. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure program to strengthen user trust and compliance.

Paradigm Publishing Services is a division of De Gruyter Brill focused on providing comprehensive scholarly publishing services including global distribution, open access publishing, digitization, and hosting. The company targets academic publishers, libraries, and scholarly communities, offering tailored solutions to enhance research discoverability and financial sustainability. Their market position is strong due to the backing of De Gruyter Brill and a broad portfolio of services and brands such as Sciendo and Ubiquity. Technically, the website is built on modern frameworks like Next.js and React, hosted on AWS infrastructure, and employs security best practices including HTTPS, hCaptcha for form protection, and security headers. The site is mobile-optimized, fast, and SEO-friendly, reflecting a mature digital presence. Security posture is robust with no critical vulnerabilities detected, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Business credibility is high with detailed leadership information, partner affiliations, and transparent contact options. Overall, Paradigm Publishing Services presents a professional, trustworthy, and secure online presence suitable for its academic and publishing audience.

R

Radonova

radonova.com

71

Radonova is a specialized company providing accurate radon test kits for both residential and commercial use, focusing on safety and environmental health. Their market position is that of a trusted provider in the energy/environmental testing sector, targeting homeowners and businesses concerned with radon exposure. The website is built on modern technologies including Next.js and Material-UI, hosted likely on Vercel, and incorporates standard analytics and cookie consent tools. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and DNSSEC are missing. Privacy compliance is partial, with cookie consent present but no explicit privacy or terms policies found. Overall, the site is professional, trustworthy, and well-structured, but could improve transparency on privacy and security policies.